fix(security): CVE-2026-27212 patched. Various dependency updates as a result of CVE-2026-26996. (#5830)

fix(security):  CVE-2026-27212 patched.
Various dependency updates as a result of CVE-2026-26996.
Ultimately CVE-2026-26996 was ignored because it is only exposed in itk-wasm via CLI and OHIF's other use of minimatch is limited to build/dev environments.

platform/cli/templates/extension/dependencies.json

@@ -45,16 +45,12 @@
     "@babel/preset-react": "^7.27.1",
     "@babel/preset-typescript": "^7.27.1",
     "@babel/plugin-transform-private-property-in-object": "^7.27.1",
-    "@babel/eslint-parser": "7.28.0",
     "babel-loader": "^8.2.4",
     "@svgr/webpack": "^8.1.0",
-    "babel-plugin-module-resolver": "^5.0.0",
     "clean-webpack-plugin": "^4.0.0",
     "copy-webpack-plugin": "^10.2.0",
     "cross-env": "^7.0.3",
     "dotenv": "^14.1.0",
-    "eslint": "^8.39.0",
-    "eslint-loader": "^2.0.0",
     "webpack": "5.89.0",
     "webpack-merge": "^5.7.3",
     "webpack-cli": "^5.0.2"

platform/cli/templates/mode/dependencies.json

@@ -35,15 +35,12 @@
     "@babel/preset-env": "7.28.0",
     "@babel/preset-react": "^7.27.1",
     "@babel/preset-typescript": "^7.27.1",
-    "@babel/eslint-parser": "7.28.0",
     "babel-loader": "^8.0.0-beta.4",
     "@svgr/webpack": "^8.1.0",
     "clean-webpack-plugin": "^4.0.0",
     "copy-webpack-plugin": "^10.2.0",
     "cross-env": "^7.0.3",
     "dotenv": "^14.1.0",
-    "eslint": "^8.39.0",
-    "eslint-loader": "^2.0.0",
     "webpack": "5.89.0",
     "webpack-merge": "^5.7.3",
     "webpack-cli": "^5.0.2"

platform/ui/package.json

@@ -58,7 +58,6 @@
     "react-test-renderer": "18.3.1",
     "react-window": "1.8.11",
     "react-with-direction": "1.4.0",
-    "swiper": "8.4.7",
     "webpack": "5.105.0"
   },
   "devDependencies": {