fix(security): CVE-2026-27212 patched. Various dependency updates as a result of CVE-2026-26996. (#5830)

fix(security):  CVE-2026-27212 patched.
Various dependency updates as a result of CVE-2026-26996.
Ultimately CVE-2026-26996 was ignored because it is only exposed in itk-wasm via CLI and OHIF's other use of minimatch is limited to build/dev environments.

extensions/usAnnotation/package.json

@@ -52,7 +52,6 @@
   },
   "devDependencies": {
     "@babel/core": "7.28.0",
-    "@babel/eslint-parser": "7.28.0",
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
     "@babel/plugin-transform-arrow-functions": "7.27.1",
     "@babel/plugin-transform-class-properties": "7.27.1",
@@ -67,13 +66,10 @@
     "@babel/preset-typescript": "7.27.1",
     "@svgr/webpack": "8.1.0",
     "babel-loader": "8.4.1",
-    "babel-plugin-module-resolver": "5.0.2",
     "clean-webpack-plugin": "3.0.0",
     "copy-webpack-plugin": "9.1.0",
     "cross-env": "7.0.3",
     "dotenv": "8.6.0",
-    "eslint": "8.57.1",
-    "eslint-loader": "2.2.1",
     "webpack": "5.105.0",
     "webpack-cli": "5.1.4",
     "webpack-merge": "5.10.0"