Bugfix/dependency security update

[Yves-Shaheem]

Résolution importante de vulnérabiltés de sévérité haute et critique dans notre arbre de dépendances, en utilisant des mises à jour de correctifs sans introduire de régressions via npm audit.

[superjekk0]

Plusieurs dépendances doivent être changées dans le package.json, car la portée spécifiée est vulnérable. Voici ce que je trouve comme dépendances vulnérables en date du 3 mars 2026:

js-yaml  4.0.0 - 4.1.0
Severity: moderate
js-yaml has prototype pollution in merge (<<) - https://github.com/advisories/GHSA-mh29-5h37-fv8mfix available via `npm audit fix --force`
Will install @mdxeditor/editor@3.52.4, which is a breaking change
node_modules/js-yaml
  @mdxeditor/editor  <=3.49.1
  Depends on vulnerable versions of js-yaml
  node_modules/@mdxeditor/editor

postcss  <8.4.31
Severity: moderate
PostCSS line return parsing error - https://github.com/advisories/GHSA-7fh5-64p2-3v2j
fix available via `npm audit fix --force`
Will install postcss@8.5.8, which is outside the stated dependency range
node_modules/postcss

serialize-javascript  <=7.0.2
Severity: high
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() - https://github.com/advisories/GHSA-5c6j-r48x-rmvq
fix available via `npm audit fix --force`
Will install @mdx-js/loader@2.3.0, which is a breaking change
node_modules/serialize-javascript
  terser-webpack-plugin  *
  Depends on vulnerable versions of serialize-javascript
  Depends on vulnerable versions of webpack
  node_modules/terser-webpack-plugin
    webpack  >=4.26.0
    Depends on vulnerable versions of terser-webpack-plugin
    node_modules/webpack
      @mdx-js/loader  >=3.0.0
      Depends on vulnerable versions of webpack
      node_modules/@mdx-js/loader