Fix Dependabot security alerts: bump esbuild, tsx, js-yaml

Co-authored-by: stephentoub <2642209+stephentoub@users.noreply.github.com>

Author: Copilot

java/scripts/codegen/package-lock.json

@@ -65,7 +65,7 @@
         "@types/node": "^25.2.0",
         "@typescript-eslint/eslint-plugin": "^8.54.0",
         "@typescript-eslint/parser": "^8.54.0",
-        "esbuild": "^0.27.2",
+        "esbuild": "^0.28.1",
         "eslint": "^9.0.0",
         "glob": "^13.0.1",
         "json-schema": "^0.4.0",