fix(deps): resolve npm audit vulnerabilities

Bump axios (prod) plus express, webpack, terser-webpack-plugin,
node-polyfill-webpack-plugin, and semantic-release (dev) to patch
73 known vulnerabilities down to 6 low-severity, upstream-unfixed
ones in node-polyfill-webpack-plugin's own dependency chain.

package.json

@@ -69,17 +69,17 @@
     "cp": "0.2.0",
     "cypress": "^15.7.1",
     "dotenv": "16.0.0",
-    "express": "4.17.3",
+    "express": "4.22.2",
     "jest": "29.7.0",
     "jest-environment-jsdom": "^29.7.0",
     "jest-extended": "4.0.2",
-    "node-polyfill-webpack-plugin": "1.1.4",
+    "node-polyfill-webpack-plugin": "4.1.0",
     "path": "0.12.7",
     "pem": "1.14.5",
     "prettier": "3.8.2",
     "process": "0.11.10",
-    "semantic-release": "19.0.3",
+    "semantic-release": "25.0.8",
-    "terser-webpack-plugin": "5.3.6",
+    "terser-webpack-plugin": "5.6.1",
     "ts-jest": "29.2.6",
     "ts-loader": "9.4.0",
     "tslint": "6.1.3",
@@ -87,13 +87,13 @@
     "typedoc": "0.23.24",
     "typedoc-plugin-rename-defaults": "0.6.4",
     "typescript": "4.9.5",
-    "webpack": "5.76.2",
+    "webpack": "5.108.4",
     "webpack-cli": "4.9.2"
   },
   "main": "index.js",
   "dependencies": {
     "@sasjs/utils": "^3.5.6",
-    "axios": "1.16.0",
+    "axios": "1.18.1",
     "axios-cookiejar-support": "5.0.5",
     "form-data": "4.0.6",
     "https": "1.0.0",