GRAL-5897 fix vulnerabilities in example apps

- undici 5.29.0 → 6.25.0 (CVE-2026-1526, CVE-2026-2229) in remix-cars-service
- lodash 4.17.23 → 4.18.1 (CVE-2026-4800) in remix-cars-service, pipedrive-hello-world-glitch, todo, caller, messaging-app-extn-playground, custom-ui-app-docusign

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: likawka

apps/caller/package-lock.json

@@ -32,6 +32,7 @@
     "ws": "^7.5.10",
     "picomatch": "^2.3.2",
     "brace-expansion": "^2.0.3",
-    "path-to-regexp": "0.1.13"
+    "path-to-regexp": "0.1.13",
+    "lodash": "^4.18.0"
   }
 }

apps/caller/package.json

@@ -43,6 +43,7 @@
         "picomatch": "^2.3.2",
         "brace-expansion": "^2.0.3",
         "path-to-regexp": "0.1.13",
-        "handlebars": "^4.7.9"
+        "handlebars": "^4.7.9",
+        "lodash": "^4.18.0"
     }
 }

apps/custom-ui-app-docusign/package-lock.json

@@ -39,6 +39,7 @@
     "picomatch": "^2.3.2",
     "brace-expansion": "^2.0.3",
     "path-to-regexp": "0.1.13",
-    "handlebars": "^4.7.9"
+    "handlebars": "^4.7.9",
+    "lodash": "^4.18.0"
   }
 }

apps/custom-ui-app-docusign/package.json

@@ -34,6 +34,7 @@
     "picomatch": "^2.3.2",
     "brace-expansion": "^2.0.3",
     "path-to-regexp": "0.1.13",
-    "handlebars": "^4.7.9"
+    "handlebars": "^4.7.9",
+    "lodash": "^4.18.0"
   }
 }

apps/messaging-app-extn-playground/package-lock.json

@@ -44,8 +44,9 @@
     "@remix-run/server-runtime": "^2.17.4",
     "@vercel/node": {
       "path-to-regexp": "^6.3.0",
-      "undici": "^5.29.0"
+      "undici": "^6.24.0"
     },
+    "lodash": "^4.18.0",
     "picomatch": "^4.0.4",
     "brace-expansion": "^2.0.3",
     "path-to-regexp": "0.1.13",