chore(deps): bump fast-uri, qs, browserslist, and xmldom dependencies

[yasnagat]

Proposed changes (including videos or screenshots)

Issue(s)

Steps to test or reproduce

Further comments

Summary by CodeRabbit

• Chores
  • Updated internal dependency versions and resolution overrides.
  • Added a Browserslist dependency resolution.
  • Applied maintenance updates to XML, validation, protocol buffer, archive, caching, and query-string packages.

[dionisio-bot]

Looks like this PR is not ready to merge, because of the following issues:

• This PR is missing the 'stat: QA assured' label
• This PR is missing the required milestone or project

Please fix the issues and try again

If you have any trouble, please check the PR guidelines

[changeset-bot]

⚠️ No Changeset found

Latest commit: 8177a03

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 30daa32a-28df-4154-a0b0-24540d6d2441

📥 Commits

Reviewing files that changed from the base of the PR and between 6bbc8a3 and 8177a03.

⛔ Files ignored due to path filters (2)

• .github/actions/update-version-durability/package-lock.json is excluded by !**/package-lock.json
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (3)

• .github/actions/update-version-durability/package.json
• apps/meteor/package.json
• package.json

Included review availability: Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (4)

• GitHub Check: cubic · AI code reviewer
• GitHub Check: Hacktron Security Check
• GitHub Check: 📦 Build Packages
• GitHub Check: CodeQL-Build

🔇 Additional comments (4)

package.json (2)

40-40: LGTM!

Also applies to: 75-75, 94-95, 154-154, 156-156

---

195-197: 🗄️ Data Integrity & Integration

Remove this lockfile verification request.

yarn.lock contains matching selectors and versions for tar@npm:7.5.21 and qs@npm:6.16.0.

.github/actions/update-version-durability/package.json (1)

19-19: LGTM!

apps/meteor/package.json (1)

168-168: LGTM!

---

Walkthrough

Dependency manifests now use updated @xmldom/xmldom, browserslist, ajv/fast-uri, protobufjs, tar, and qs versions.

Changes

Dependency updates

Layer / File(s)	Summary
Dependency declarations and resolution pins .github/actions/update-version-durability/package.json, apps/meteor/package.json, package.json	Updated direct @xmldom/xmldom versions and resolution pins for browserslist, ajv/fast-uri, protobufjs, tar, and qs.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk: ⚪ Minimal · up to 8177a

This change updates direct and transitive dependency versions, with the intended resolved versions represented in the lockfile. No current merge-blocking compatibility, integrity, or deployment risk is identified.

Suggested labels: type: chore

Suggested reviewers: ggazzo, julio-rocketchat

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the dependency update and names several of the primary packages changed. It does not list every updated package, but the title does not need to cover all dependency changes…
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Warning

Errors were encountered while retrieving linked issues.

Errors (1)

• JIRA integration encountered authorization issues. Please disconnect and reconnect the integration in the CodeRabbit UI.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.30%. Comparing base (6bbc8a3) to head (8177a03).
⚠️ Report is 4 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop   #42043      +/-   ##
===========================================
- Coverage    69.32%   69.30%   -0.03%     
===========================================
  Files         4287     4287              
  Lines       171470   171471       +1     
  Branches     31117    31112       -5     
===========================================
- Hits        118880   118832      -48     
- Misses       47411    47459      +48     
- Partials      5179     5180       +1     

Flag	Coverage Δ
unit	70.97% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[cubic-dev-ai]

No issues found across 5 files

_{Re-trigger cubic}