fix: address npm security vulnerabilities (#154)

- CVE-2025-68429: Upgrade storybook to 8.6.15 (env var exposure in builds)
- CVE-2026-22036: Override undici to >=6.23.0 (DoS via decompression)

Author: ashmortar

package.json

@@ -79,15 +79,15 @@
     "@jsonforms/core": "^3.4.0",
     "@jsonforms/react": "^3.4.0",
     "@semantic-release/npm": "13.1.3",
-    "@storybook/addon-essentials": "^8.6.12",
-    "@storybook/addon-interactions": "^8.6.12",
-    "@storybook/addon-links": "^8.6.12",
-    "@storybook/addon-mdx-gfm": "^8.6.12",
-    "@storybook/addon-onboarding": "^8.6.12",
-    "@storybook/blocks": "^8.6.12",
-    "@storybook/react": "^8.6.12",
-    "@storybook/react-vite": "^8.6.12",
-    "@storybook/test": "^8.6.12",
+    "@storybook/addon-essentials": "^8.6.15",
+    "@storybook/addon-interactions": "^8.6.15",
+    "@storybook/addon-links": "^8.6.15",
+    "@storybook/addon-mdx-gfm": "^8.6.15",
+    "@storybook/addon-onboarding": "^8.6.15",
+    "@storybook/blocks": "^8.6.15",
+    "@storybook/react": "^8.6.15",
+    "@storybook/react-vite": "^8.6.15",
+    "@storybook/test": "^8.6.15",
     "@testing-library/jest-dom": "^6.5.0",
     "@testing-library/react": "^14.3.1",
     "@testing-library/user-event": "^14.5.2",
@@ -115,15 +115,16 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "semantic-release": "^23.1.1",
-    "storybook": "^8.6.12",
+    "storybook": "^8.6.15",
     "typescript": "^5.6.2",
     "vite": "^6.4.1",
     "vitest": "^4.0.15"
   },
   "pnpm": {
     "overrides": {
       "form-data": ">=4.0.4",
-      "@semantic-release/npm": "13.1.3"
+      "@semantic-release/npm": "13.1.3",
+      "undici": "^6.23.0"
     }
   },
   "dependencies": {