chore: upgrade tmp to >= 0.2.6

[Omar-AlJaljuli]

Description

Although tmp is a transitive dep of a devDep, it is in the SBOMs and has a vulnerability CVE-2026-44705. Fix by upgrading to tmp version > 0.2.5.

Upgrade using 'yarn up -R ...'.

Which issue(s) does this PR fix

• Fixes RHIDP-16032

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.09%. Comparing base (c7baf11) to head (69bd731).
⚠️ Report is 6 commits behind head on release-1.10.

Additional details and impacted files

@@                Coverage Diff                @@
##           release-1.10    #5223       +/-   ##
=================================================
+ Coverage         41.03%   69.09%   +28.05%     
=================================================
  Files               121      120        -1     
  Lines              2220     4895     +2675     
  Branches            563      559        -4     
=================================================
+ Hits                911     3382     +2471     
- Misses             1304     1508      +204     
  Partials              5        5               

Flag	Coverage Δ
install-dynamic-plugins	92.44% <ø> (?)
rhdh	40.36% <ø> (-0.68%)	⬇️

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c7baf11...69bd731. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5223
• quay.io/rhdh-community/rhdh:pr-5223-69bd7311

[JessicaJHee]

/lgtm

✅ Verified packages have been updated to the patched versions or beyond

• Ran branch-check and ensured all expected patch versions are present

✅ Verified lockfiles:

• Contain the minimal expected updates
• Contain only ONE version of the patched dependency if a full fix is expected
• Do not contain regressions/ dependency version downgrades