fix: Fix 11 security issues in @xmldom/xmldom, defu, @langchain/community and 5 more (#29126)

Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>

package.json

@@ -146,10 +146,8 @@
       "ajv@8": "8.18.0",
       "bn.js@4": "5.2.3",
       "bn.js@5": "5.2.3",
-      "langsmith": ">=0.4.6",
       "lodash": "4.18.1",
       "lodash-es": "4.18.1",
-      "@xmldom/xmldom": "0.8.12",
       "word-wrap@<=1.2.4": "1.2.4",
       "minimatch@<=5.1.8": "5.1.8",
       "minimatch@10": "10.2.3",
@@ -158,7 +156,6 @@
       "follow-redirects": "1.16.0",
       "express-rate-limit": "8.2.2",
       "underscore": "1.13.8",
-      "fast-xml-parser": "5.5.7",
       "flatted": "3.4.2",
       "handlebars": "4.7.9",
       "path-to-regexp": "8.4.0",
@@ -166,7 +163,11 @@
       "picomatch@2": "2.3.2",
       "picomatch@4": "4.0.4",
       "avsc": "5.7.9",
-      "brace-expansion@<=2.1.0": "2.1.0"
+      "brace-expansion@<=2.1.0": "2.1.0",
+      "@xmldom/xmldom": "0.8.13",
+      "langsmith": "0.5.19",
+      "yaml@<=2.8.3": "2.8.3",
+      "fast-xml-parser": "5.7.0"
     },
     "patchedDependencies": {
       "bull@4.16.4": "patches/bull@4.16.4.patch",

packages/cli/package.json

@@ -133,7 +133,7 @@
     "@opentelemetry/sdk-trace-node": "^2.6.0",
     "@opentelemetry/semantic-conventions": "^1.40.0",
     "@parcel/watcher": "^2.5.1",
-    "@rudderstack/rudder-sdk-node": "3.0.0",
+    "@rudderstack/rudder-sdk-node": "catalog:",
     "@sentry/node": "catalog:sentry",
     "aws4": "1.11.0",
     "axios": "catalog:",

pnpm-workspace.yaml

@@ -39,7 +39,13 @@ catalog:
   '@n8n/tournament': 1.0.7
   '@n8n/typeorm': 0.3.20-16
   '@n8n_io/ai-assistant-sdk': 1.21.0
+  '@rudderstack/rudder-sdk-node': 3.0.5
   '@sentry/node': ^10.36.0
+  '@testcontainers/k3s': ^11.13.0
+  '@testcontainers/kafka': ^11.13.0
+  '@testcontainers/mysql': ^11.13.0
+  '@testcontainers/postgresql': ^11.13.0
+  '@testcontainers/redis': ^11.13.0
   '@types/basic-auth': ^1.1.3
   '@types/express': ^5.0.1
   '@types/jsonwebtoken': 9.0.10
@@ -49,7 +55,7 @@ catalog:
   '@types/uuid': ^10.0.0
   '@types/xml2js': ^0.4.14
   '@vitest/coverage-v8': 4.1.1
-  axios: 1.15.0
+  axios: 1.15.1
   basic-auth: 2.0.1
   callsites: 3.1.0
   chokidar: 4.0.3
@@ -84,11 +90,6 @@ catalog:
   simple-git: 3.32.3
   stream-json: 1.9.1
   testcontainers: ^11.13.0
-  '@testcontainers/k3s': ^11.13.0
-  '@testcontainers/kafka': ^11.13.0
-  '@testcontainers/mysql': ^11.13.0
-  '@testcontainers/postgresql': ^11.13.0
-  '@testcontainers/redis': ^11.13.0
   ts-morph: ^27.0.2
   tsdown: ^0.16.5
   tsx: ^4.19.3