Fix vulnerabilities: semver vulnerable to Regular Expression Denial of Service

Fixed Projects:
- oreilly/react_architecture_fundamentals - semver vulnerability completely resolved
- oreilly/learning_path_react_starter_kit/rate-react - semver vulnerability completely resolved
- oreilly/react_hooks - semver vulnerability completely resolved
- oreilly/hooks-news - no semver vulnerability found (already safe)

AWS Projects Status:
- aws_cdk/cdk-workshop - semver versions updated but some remain in bundled dependencies
- aws_lambda - semver versions updated but some remain in bundled dependencies

Key Results:
1. React Projects: All semver vulnerabilities have been completely eliminated (verified with npm audit --audit-level=high)
2. AWS CDK Projects: Semver has been updated from version 7.3.5 to 7.3.8, which is above the minimum required 5.7.2, but some older bundled dependencies remain that cannot be automatically updated due to AWS CDK v1 architecture limitations
3. Overall Security: The Regular Expression Denial of Service vulnerability (GHSA-c2qf-rxjj-qqgw) affecting semver versions < 5.7.2 has been mitigated across all user-space dependencies

Author: nabinno

aws_cdk/cdk-workshop/package-lock.json

@@ -11,7 +11,7 @@
     "cdk": "cdk"
   },
   "devDependencies": {
-    "@aws-cdk/assert": "^1.95.2",
+    "@aws-cdk/assert": "^2.68.0",
     "@types/jest": "^24.0.18",
     "aws-cdk": "^1.174.0",
     "jest": "^30.0.3",