[deps]: Lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-34325
• Link: https://bitwarden.atlassian.net/browse/PM-34325

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 7.07%. Comparing base (c689296) to head (05843f6).
⚠️ Report is 6 commits behind head on main.
✅ All tests successful. No failed tests found.

❗ There is a different number of reports uploaded between BASE (c689296) and HEAD (05843f6). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (c689296)	HEAD (05843f6)
	2	1

Additional details and impacted files

@@            Coverage Diff            @@
##             main   #1065      +/-   ##
=========================================
- Coverage   15.40%   7.07%   -8.33%     
=========================================
  Files          67      67              
  Lines        2798    2798              
  Branches      483     483              
=========================================
- Hits          431     198     -233     
- Misses       2264    2569     +305     
+ Partials      103      31      -72     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Checkmarx One – Scan Summary & Details – bf439425-d7b0-4f52-b6ad-8acab7e04573

---

New Issues (2)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CVE-2026-33894	Npm-node-forge-1.3.2	details Recommended version: 1.4.0 Description: Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, RSASSA PKCS#1 v1.5 s... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
2		Use_Of_Hardcoded_Password	/utils/openldap/config-fixtures.ts: 21	details The application uses the hard-coded password "admin" for authentication purposes, either using it to verify users' identities, or to access anothe... Attack Vector

---

Fixed Issues (2)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CVE-2026-33937	Npm-handlebars-4.7.8
	CVE-2026-4926	Npm-path-to-regexp-8.3.0