chore: Bump various packages to mitigate CVEs. (#2922)

Author: hansenyy

.ado/publish.yml

@@ -38,7 +38,7 @@ extends:
       os: windows
     sdl:
       componentgovernance:
-        ignoreDirectories: $(Build.SourcesDirectory)/packages/helloworld
+        ignoreDirectories: $(Build.SourcesDirectory)/private/helloworld
       credscan:
         suppressionsFile: .ado/CredScanSuppressions.json
       eslint:

docsite/package.json

@@ -15,8 +15,8 @@
     "typecheck": "tsc"
   },
   "dependencies": {
-    "@docusaurus/core": "3.8.1",
-    "@docusaurus/preset-classic": "3.8.1",
+    "@docusaurus/core": "3.10.0",
+    "@docusaurus/preset-classic": "3.10.0",
     "@mdx-js/react": "^3.0.0",
     "@types/react": "^19.0.0",
     "clsx": "^2.0.0",
@@ -25,9 +25,9 @@
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@docusaurus/module-type-aliases": "3.8.1",
-    "@docusaurus/tsconfig": "3.8.1",
-    "@docusaurus/types": "3.8.1",
+    "@docusaurus/module-type-aliases": "3.10.0",
+    "@docusaurus/tsconfig": "3.10.0",
+    "@docusaurus/types": "3.10.0",
     "typescript": "~5.8.3"
   },
   "browserslist": {
@@ -45,5 +45,11 @@
   "engines": {
     "node": ">=18.0"
   },
-  "packageManager": "yarn@4.9.1"
+  "packageManager": "yarn@4.9.1",
+  "resolutions": {
+    "webpack": ">=5.104.1 <5.106.0"
+  },
+  "_resolution_justifications": {
+    "webpack": "Earlier versions of webpack are affected by CVE-2025-68458, but versions >=5.106.0 doesn't work with docusaurus, which is being worked on: https://github.com/facebook/docusaurus/issues/11923"
+  }
 }