fix: resolve non-doc security alerts for 2.6

[shanghaikid]

Summary

• Cherry-pick non-doc security dependency fixes from main into 2.6
• Update root and examples dependency resolutions and lockfiles
• Keep docs changes out of this backport

Verification

• npm run build

[sre-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: shanghaikid

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.29%. Comparing base (dc8cff5) to head (2812751).

Additional details and impacted files

@@           Coverage Diff           @@
##              2.6     #571   +/-   ##
=======================================
  Coverage   97.29%   97.29%           
=======================================
  Files          60       60           
  Lines        4620     4620           
  Branches     1309     1309           
=======================================
  Hits         4495     4495           
  Misses        120      120           
  Partials        5        5           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.