Fix dependabot security alerts across workspace (#193)

Resolves 31 open dependabot alerts spanning npm and pip lockfiles.

- pnpm: add overrides for postcss, vite, yaml, flatted, minimatch, rollup
- template: update python-dotenv (1.2.2) and pygments (2.20.0)
- examples/basic-python: bump e2b-desktop to ^2.3.1 (pulls pillow 12.2.0) and python-dotenv to ^1.2.2
- packages/python-sdk: bump dev pytest to ^9.0.3 (pulls pygments 2.20.0)
- examples/basic-javascript: bump electron to ^39.8.5 (resolves 17 electron CVEs)

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: mishushakov

examples/basic-javascript/package-lock.json

@@ -13,6 +13,6 @@
   "dependencies": {
     "@e2b/desktop": "^1.3.0",
     "dotenv": "^16.4.7",
-    "electron": "^35.0.1"
+    "electron": "^39.8.9"
   }
 }

examples/basic-javascript/package.json

@@ -7,9 +7,9 @@ readme = "README.md"
 
 [tool.poetry.dependencies]
 python = "^3.11"
-e2b-desktop = "^1.2.0"
+e2b-desktop = "^2.3.1"
 pywebview = "^5.4"
-python-dotenv = "^1.0.1"
+python-dotenv = "^1.2.2"
 
 
 [build-system]

examples/basic-python/poetry.lock

@@ -19,5 +19,16 @@
     "eslint-plugin-unused-imports": "^3.0.0",
     "@stylistic/eslint-plugin-ts": "^1.6.2",
     "prettier": "^3.6.2"
+  },
+  "pnpm": {
+    "overrides": {
+      "postcss": "^8.5.10",
+      "vite": "^7.3.2",
+      "yaml": "^2.8.3",
+      "flatted": "^3.4.2",
+      "minimatch@3": "^3.1.3",
+      "minimatch@9": "^9.0.7",
+      "rollup": "^4.59.0"
+    }
   }
 }

examples/basic-python/pyproject.toml

@@ -17,7 +17,7 @@ requests = "^2.32.3"
 pillow = "^12.0.0"
 
 [tool.poetry.group.dev.dependencies]
-pytest = "^7.4.0"
+pytest = "^9.0.3"
 python-dotenv = "^1.0.0"
 pytest-dotenv = "^0.5.2"
 pytest-xdist = "^3.6.1"