chore: fix moderate CVEs in main

[kim-tsao]

Description

Please explain the changes you made here.

There are a number of moderate CVEs that need updating in main:

• CVE-2026-4923 (path-to-regexp)

updated with yarn up -R path-to-regexp

• CVE-2026-22036 (fast-xml-parser)

updated with yarn up -R @aws-sdk/xml-builder

• CVE-2026-33349 (undici)

most versions were updated except for the one coming from infinispan. Added a resolution, similar to what we did in the Z streams

Which issue(s) does this PR fix

• Fixes #?
  https://issues.redhat.com/browse/RHDHBUGS-2964
  https://issues.redhat.com/browse/RHDHBUGS-2966
  https://issues.redhat.com/browse/RHDHBUGS-2965

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

[github-actions]

The container image build workflow finished with status: cancelled.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-4699
• quay.io/rhdh-community/rhdh:pr-4699-74f10646

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@66c9207). Learn more about missing BASE report.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4699   +/-   ##
=======================================
  Coverage        ?   40.98%           
=======================================
  Files           ?      119           
  Lines           ?     2223           
  Branches        ?      561           
=======================================
  Hits            ?      911           
  Misses          ?     1306           
  Partials        ?        6           

Flag	Coverage Δ
rhdh	40.98% <ø> (?)

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 66c9207...74f1064. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.