chore(deps): fix high-priority Dependabot alerts

[aterga]

Summary

Bumps direct dependencies and adds a pnpm override for a transitive dependency to resolve 5 high-severity and 2 medium-severity Dependabot alerts:

High:

• playwright 1.49.1 → 1.55.1 in docs/package.json (feat: address book integration tests #117, chore: add individual request pages #118): SSL certificate verification bypass
• validator 13.12.0 → 13.15.35 in apps/wallet/package.json (build(deps): bump mio from 0.8.9 to 0.8.11 #152, perf: reduce list_proposals instructions #153): incomplete filtering of special elements
• axios <1.8.2 → ^1.8.2 via pnpm override (feat: add me endpoint to fetch user privileges #70): possible SSRF and credential leakage via absolute URL

Medium (resolved for free by validator bump):

• validator (feat: augment list access policies response #122, feat: useStorage composable; persist selected wallet id #123): URL validation bypass in isURL

Not addressed

• chore: consistent privilege api #135 glob (high): requires a major version jump (7 → 10); transitive dep of test-exclude@6.0.0 — not a clean fix

Test plan

• pnpm install completes successfully
• Lockfile no longer contains playwright@1.49.1, validator@13.12.0, or axios@1.7.9
• CI pipeline passes

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Updates JavaScript dependencies and pnpm overrides to remediate reported Dependabot security alerts across the monorepo.

Changes:

• Added a pnpm override to force axios to ^1.8.2 for any dependency graph path resolving <1.8.2.
• Bumped playwright in docs/ from 1.49.1 to 1.55.1.
• Bumped validator in apps/wallet/ from 13.12.0 to 13.15.35, with corresponding lockfile updates.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
package.json	Adds pnpm override for axios@<1.8.2 to address transitive vulnerability.
docs/package.json	Updates playwright to a patched version to resolve the reported SSL verification bypass alert.
apps/wallet/package.json	Updates validator to a patched version to resolve reported filtering/URL validation issues.
pnpm-lock.yaml	Reflects updated resolutions for axios, follow-redirects, proxy-from-env, validator, and playwright packages.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.