chore: fix security issues + release

[Sruthisreem]

• ejs → 3.1.10 (was 3.1.7), fixes CVE-2024-33883.
• @stoplight/http-spec → ^7.0.0; v7 drops lodash.pick entirely — no patched standalone version exists (GHSA-p6mc-m468-83gw).
• lodash.template → ^4.18.1 (was 4.5.0), fixes GHSA-35jh-r3h4-6jhm.
• bfj → ^9.1.3 (was 7.1.0); v9 removes jsonpath dependency, fixes CVE-2026-1615.
• serialize-javascript → ^7.0.3 (was 4.0.0–6.0.1 across lockfiles), fixes GHSA-5c6j-r48x-rmvq.
• pacote → ^21.5.1 (was 12.0.2–18.0.6 across lockfiles), fixes CVE-2026-9496. Also removes sigstore@2.14.2, ip-address@9.0.5, and @tootallnate/once@1.1.2 as side effects.

[netlify]

✅ Deploy Preview for stoplight-elements ready!

Name	Link
🔨 Latest commit	4f0c677
🔍 Latest deploy log	https://app.netlify.com/projects/stoplight-elements/deploys/6a9edd2c61849b00087ebd7a
😎 Deploy Preview	https://deploy-preview-2977--stoplight-elements.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for stoplight-elements-demo ready!

Name	Link
🔨 Latest commit	4f0c677
🔍 Latest deploy log	https://app.netlify.com/projects/stoplight-elements-demo/deploys/6a9edd2c572f5e0008c5ecfe
😎 Deploy Preview	https://deploy-preview-2977--stoplight-elements-demo.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[darekplawecki]

To release the changes, you have to bump the versions in corresponding package.json files just like here.

[darekplawecki]

Are u sure this huge major upgrade won't break anything? Would be good to double check with Claude. Also, the angular example is used to run E2E tests in the release pipeline, but you can run it locally and verify.

This applies also to other major upgrades (serialize-javascript, bfj).