fix: update vulnerable dependencies to address critical CVEs

[amit-noy]

📝 Description

Reviewed all open Dependabot security alerts and resolved them.

---

Dependabot issues

• https://github.com/mlrun/ui/security/dependabot/46
• https://github.com/mlrun/ui/security/dependabot/111
• https://github.com/mlrun/ui/security/dependabot/43
• https://github.com/mlrun/ui/security/dependabot/120
• https://github.com/mlrun/ui/security/dependabot/118
• https://github.com/mlrun/ui/security/dependabot/75
• https://github.com/mlrun/ui/security/dependabot/129
• https://github.com/mlrun/ui/security/dependabot/119
• https://github.com/mlrun/ui/security/dependabot/116

✅ Checklist

• I have given the PR a well-structured title describing the domain and the specific change that was made
• I tested the changes in the browser (locally or via preview build)
• I confirmed that existing tests pass
• I added or updated unit / integration tests (if needed)
• I checked that this change doesn’t introduce new console warnings or lint / formatting errors
• I updated the relevant Jira ticket with the appropriate details and status

---

🔗 References

• Related ticket / issue: https://ecliptos.atlassian.net/browse/ML-12844
• Figma / design spec:
• Documentation:

---

🚨 Potentially Breaking Changes

• Yes
• No

---

Includes DRC change

• Yes
• No

If yes -> requires bump NPM version

---

🔍 Additional Notes

• The test failed unrelated to the bumps

---

📸 Screenshots / Demos

---