Update deps June 2025

[DeeDeeG]

Testing some dependency bumps to see how they go.

Would be nice to have some of these updated. The various packages/**/package-lock.json changes should be irrelevant to the final Pulsar build, which is based on yarn.lock in the root dir of the project, but it feels better to be on top of those deps nonetheless. Might affect package tests in CI, I suppose? So I'll be looking out for any of that in the CI runs for this PR as well.

This isn't everything I'd like to bump, but it's a start and a fair few commits already, so maybe not a bad thing to break it up. This is what I have available to upload at the moment from my local clone.

[DeeDeeG]

Note for reviewers:

These files packages/markdown-preview/package.json, packages/markdown-preview/spec/markdown-preview-spec.js, and yarn.lock should be the only changes actually affecting our build, AFAIK.

The rest of changes (to various package-lock.json files) are to satisfy dependency audit checks that think our individual bundled package dirs' package-lock.json files are used, when in fact they shouldn't be.

(The change in packages/markdown-preview/spec/markdown-preview-spec.js is a trivial change -- a non-semantically meaningful order change in some HTML attributes in a fixed spec string comparison. See commit and hidden comment above for context if desired. I marked the comment as "resolved" since the commit addresses the comment.)