Update vulnerable NPM dependencies with auto-fixable version updates

[techanvil]

Update vulnerable NPM dependencies with auto-fixable version updates

Feature Description

We have a fairly large number of NPM dependencies which are flagged as vulnerable by NPM, as can be seen when running npm ci. The vulnerable package count is 149 at the time of writing:

We should update these to non-vulnerable versions where possible. This will need to be done over the course of multiple issues; this one can address those packages which can be updated automatically, with more complicated updates addressed in one or more subsequent issues.

This issue should be tackled once #5862 has been implemented, as a test run of npm audit fix shows that a number of the packages need Puppeteer to be updated in order to unblock their fixes.

---

Do not alter or remove anything below. The following sections will be managed by moderators only.

Acceptance criteria

• Vulnerable NPM dependencies idenfitied via npm audit which can be auto-fixed should be updated to their non-vulnerable versions.
• There should be no functional changes to the Site Kit plugin and infrastructure.

Implementation Brief

• Run npm audit fix --workspaces in the repo root.

Test Coverage

• Fix any failing tests; hopefully all tests will continue to pass without modification.

QA Brief

Changelog entry