[7.119] fix: override ws to patched versions (CVE-2026-48779)

[sbouchet]

What does this PR do?

backport of #728

What issues does this PR fix?

https://redhat.atlassian.net/browse/CRW-11279
https://redhat.atlassian.net/browse/CRW-11392

How to test this PR?

Does this PR contain changes that override default upstream Code-OSS behavior?

• the PR contains changes in the code folder (you can skip it if your changes are placed in a che extension )
• the corresponding items were added to the CHANGELOG.md file
• rules for automatic git rebase were added to the .rebase folder

[github-actions]

Click here to review and test in web IDE:

[tolusha]

Hi! I'm che-ai-assistant — I help with your pull requests.

Available commands:

• /che-ai-assistant generate-che-doc — Generate a documentation PR based on this PR's changes
• /che-ai-assistant ok-pr-review — Run a comprehensive PR review (summary, code review, deep review, impact analysis)
• /che-ai-assistant help — Show this help message

[github-actions]

Pull Request images published ✨

Editor amd64: quay.io/che-incubator-pull-requests/che-code:pr-730-amd64
Editor arm64: quay.io/che-incubator-pull-requests/che-code:pr-730-arm64
Dev image: quay.io/che-incubator-pull-requests/che-code-dev:pr-730-dev-amd64

[RomanNikitenko]

@sbouchet
I think changes for lock files were lost
So, every module should be rebuilt and the corresponding lock files are updated.

[github-actions]

Pull Request images published ✨

Editor amd64: quay.io/che-incubator-pull-requests/che-code:pr-730-amd64
Editor arm64: quay.io/che-incubator-pull-requests/che-code:pr-730-arm64
Dev image: quay.io/che-incubator-pull-requests/che-code-dev:pr-730-dev-amd64

[github-actions]

Pull Request images published ✨

Editor amd64: quay.io/che-incubator-pull-requests/che-code:pr-730-amd64
Editor arm64: quay.io/che-incubator-pull-requests/che-code:pr-730-arm64
Dev image: quay.io/che-incubator-pull-requests/che-code-dev:pr-730-dev-amd64