[release/9.0] Update NPM dependencies

[wtgodbe]

Fixes CG alerts

[dotnet-policy-service]

Hi @@wtgodbe. If this is not a tell-mode PR, please make sure to follow the instructions laid out in the servicing process document.
Otherwise, please add tell-mode label.

[Copilot]

Pull request overview

Updates NPM dependency graph to address CG (component governance) alerts across the repo’s Node workspaces (notably the JSInterop workspace), primarily by bumping lint tooling and adding root-level overrides for transitive vulnerabilities.

Changes:

• Bump @typescript-eslint/* devDependencies in the JSInterop workspace to v8.
• Add root package.json overrides entries to force patched versions of vulnerable transitive packages (e.g., tar, serialize-javascript, @tootallnate/once).
• Regenerate package-lock.json to reflect updated/overridden dependency versions.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
src/JSInterop/Microsoft.JSInterop.JS/src/package.json	Updates TypeScript ESLint tooling versions used for JSInterop linting.
package.json	Adds root overrides to force secure transitive dependency versions repo-wide.
package-lock.json	Lockfile refresh capturing updated dependency graph and override effects.