security(deps): upgrade to dockerode@5.0.0

[AviVahl]

• new release drops usage of vulnerable uuid, reducing the vulnerability count.
• also fixed up package-lock.json installing older testcontainers versions for internal packages. they should all be linked now. this deduped several depedencies.

ref: apocas/dockerode#829

[netlify]

✅ Deploy Preview for testcontainers-node ready!

Name	Link
🔨 Latest commit	8d05dda
🔍 Latest deploy log	https://app.netlify.com/projects/testcontainers-node/deploys/69ebfa10b23aca0008785f94
😎 Deploy Preview	https://deploy-preview-1307--testcontainers-node.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[AviVahl]

Heya @cristianrgreco
Any chance you've got time to review/merge this?
We're using testcontainers and currently forcibly override dockerode to fix alerts.

[cristianrgreco]

Hi @AviVahl, I typically defer to Dependabot for updating deps. See #1322 which updates Dockerode + several others.

The reason it's taking a while is because many deps have now dropped support for node 20 (EOL), meaning that I have to too, meaning I have to plan a major release (as I have to bump the minimum node engine requirement). That's why this is taking a while (as well as fitting in this work around my job 😄).

Current issues:

• Undici version bump is breaking the arangojs client, issue raised Failing to connect when using undici 8.x arangodb/arangojs#855. I will likely just defer the undici upgrade if everything else is compatible
• Kafka/redpanda/qdrant are failing with the new v26 LTS due to node-gyp, so the build is currently failing. I can add v26 to the test matrix later though so that's not blocking
• Fix up Use configured health checks as the default wait strategy #1096 to include as part of the major release

I'm hoping to get this all resolved within the next few days.

[AviVahl]

Thank you for the response and explanation.
I'll close this one in favor of the dependabot PR, and will wait for the next major.
Much appreciated.