chore(other): resolve shell-quote and js-cookie CVE

[illiaRedoc]

What/Why/How?

• bump shell-quote to 1.8.4 to fix CVE-2026-9277
• bump js-cookie to 3.0.7 to fix CVE-2026-46625

Reference

• https://github.com/Redocly/website/security/dependabot/150
• https://github.com/Redocly/website/security/dependabot/143

Testing

Screenshots (optional)

Check yourself

• Code is linted
• Tested
• All new/updated code is covered with tests

Security

• Security impact of change has been considered
• Code follows company security practices and guidelines

[redocly]

marketing-site AI Review: 🟢 Completed

Reunite Agent has reviewed your changes and found 4 potential issue(s).

Note

Low Risk

This PR strictly updates package overrides to resolve security vulnerabilities (CVEs) in third-party dependencies, carrying minimal risk to application behavior.

Overview

Bumps shell-quote to version 1.8.4 and js-cookie to version 3.0.7 via package.json overrides to address known CVEs (CVE-2026-9277 and CVE-2026-46625). Correspondingly updates package-lock.json to reflect the newly resolved dependency versions.