chore: resolve Dependabot alerts (#DS-5215)

[artembelik]

Summary by CodeRabbit

• Chores
  • Improved installation consistency and overall release reliability through updated package configuration.
  • Enhanced spreadsheet compatibility and processing support.
  • Strengthened automated testing and TypeScript code-quality tooling for more dependable future updates.
  • Updated development configuration to support consistent builds and validation across environments.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 8b6d890c-5772-46e6-9dc7-9f8c58c3165c

📥 Commits

Reviewing files that changed from the base of the PR and between 32fd0d4 and a8a2cfa.

📒 Files selected for processing (1)

• package.json

💤 Files with no reviewable changes (1)

• package.json

---

📝 Walkthrough

Walkthrough

package.json adds Yarn resolutions, updates xlsx and zone.js, and adds Jest and TypeScript ESLint development dependencies.

Changes

Dependency and tooling updates

Layer / File(s)	Summary
Runtime dependency specifications package.json	Adds Yarn resolutions for transitive packages. Replaces xlsx with a CDN tarball for version 0.20.3 and changes zone.js to ~0.14.10.
Development tooling dependencies package.json	Adds @jest/globals, @typescript-eslint/types, and @typescript-eslint/utils to development dependencies.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested reviewers: lskramarov, nikgurev

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the dependency updates and security alert resolutions in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/DS-5215-dependabot

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Visit the preview URL for this PR (updated for commit a8a2cfa):

https://data-grid-next--data-grid-pr-208-c12ykt92.web.app

_{(expires Fri, 14 Aug 2026 12:04:02 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: b9d49913f5b5988e9af8690a8b37f16143707448}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@package.json`:
- Around line 13-33: Upgrade all Angular framework packages, including
`@angular/compiler`, `@angular/core`, and related Angular packages, from the 18.2.14
line to a patched coordinated release such as 19.2.23 or newer; update the
dependency declarations and regenerate yarn.lock so every Angular package
resolves consistently to the patched version.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3318eaed-2954-44e8-bfe3-7f3317d7d456

📥 Commits

Reviewing files that changed from the base of the PR and between 9f96068 and 32fd0d4.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

• package.json

[Copilot]

Pull request overview

This PR aims to address Dependabot security alerts and improve dependency install consistency in the Nx/yarn workspace by pinning/overriding specific transitive packages, updating spreadsheet support, and adding a bit of dev tooling.

Changes:

• Added a resolutions block intended to force patched versions of multiple transitive dependencies.
• Switched xlsx to the SheetJS CDN tarball and changed the zone.js version.
• Added dev dependencies to support Jest globals and TypeScript ESLint internals.