fix: bump vulnerable transitive deps to clear CVEs (#202)

* fix: bump vulnerable transitive deps to clear CVEs

Address the security advisories tagged for the `sdk` repo. All are
transitive dependencies, pinned to safe versions via pnpm overrides
(TS) and a uv constraint (Python):

- rollup    4.57.1 -> 4.62.2   (CVE-2026-27606)
- vite      7.3.1  -> 7.3.6    (CVE-2026-39363, CVE-2026-39364, CVE-2026-53571)
- minimatch 5.1.6  -> 5.1.9    (CVE-2026-27903)
- fast-uri  3.1.0  -> 3.1.3    (CVE-2026-6321, CVE-2026-6322)
- ws        8.18.3 -> 8.21.1   (CVE-2026-48779)
- urllib3   2.6.3  -> 2.7.0    (CVE-2026-44431, CVE-2026-44432)

vite is only a peer dep of vitest, so pnpm's auto-installed peer would
not re-resolve from the override alone; it is also declared as a direct
devDependency to force the safe version.

Type-check, build, and the vibe test suites pass for both SDKs.

* fix: publish urllib3 floor in x402 extra so it reaches consumers

The [tool.uv] constraint only affected this repo's lockfile resolution;
it is not emitted into wheel metadata, so `pip install browser-use-sdk[x402]`
could still resolve the vulnerable urllib3 2.6.3 in a consumer environment.

Move the >=2.7.0 floor into the published x402 extra (same python>=3.10
marker as x402 itself, since urllib3 only enters via x402[evm] -> web3 ->
requests). Now emitted as:
  Requires-Dist: urllib3>=2.7.0; (python_version >= '3.10') and extra == 'x402'

Author: sauravpanda

browser-use-node/package.json

@@ -66,6 +66,7 @@
     "tsup": "^8.5.1",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
+    "vite": "^7.3.6",
     "vitest": "^4.1.10"
   },
   "keywords": [
@@ -97,5 +98,14 @@
       "optional": true
     }
   },
-  "packageManager": "pnpm@10.23.0+sha512.21c4e5698002ade97e4efe8b8b4a89a8de3c85a37919f957e7a0f30f38fbc5bbdd05980ffe29179b2fb6e6e691242e098d945d1601772cad0fef5fb6411e2a4b"
+  "packageManager": "pnpm@10.23.0+sha512.21c4e5698002ade97e4efe8b8b4a89a8de3c85a37919f957e7a0f30f38fbc5bbdd05980ffe29179b2fb6e6e691242e098d945d1601772cad0fef5fb6411e2a4b",
+  "pnpm": {
+    "overrides": {
+      "rollup": "^4.62.2",
+      "vite": "^7.3.6",
+      "minimatch@5": "^5.1.9",
+      "fast-uri": "^3.1.3",
+      "ws": "^8.21.1"
+    }
+  }
 }