chore: Remediate 3 Dependabot security alerts

[jperals]

Bumps vitest from 4.1.8 to 4.1.11 and joi from 18.2.3 to 18.2.8 to address security alerts.

Note: Dependabot PRs #171 (browserslist) and #169 (fast-uri) remain open. PR #168 (postcss-selector-parser) has a conflict and failing tests — needs manual attention.

Alerts addressed

• GHSA-82fw-gwwq-j7x9 / CVE-2026-84373 — @vitest/mocker (transitive) — medium — 4.1.8 -> 4.1.11 — https://github.com/cloudscape-design/chat-components/security/dependabot/187
• GHSA-6w3j-5fw6-r9vr / CVE-2026-84368 — joi (transitive) — low — 18.2.3 -> 18.2.8 — https://github.com/cloudscape-design/chat-components/security/dependabot/186
• GHSA-gg4h-3hg2-grpc / CVE-2026-84367 — joi (transitive) — low — 18.2.3 -> 18.2.8 — https://github.com/cloudscape-design/chat-components/security/dependabot/185

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.86%. Comparing base (d3ce4c7) to head (92a8e3f).

❌ Your project check has failed because the head coverage (87.86%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #173   +/-   ##
=======================================
  Coverage   87.86%   87.86%           
=======================================
  Files          25       25           
  Lines         346      346           
  Branches       94       97    +3     
=======================================
  Hits          304      304           
  Misses         42       42           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[pan-kot]

There are only low prio alerts in the dashboard - closing the pr.