chore: update npm dependencies

[matteius]

Summary

• update root Playwright and Sharp dependencies
• update the web stack, including Vite 8.2, Preact, Tailwind CSS, DaisyUI, PostCSS, and Selenium
• refresh both lockfiles and patch the transitive brace-expansion vulnerability
• remove obsolete yauzl and adm-zip overrides
• remove esbuild options ignored by the Vite 8 Oxc transform path

Compatibility notes

• keep @babel/preset-env on 7.29.7 because Babel 8 conflicts with the current Vite legacy plugin and the supported Node 20 build environment
• leave the go2rtc npm manifest unchanged because it belongs to the git submodule and requires its own submodule commit

Validation

• npm audit --json in root and web: 0 vulnerabilities
• npm outdated --json in root and web: no compatible updates remaining
• npm ls --depth=0 in root and web
• web unit tests: 59/59 passed
• web production build passed with Vite 8.2.0
• integration suite: 169/170 passed; the stateful stream-delete case passed on an isolated clean-fixture rerun
• git diff --check

The full integration teardown also reproduced an existing LeakSanitizer finding in the application system-log endpoint; it is outside this dependency-only change.

[Copilot]

Pull request overview

This PR updates the project’s npm dependency set across the root Playwright test harness and the web/ frontend, refreshing both lockfiles and removing now-unneeded overrides / build config that no longer applies with the Vite 8 toolchain.

Changes:

• Bump root devDependencies (@playwright/test, playwright, sharp) and refresh package-lock.json.
• Update the web/ frontend stack (Vite 8.2, Preact, Tailwind, DaisyUI, PostCSS, Selenium), refresh web/package-lock.json, and drop obsolete overrides.
• Remove Vite esbuild config options that are no longer applicable with the current transform path.

Reviewed changes

Copilot reviewed 3 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
web/vite.config.js	Removes the top-level esbuild configuration block from the Vite config.
web/package.json	Updates frontend dependencies/devDependencies and removes obsolete overrides.
web/package-lock.json	Refreshes the web lockfile to reflect updated frontend toolchain and transitive patches.
package.json	Updates root Playwright + Sharp devDependencies.
package-lock.json	Refreshes the root lockfile for updated Playwright/Sharp and transitive deps.

Files not reviewed (1)

• web/package-lock.json: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.