Bump the npm_and_yarn group across 2 directories with 2 updates

Bumps the npm_and_yarn group with 1 update in the / directory: [tmp](https://github.com/raszi/node-tmp).
Bumps the npm_and_yarn group with 1 update in the /packages/embed directory: [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime).


Updates `tmp` from 0.2.3 to 0.2.5
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.2.3...v0.2.5)

Updates `@babel/runtime` from 7.17.2 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-version: 7.26.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

package-lock.json

@@ -166,7 +166,7 @@
     "@babel/preset-env": "^7.28.0",
     "@babel/preset-react": "^7.27.1",
     "@babel/preset-typescript": "^7.27.1",
-    "@babel/runtime": "^7.28.2",
+    "@babel/runtime": "^7.28.4",
     "@biomejs/biome": "^2.1.3",
     "@happy-dom/jest-environment": "^18.0.1",
     "@testing-library/react": "^12.1.5",

package.json

@@ -115,7 +115,7 @@
     ]
   },
   "dependencies": {
-    "@babel/runtime": "7.28.2",
+    "@babel/runtime": "7.28.4",
     "adaptivecards": "3.0.2",
     "botframework-directlinejs": "0.15.6",
     "botframework-directlinespeech-sdk": "0.0.0-0",

packages/bundle/package.json

@@ -99,7 +99,7 @@
     "typescript": "~5.8.3"
   },
   "dependencies": {
-    "@babel/runtime": "7.28.2",
+    "@babel/runtime": "7.28.4",
     "@redux-devtools/extension": "3.3.0",
     "jwt-decode": "4.0.0",
     "math-random": "2.0.1",

packages/core/package.json

@@ -98,7 +98,7 @@
     "webpack-stats-plugin": "^1.1.3"
   },
   "dependencies": {
-    "@babel/runtime": "7.28.2",
+    "@babel/runtime": "7.28.4",
     "abort-controller": "3.0.0",
     "base64-arraybuffer": "1.0.2",
     "core-js": "3.44.0",

packages/directlinespeech/package.json

@@ -41,7 +41,7 @@
     "@babel/plugin-transform-runtime": "^7.17.0",
     "@babel/preset-env": "^7.16.11",
     "concurrently": "^8.2.2",
-    "express": "^4.19.2",
+    "express": "^5.1.0",
     "html-webpack-plugin": "^5.6.0",
     "http-proxy-middleware": "^3.0.0",
     "jest": "^29.7.0",
@@ -52,7 +52,7 @@
     "webpack-cli": "^5.1.4"
   },
   "dependencies": {
-    "@babel/runtime": "7.17.2",
+    "@babel/runtime": "7.26.10",
     "core-js": "3.37.0",
     "url-search-params-polyfill": "8.2.5",
     "whatwg-fetch": "3.6.20"

packages/embed/package.json

@@ -70,7 +70,7 @@
     "esbuild": "^0.25.8",
     "express": "^5.1.0",
     "global-agent": "^3.0.0",
-    "http-proxy-middleware": "^2.0.9",
+    "http-proxy-middleware": "^3.0.5",
     "istanbul-lib-coverage": "^3.2.2",
     "jest": "^29.7.0",
     "jest-environment-node": "^29.7.0",