fix(deps): update deps with security issues via breakign changes

[seaerchin]

Problem

this pr upgrades deps that require a breaking change. this was done via npm audit fix --force --legacy-peer-deps on top of the previous PR

Solution

• run npm audit fix --force --legacy-peer-deps

list of breaking changes

npm warn audit Updating nodemailer to 7.0.11, which is a SemVer major change.
npm warn audit Updating webpack-dev-server to 5.2.2, which is a SemVer major change.
npm warn audit Updating @sentry/react to 10.28.0, which is a SemVer major change.
npm warn audit Updating cookie-session to 2.1.1, which is a SemVer major change.
npm warn audit Updating dd-trace to 5.80.0, which is a SemVer major change.
npm warn audit Updating testcafe to 0.16.0, which is a SemVer major change.
npm warn audit Updating commitizen to 3.0.0, which is a SemVer major change.
npm warn audit Updating @commitlint/travis-cli to 20.1.0, which is a SemVer major change.
npm warn audit Updating jest to 30.2.0, which is a SemVer major change.
npm warn audit Updating cz-conventional-changelog to 3.0.1, which is a SemVer major change.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	jest@​26.6.3 ⏵ 30.2.0			+2
	@​types/​express@​4.17.13 ⏵ 4.17.25			-1
	@​babel/​preset-react@​7.14.5 ⏵ 7.28.5
	@​babel/​preset-env@​7.14.8 ⏵ 7.28.5	+1		+1
	@​babel/​core@​7.14.8 ⏵ 7.28.5			+1
	testcafe@​2.6.2 ⏵ 3.7.2
	cookie-session@​1.4.0 ⏵ 2.1.1			+1	+1
	webpack-dev-server@​4.15.2 ⏵ 5.2.2	+1	+13
	dd-trace@​2.46.0 ⏵ 5.80.0	+5			+45
	nodemailer@​6.10.1 ⏵ 7.0.11	+1	+13	+1	+2
	@​commitlint/​travis-cli@​14.1.0 ⏵ 20.1.0	+5		+29	+9

View full report

[Copilot]

Pull request overview

This PR upgrades dependencies with security vulnerabilities that require breaking changes, executed via npm audit fix --force --legacy-peer-deps. However, there are significant discrepancies between the stated changes and the actual package.json updates.

• Major version upgrades for 10 packages including nodemailer (6→7), webpack-dev-server (4→5), dd-trace (2→5), and Jest (26→30)
• Several version mismatches between PR description and actual changes
• One apparent version downgrade that conflicts with security update goals

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This appears to be a version downgrade from ^3.3.0 to ^3.0.1. Downgrading dependencies is unusual in a security update PR and may reintroduce vulnerabilities or remove features. This should be verified as intentional.

Suggested change

	"cz-conventional-changelog": "^3.0.1",
	"cz-conventional-changelog": "^3.3.0",

[Copilot]

The version update for testcafe appears inconsistent with the PR description. The PR states it's updating to 0.16.0, but the actual change shows an update to ^3.7.2. This discrepancy should be clarified.

Suggested change

	"testcafe": "^3.7.2",
	"testcafe": "0.16.0",

[Copilot]

The version update for commitizen appears inconsistent. The PR description states it's updating to 3.0.0, but the actual change shows an update to ^4.3.1. This discrepancy should be clarified.

Suggested change

	"commitizen": "^4.3.1",
	"commitizen": "3.0.0",