[CB] Bump NPM dependencies (#4270)

* dbeaver/pro#8943 updates yarn locks

* updates vite

* updates vite-plugin-svgr

* removes CVEs

* reverts vite to update it later

* updates yarn lock

* updates yarn lock

* updates uuid

* removes axios CVE

* reverts @codemirror/search in order to fix the issue with replace 1 symbol (broken focus next)

* locks versions of other codemirror packages in order to keep versions consistent

---------

Co-authored-by: Evgenia <139753579+EvgeniaBzzz@users.noreply.github.com>
Co-authored-by: mr-anton-t <42037741+mr-anton-t@users.noreply.github.com>

webapp/common-typescript/@dbeaver/cli/src/vitest.config.ts

@@ -1,6 +1,6 @@
 /*
  * CloudBeaver - Cloud Database Manager
- * Copyright (C) 2020-2025 DBeaver Corp and others
+ * Copyright (C) 2020-2026 DBeaver Corp and others
  *
  * Licensed under the Apache License, Version 2.0.
  * you may not use this file except in compliance with the License.

webapp/package.json

@@ -18,16 +18,30 @@
     "tar": ">=7.5.11",
     "lodash": ">=4.18.0",
     "@isaacs/brace-expansion": ">=5.0.1",
-    "axios": ">= 1.15.0",
+    "axios": ">= 1.15.1",
     "minimatch": ">=10.2.3",
     "rollup": ">=4.59.0",
     "koa": ">=2.16.4",
     "immutable": ">=4.3.8",
-    "serialize-javascript": ">=7.0.3",
+    "serialize-javascript": ">=7.0.5",
     "flatted": ">=3.4.2",
     "picomatch": ">=2.3.2",
     "happy-dom": ">=20.8.8",
-    "vite": "7.3.2"
+    "vite": "7.3.2",
+    "@codemirror/autocomplete": "6.20.1",
+    "@codemirror/commands": "6.10.3",
+    "@codemirror/lang-css": "6.3.1",
+    "@codemirror/lang-html": "6.4.11",
+    "@codemirror/lang-javascript": "6.2.5",
+    "@codemirror/lang-json": "6.0.2",
+    "@codemirror/lang-sql": "6.10.0",
+    "@codemirror/lang-xml": "6.1.0",
+    "@codemirror/language": "6.12.3",
+    "@codemirror/lint": "6.9.5",
+    "@codemirror/merge": "6.12.1",
+    "@codemirror/search": "6.6.0",
+    "@codemirror/state": "6.6.0",
+    "@codemirror/view": "6.41.1"
   },
   "scripts": {
     "test": "dbeaver-test",

webapp/packages/core-utils/package.json

@@ -31,7 +31,7 @@
     "modern-screenshot": "^4",
     "tslib": "^2",
     "underscore": "^1",
-    "uuid": "^13",
+    "uuid": "^14",
     "vitest": "^4",
     "whatwg-mimetype": "^5",
     "zod": "^4",

webapp/packages/product-base/src/baseConfigurationPlugin.ts

@@ -1,6 +1,6 @@
 /*
  * CloudBeaver - Cloud Database Manager
- * Copyright (C) 2020-2025 DBeaver Corp and others
+ * Copyright (C) 2020-2026 DBeaver Corp and others
  *
  * Licensed under the Apache License, Version 2.0.
  * you may not use this file except in compliance with the License.

webapp/packages/product-base/src/manualChunks.ts

@@ -1,6 +1,6 @@
 /*
  * CloudBeaver - Cloud Database Manager
- * Copyright (C) 2020-2025 DBeaver Corp and others
+ * Copyright (C) 2020-2026 DBeaver Corp and others
  *
  * Licensed under the Apache License, Version 2.0.
  * you may not use this file except in compliance with the License.
@@ -28,43 +28,43 @@ export const manualChunks = (): PluginOption => [
                   // Use a non-recursive approach to detect circular dependencies
                   const visited = new Set<string>();
                   const queue = [moduleId];
-                  
+
                   // Track which modules we've already determined to be sync
                   const syncModules = new Set<string>();
-                  
+
                   while (queue.length > 0) {
                     const currentId = queue.shift()!;
-                    
+
                     // Skip if we've already processed this module in this traversal
                     if (visited.has(currentId)) {
                       continue;
                     }
-                    
+
                     visited.add(currentId);
-                    
+
                     const info = getModuleInfo(currentId);
-                    
+
                     // No module info available, assume it's sync as a fallback
                     if (!info) {
                       syncModules.add(currentId);
                       continue;
                     }
-                    
+
                     // Entry modules are always sync
                     if (info.isEntry) {
                       syncModules.add(currentId);
                       continue;
                     }
-                    
+
                     // If there are no importers at all, it might be dynamically imported somewhere
                     if (!info.importers || info.importers.length === 0) {
                       // Not marking as sync
                       continue;
                     }
-                    
+
                     // If dynamicImporters is undefined or not an array, handle safely
                     const dynamicImports = Array.isArray(info.dynamicImporters) ? info.dynamicImporters : [];
-                    
+
                     // Check if any importer imports this module statically
                     let hasStaticImporter = false;
                     for (const importer of info.importers) {
@@ -73,12 +73,12 @@ export const manualChunks = (): PluginOption => [
                         break;
                       }
                     }
-                    
+
                     if (hasStaticImporter) {
                       syncModules.add(currentId);
                     }
                   }
-                  
+
                   return syncModules.has(moduleId);
                 }