chore(test): patch jsdom Undici advisories

[kattsushi]

Closes #166

Summary

• Resolve jsdom's Undici dependency to patched 7.29.0 through a scoped pnpm override.
• Remove twelve findings without touching module-federation's exact Undici pin.
• Reduce audit from 83 to 71 findings.

Changes

File	Change
package.json	Add scoped jsdom>undici override.
pnpm-lock.yaml	Replace only jsdom's Undici 7.25.0 resolution with 7.29.0.

Type

• Bug fix
• New feature
• Documentation only
• Code refactoring
• Maintenance/tooling
• Breaking change

Test plan

• Frozen installation passed without peer warnings.
• Audit delta: 83 → 71 (−4 high, −6 moderate, −2 low).
• All 272 workspace tests passed uncached.
• React Router example typecheck and build passed.
• Module-federation Undici 7.24.7 remains unchanged.

Contributor checklist

• Linked approved issue chore(test): patch jsdom Undici advisories #166.
• Selected exactly one PR type (type:chore).
• No shell scripts were modified; shellcheck is not applicable.
• Commit uses Conventional Commit format.
• Commit contains no Co-Authored-By trailer.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: a024cc87-2cfc-4dc9-bac3-157489520cc1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}