chore: upgrade dependencies with known security vulnerabilities (#9640)

* chore: upgrade dependencies with known security vulnerabilities

* Update Node.js version in CI workflow

* chore: upgrade additional security dependencies

* chore: stabilize yarn.lock path-to-regexp entry

* chore: bump minimum version ranges for security-patched dependencies

* chore: update CHANGELOG.unreleased.md with security upgrades

* chore: revert vite upgrade to 6.4.1 (6.4.2 breaks vue-tsc)

* chore: fix vite upgrade and pin vue to 3.5.28

@xen-orchestra/rest-api/package.json

@@ -43,7 +43,7 @@
     "golike-defer": "^0.5.1",
     "inversify": "^6.2.2",
     "inversify-binding-decorators": "^4.0.0",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.0",
     "promise-toolbox": "^0.21.0",
     "semver": "^7.7.2",
     "swagger-ui-express": "^5.0.1",