chore: fix dependabot security alerts (#5286)

* chore: fix dependabot security alerts

* chore: address review — bound override ranges, patch brace-expansion 1.x and js-yaml

Author: pomfrida

package.json

@@ -106,17 +106,19 @@
     "overrides": {
       "mdast-util-to-hast": ">=13.2.1",
       "flatted": ">=3.4.2",
-      "undici": ">=7.24.0",
+      "undici": ">=8.9.0 <9",
       "yaml@^2": ">=2.8.3",
       "picomatch@^2": ">=2.3.2",
-      "brace-expansion@^2": ">=2.0.3",
-      "brace-expansion@^5": ">=5.0.7",
+      "brace-expansion@^1": ">=1.1.18 <2",
+      "brace-expansion@^2": ">=2.1.4 <3",
+      "brace-expansion@^5": ">=5.0.9 <6",
       "@isaacs/brace-expansion": ">=5.0.1",
-      "fast-uri@^3": "^3.1.4",
+      "fast-uri@^3": "^3.1.5",
       "sharp": ">=0.35.0",
       "json5@^1": ">=1.0.3",
       "diff": ">=4.0.4",
-      "js-yaml@^4": "^4.2.0",
+      "js-yaml@^3": "^3.15.1",
+      "js-yaml@^4": "^4.3.1",
       "gray-matter>js-yaml": "^3.14.1",
       "lodash": ">=4.18.0",
       "webpackbar": "^7.0.0",
@@ -129,7 +131,7 @@
       "launch-editor": ">=2.14.1",
       "joi": ">=17.13.4",
       "qs": ">=6.15.2",
-      "postcss": ">=8.5.10",
+      "postcss": ">=8.5.23",
       "uuid": "^11.1.1",
       "react-stately": "3.47.0",
       "@types/react": ">=19.2.17",

packages/eds-core-react/package.json

@@ -88,7 +88,7 @@
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "react-hook-form": "^7.82.0",
-    "react-router-dom": "^7.18.1",
+    "react-router": "^8.3.0",
     "remark-gfm": "^4.0.1",
     "rollup": "^4.62.3",
     "rollup-plugin-delete": "^3.0.2",

packages/eds-core-react/src/components/Tabs/Tabs.docs.mdx

@@ -91,7 +91,7 @@ The non-active `Tabs.Panels` are by default hidden with `display: none`, but can
 `Tabs.Tab` can be rendered as another component using the `as` prop.
 ```tsx
 import { Tabs } from '@equinor/eds-core-react'
-import { Link, Outlet } from "react-router-dom";
+import { Link, Outlet } from "react-router";
 
   <Tabs activeTab="/foo/bar">
   <Tabs.List>
@@ -101,7 +101,7 @@ import { Link, Outlet } from "react-router-dom";
   <Outlet />
   </Tabs>
 ```
-Routes can of course be entered by other means than clicking tabs. Therefore, we can not reliably use `onChange` to send a new index to `activeTab`. Instead `activeTab` can take a string value that sets the correct active tab if it matches the `value` prop on a tab. In the below example we use `react-router-dom` and its provided functions to match the current path to the correct tab.
+Routes can of course be entered by other means than clicking tabs. Therefore, we can not reliably use `onChange` to send a new index to `activeTab`. Instead `activeTab` can take a string value that sets the correct active tab if it matches the `value` prop on a tab. In the below example we use `react-router` and its provided functions to match the current path to the correct tab.
 <Canvas of={ComponentStories.Router} />
 
 ### With search

packages/eds-core-react/src/components/Tabs/Tabs.stories.tsx

@@ -14,7 +14,7 @@ import {
   Link,
   matchPath,
   useLocation,
-} from 'react-router-dom'
+} from 'react-router'
 
 const icons = {
   chevron_left,
@@ -203,7 +203,7 @@ WithPanels.decorators = [
 ]
 
 export const Router: StoryFn<TabsProps> = () => {
-  /*import {MemoryRouter, Route, Routes, Link, matchPath, useLocation} from 'react-router-dom' */
+  /*import {MemoryRouter, Route, Routes, Link, matchPath, useLocation} from 'react-router' */
   function CurrentRoute() {
     const location = useLocation()
     return <Typography>Current route: {location.pathname}</Typography>