Remove unused http-proxy-middleware package

[thewatermethod]

Description of change

Package is flagged by yarn audit but we aren't using it since migration to Vite
Also updated dompurify, cheerio, nodemailer

How to test

CI passes/local dev functions

Jira Issue(s)

• https://jira.acf.gov/browse/TTAHUB-5465

Checklists

Every PR

• Linked Jira issue
• JIRA issue status updated
• Code is meaningfully tested
• Meets accessibility standards (WCAG 2.1 Levels A, AA)
• API Documentation updated
• Boundary diagram updated
• Logical Data Model updated
• Architectural Decision Records written for major infrastructure decisions
• UI review complete
• QA review complete

Before merge to main

• OHS demo complete
• Ready to create production PR

Production Deploy

• PR created as Draft
• Staging smoke test completed
• PR transitioned to Open (this ready_for_review transition triggers the Slack/Jira automation)
• Reviewer added after the PR is Open (elainaparrish is the authorized approver under normal circumstances)
  • Sequence: Draft PR → Smoke test → Open PR (automation runs) → Add reviewer
  • Confirm that the Slack notification was sent after the PR was opened
  • Confirm that linked Jira ticket(s) transitioned as expected; if not, review the GitHub Actions workflow logs

After merge/deploy

• Update JIRA ticket status

[Copilot]

Pull request overview

Removes the unused http-proxy-middleware dependency from the frontend now that the app has migrated to Vite, reducing the dependency surface and addressing the related yarn audit finding.

Changes:

• Removed http-proxy-middleware from frontend/package.json.
• Pruned http-proxy-middleware and its transitive dependencies/types from frontend/yarn.lock.

Impact assessment:

• Benefits: Low risk / medium benefit (dependency + audit noise reduction).
• Risks: Low (verified no remaining references to http-proxy-middleware / createProxyMiddleware / setupProxy in frontend/).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
frontend/package.json	Removes http-proxy-middleware from declared dependencies.
frontend/yarn.lock	Cleans lockfile entries for the removed package and its now-unused transitive deps.