chore(deps): bump flatted and botframework-webchat in /samples/react-bot-framework-secure/extension

[dependabot]

Removes flatted. It's no longer used after updating ancestor dependency botframework-webchat. These dependencies need to be updated together.

Removes flatted

Updates botframework-webchat from 4.6.0 to 4.18.0

Release notes

Sourced from botframework-webchat's releases.

[4.18.0] - 2024-07-10

Subresource Integrity

The CDN URL will be online in about a day after we completed publish to NPM.

<script
  crossorigin="anonymous"
  integrity="sha384-YCF4860lf811lnrrIBL4pfZ+UqiNit+8lXEhSY3R+dSc+C1rg6UnEQR5avdOTbj0"
  src="https://cdn.botframework.com/botframework-webchat/4.18.0/webchat.js"
></script>

<script
  crossorigin="anonymous"
  integrity="sha384-RuyQM7i2h9QDvJTm5quFymi0qfuWyIZocRdsgUaPIhlZnAM/Qz1/YnUxH55Dt9Rd"
  src="https://cdn.botframework.com/botframework-webchat/4.18.0/webchat-es5.js"
></script>

<script
  crossorigin="anonymous"
  integrity="sha384-YXzfTEuq6x+8VEBZcHmPE9rM+NpSTVfRQsU1X0v4drgjp3S4F8d8rnq/anR3WLpj"
  src="https://cdn.botframework.com/botframework-webchat/4.18.0/webchat-minimal.js"
></script>

Changelog

[4.18.0] - 2024-07-10

Added

• (Experimental) Added initial decorators support, in PR #5205, by @​OEvgeny
  • Introduced internal botframework-webchat-api/decorator import, in PR #5205, by @​OEvgeny
  • Added DecoratorComposer and ActivityDecorator to be used for decorating activity border, in PR #5205, by @​OEvgeny

Fixed

• Read deeper into citation objects in order to provide names, in PR #5215, by @​beyackle2
• Improved performance for useActivityWithRenderer, in PR #5172, by @​OEvgeny
• Fixes #5162. Improved performance for useActivityTreeWithRenderer, in PR #5163, by @​compulim
• Fixes #5175. PrecompiledGlobalize.js is emitted instead of .cjs, by @​compulim in PR #5181
• Improved performance for BasicTranscript, in PR #5183, by @​OEvgeny
• Fixed potential memory usage issues caused by useActivitiesWithRenderer, in PR #5183, by @​OEvgeny
• Improved performance for useMemoized, in PR #5190, by @​OEvgeny
• Fixed send box zoomed in when clicked on mobile Safari, in PR #5192, by @​OEvgeny
• Added missing support for chat history scroll with keyboard when Fluent send box is focused, in PR #5191, by @​OEvgeny

... (truncated)

Changelog

Sourced from botframework-webchat's changelog.

[4.18.0] - 2024-07-10

Added

• (Experimental) Added initial decorators support, in PR #5205, by @​OEvgeny
  • Introduced internal botframework-webchat-api/decorator import, in PR #5205, by @​OEvgeny
  • Added DecoratorComposer and ActivityDecorator to be used for decorating activity border, in PR #5205, by @​OEvgeny
• Added styleOptions.bubbleImageMaxHeight and styleOptions.bubbleImageMinHeight for variable image height, in PR #5236, by @​compulim

Changed

• Bumped all dependencies to the latest versions, by @​compulim in PR #5174 and PR #5181
  • Production dependencies
    • classnames@2.5.1
    • core-js@3.37.0
    • deep-freeze-strict@1.1.1
    • merge-refs@1.3.0
    • mime@4.0.3
    • p-defer@4.0.1
    • redux-saga@1.3.0
    • redux@5.0.1
    • sanitize-html@2.13.0
    • swiper@8.4.7
    • whatwg-fetch@3.6.20
  • Development dependencies
    • @fluentui/react-components@9.49.2
    • @types/node@20.12.11
    • @typescript-eslint/eslint-plugin@7.8.0
    • @typescript-eslint/parser@7.8.0
    • adm-zip@0.5.12
    • dotenv@16.4.5
    • esbuild@0.21.1
    • eslint-plugin-import@2.29.1
    • eslint-plugin-prettier@5.1.3
    • eslint-plugin-react-hooks@4.6.2
    • eslint-plugin-react@7.34.1
    • eslint-plugin-security@3.0.0
    • eslint@8.57.0
    • html-webpack-plugin@5.6.0
    • husky@9.0.11
    • jest-image-snapshot@6.4.0
    • lint-staged@15.2.2
    • nodemon@3.1.0
    • nopt@7.2.1
    • p-defer@4.0.1
    • prettier@3.2.5
    • selenium-webdriver@4.20.0
    • serve@14.2.3
    • source-map-loader@5.0.0
    • terser-webpack-plugin@5.3.10

... (truncated)

Commits

• 20f73e0 4.18.0 (#5240)
• c9247bf Fix: decorator import in CJS legacy envs (#5231)
• 336dd7c proritize given citation names as titles (#5215)
• 6c3063d feat: Add decorators (#5205)
• 745a603 Update Docker registry (#5203)
• 157a8cb Update Gemini dev server and serve 4.17 (#5199)
• 6ff90db Fluent: fix DTMF key command usage (#5198)
• 7ced5fa Fluent: sendbox transcript navigation (#5191)
• 058cccb Fluent: increase send box text size to prevent unwanted zoom on mobile (#5192)
• 6eb0f92 Perf: improve useMemoized callback execution time (#5190)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.