chore(deps): bump the npm-minor-patch group with 5 updates

[dependabot]

Bumps the npm-minor-patch group with 5 updates:

Package	From	To
@types/node	25.9.1	25.9.2
tree-sitter-javascript	0.23.1	0.25.0
dompurify	3.4.7	3.4.8
@types/react	19.2.16	19.2.17
@vscode/vsce	3.9.1	3.9.2

Updates @types/node from 25.9.1 to 25.9.2

Commits

• See full diff in compare view

Updates tree-sitter-javascript from 0.23.1 to 0.25.0

Release notes

Sourced from tree-sitter-javascript's releases.

v0.25.0

NOTE: Download tree-sitter-javascript.tar.gz for the complete source code.

Commits

• 44c892e 0.25.0
• 5f100b0 docs: clarify targeted ECMAScript version
• 2409583 chore: generate
• 39798e2 feat: add await to reserved identifiers
• c220d3e feat: add reserved words
• 7ef8551 fix: allow of as identifiers in for loops
• ebdb4f1 feat: add using declaration
• 166a565 ci: use macos-latest
• be1e969 build: update bindings
• b131ccb ci: bump actions/checkout from 4 to 5
• Additional commits viewable in compare view

Updates dompurify from 3.4.7 to 3.4.8

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.8

• Cleaned up the repository root, renamed some and removed unneeded files
• Fixed an issue with handling of Trusted Types policies, thanks @​fulstadev
• Fixed the node iterator for better template scrubbing, thanks @​IamLeandrooooo
• Included formerly missing LICENSE-MPL in published npm package, thanks @​asamuzaK
• Bumped several dependencies where possible

Commits

• bcdd828 release: 3.4.8 (#1439)
• See full diff in compare view

Updates @types/react from 19.2.16 to 19.2.17

Commits

• See full diff in compare view

Updates @vscode/vsce from 3.9.1 to 3.9.2

Release notes

Sourced from @​vscode/vsce's releases.

v3.9.2

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and @​azure/msal-node
• #1274: Run npm audit fix
• #1272: Bump fast-uri from 3.0.6 to 3.1.2
• #1267: Bump minimatch from 10.2.2 to 10.2.3
• #1247: Update minimatch dependency to v10

This list of changes was auto generated.

v3.9.2-4

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and @​azure/msal-node

This list of changes was auto generated.

v3.9.2-3

Changes:

• #1274: Run npm audit fix

This list of changes was auto generated.

v3.9.2-2

Changes:

• #1272: Bump fast-uri from 3.0.6 to 3.1.2

This list of changes was auto generated.

... (truncated)

Commits

• f7501f2 fix: skip APIScan (#1283)
• 7cd3244 chore: bump CI to Node 22 and fix build (#1282)
• df1a68e Bump the uuid test fixture version to 100.0.0 (#1279)
• 3a5786e Merge pull request #1278 from microsoft/dependabot/npm_and_yarn/tmp-0.2.6
• 4954e08 Bump tmp from 0.2.4 to 0.2.6
• 54dce87 Bump qs from 6.14.2 to 6.15.2 (#1277)
• 86fc2d6 Bump uuid and @​azure/msal-node (#1276)
• 4699582 Run npm audit fix and update lockfile (#1274)
• e003a0a Merge pull request #1272 from microsoft/dependabot/npm_and_yarn/fast-uri-3.1.2
• 74ab7a9 Bump fast-uri from 3.0.6 to 3.1.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.