fix(chore): gRPC Memory Allocation Vulnerability

[krupanand-bitgo]

Updated @hashgraph/sdk from version 2.29.0 to 2.72.0 to use a patched version of @grpc/grpc-js that fixes the memory allocation vulnerability.
Added a resolution override for @grpc/grpc-js in the root package.json to ensure all dependencies use the patched version (^1.12.6).

Ticket: DX-1515

[akarath]

lgtm

[krupanand-bitgo]

This PR was temporarily closed because I accidentally pushed the wrong head. I've now pushed the correct head with the latest changes and reopened the PR.

[zahin-mohammad]

This PR was temporarily closed because I accidentally pushed the wrong head. I've now pushed the correct head with the latest changes and reopened the PR.

Could you rebase your PR?

[jimethn]

are you sure none of these packages are affected by the NPM worm that's been going around?

[krupanand-bitgo]

Don't we have a semi-code freeze on NPM updates?

updated yarn.lock file

[krupanand-bitgo]

are you sure none of these packages are affected by the NPM worm that's been going around?

Yes, I've verified that none of the packages being upgraded in this PR are affected by the recent NPM supply chain attacks. I cross-checked them against the known vulnerable packages listed in the following reports:
NPM debug and chalk packages compromised
S1ngularity/NX attackers strike again