update vulnerable node packages + fix sdoc publishing

Summary:
### Update Packages

Update lock file to address Dependabot-reported vulnerabilities:
 - Pin `diff` to v5.2.2; T252137568
 - Pin `lodash`/`lodash-es` to v4.17.23; T252303828, T252303820

### Fix Internal Publishing

Use `warn`-flag to circumvent the link-checker getting confused by double `/hack`-prefix on internally hosted static docs; e.g.:
 - Docusaurus [reports](https://www.internalfb.com/sandcastle/job/27021600194364056/artifact/actionlog.27021624813170696.log?selectedLines=55-56-1-1) `/hack/asynchronous-operations/introduction/` as broken due to flattening of `/docs/hack/*` to `/hack/*` in D90993327.
 - Public doc site, [docs.hhvm.com](https://docs.hhvm.com/hack/asynchronous-operations/introduction/), has been published with these landing and works as expected.
 - However, on Static Docs, the URL changes from:
    - From `(...)/intern/staticdocs/hack/docs/hack/asynchronous-operations/introduction/`
    - To: `(...)/intern/staticdocs/hack/hack/asynchronous-operations/introduction/`
 - ... and Docusaurus barks at the `/hack/hack` part.

Temporarily trying to fix internal publishing pipeline in prep for a more permanent resolution.

Reviewed By: francesco-zappa-nardelli

Differential Revision: D91219608

fbshipit-source-id: dd6312e8bd651f65738966cba72712d20dc5be9f

Author: tlil

hphp/hack/website/docusaurus.config.js

@@ -13,7 +13,8 @@ const darkCodeTheme = require('prism-react-renderer').themes.vsDark;
   tagline: 'Moving fast with high-performance Hack, a programming language for building reliable websites at epic scale',
   url: 'https://docs.hhvm.com',
   baseUrl: process.env.DOCUSAURUS_BASE_URL || '/',
-  onBrokenLinks: 'throw',
+  // temp: use 'warn' to circumvent link-checker getting confused by double `/hack`-prefix on internally hosted static docs
+  onBrokenLinks: 'warn',
   trailingSlash: true,
   favicon: 'img/favicon.ico',
   organizationName: 'facebook',

hphp/hack/website/package.json

@@ -24,6 +24,11 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1"
   },
+  "resolutions": {
+      "diff": "5.2.2",
+      "lodash": "4.17.23",
+      "lodash-es": "4.17.23"
+  },
   "browserslist": {
     "production": [
       ">0.5%",

hphp/hack/website/yarn.lock

@@ -4932,10 +4932,10 @@ devlop@^1.0.0, devlop@^1.1.0:
   dependencies:
     dequal "^2.0.0"
 
-diff@^5.0.0:
-  version "5.2.0"
-  resolved "https://registry.yarnpkg.com/diff/-/diff-5.2.0.tgz#26ded047cd1179b78b9537d5ef725503ce1ae531"
-  integrity sha512-uIFDxqpRZGZ6ThOk84hEfqWoHx2devRFvpTZcTHur85vImfaxUbTW9Ryh4CpCuDnToOP1CEtXKIgytHBPVff5A==
+diff@5.2.2, diff@^5.0.0:
+  version "5.2.2"
+  resolved "https://registry.yarnpkg.com/diff/-/diff-5.2.2.tgz#0a4742797281d09cfa699b79ea32d27723623bad"
+  integrity sha512-vtcDfH3TOjP8UekytvnHH1o1P4FcUdt4eQ1Y+Abap1tk/OB2MWQvcwS2ClCd1zuIhc3JKOx6p3kod8Vfys3E+A==
 
 dir-glob@^3.0.1:
   version "3.0.1"
@@ -6947,10 +6947,10 @@ locate-path@^7.1.0:
   dependencies:
     p-locate "^6.0.0"
 
-lodash-es@4.17.21, lodash-es@^4.17.21:
-  version "4.17.21"
-  resolved "https://registry.yarnpkg.com/lodash-es/-/lodash-es-4.17.21.tgz#43e626c46e6591b7750beb2b50117390c609e3ee"
-  integrity sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==
+lodash-es@4.17.21, lodash-es@4.17.23, lodash-es@^4.17.21:
+  version "4.17.23"
+  resolved "https://registry.yarnpkg.com/lodash-es/-/lodash-es-4.17.23.tgz#58c4360fd1b5d33afc6c0bbd3d1149349b1138e0"
+  integrity sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==
 
 lodash.debounce@^4.0.8:
   version "4.0.8"
@@ -6972,10 +6972,10 @@ lodash.uniq@^4.5.0:
   resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
   integrity sha512-xfBaXQd9ryd9dlSDvnvI0lvxfLJlYAZzXomUYzLKtUeOQvOP5piqAWuGtrhWeqaXK9hhoM/iyJc5AV+XfsX3HQ==
 
-lodash@^4.17.20, lodash@^4.17.21:
-  version "4.17.21"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
-  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+lodash@4.17.23, lodash@^4.17.20, lodash@^4.17.21:
+  version "4.17.23"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
+  integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
 
 longest-streak@^3.0.0:
   version "3.1.0"