chore(client): batch resolution upgrades to fix 22 Dependabot alerts (#41875)

## Description
Batch Yarn resolution upgrades and direct dependency bumps to fix 22
open Dependabot alerts across 12 packages. All are minor/patch version
bumps with no breaking API changes.

| Package | Old Version | New Version | Type |
|---|---|---|---|
| tar | various | 7.5.11 | resolution |
| vite | various | 6.4.2 | resolution |
| yaml (v1) | 1.10.2 | 1.10.3 | resolution |
| yaml (v2) | 2.3.1 / 2.7.0 | 2.8.3 | resolution |
| js-yaml | various | 3.14.2 | resolution |
| mdast-util-to-hast | various | 13.2.1 | resolution |
| ajv (v6) | 6.12.6 | 6.14.0 | resolution |
| @babel/plugin-transform-modules-systemjs | various | 7.29.4 |
resolution |
| rollup (v4) | 4.43.0 | 4.59.0 | resolution |
| glob (v10) | 10.4.5 | 10.5.0 | resolution |
| glob (v11) | 11.0.0 | 11.1.0 | resolution |
| mammoth | 1.9.0 | 1.12.0 | direct bump |
| svgo | 3.2.0 | 3.3.3 | direct bump |

Fixes https://linear.app/appsmith/issue/APP-15271

Slack thread:
https://theappsmith.slack.com/archives/C09NG5BJ18S/p1780304878402439

## Dependabot Alerts Resolved
#620 @babel/plugin-transform-modules-systemjs (high)
#573 vite (medium), #572 vite (high), #437 vite (medium), #429 vite
(low), #428 vite (low)
#538 yaml (medium), #535 yaml (medium)
#524 tar (high), #519 tar (high), #493 tar (high), #482 tar (high), #469
tar (high), #466 tar (high)
#517 svgo (high)
#507 rollup (high)
#497 ajv (medium)
#454 mdast-util-to-hast (medium)
#447 glob (high), #445 glob (high)
#443 js-yaml (medium)
#435 mammoth (medium)

## Automation
/ok-to-test tags="@tag.All"

## Communication
Should the DevRel and Marketing teams be notified?
- [ ] Yes
- [x] No

## Test Verification
- Ran `yarn test:unit:ci` — **474 suites passed, 3583 tests passed**
- 1 pre-existing failure in `QueryRender.test.tsx` (7 tests) — unrelated
to these changes
- No new test failures introduced by the dependency upgrades

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
  * Upgraded mammoth dependency to version 1.11.0
  * Updated svgo development dependency to version 3.3.3
* Added dependency resolution overrides to ensure consistent transitive
package versioning across the project

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

<!-- This is an auto-generated comment: Cypress test results  -->
> [!TIP]
> 🟢 🟢 🟢 All cypress tests have passed! 🎉 🎉 🎉
> Workflow run:
<https://github.com/appsmithorg/appsmith/actions/runs/26972153558>
> Commit: e55e6a8
> <a
href="https://internal.appsmith.com/app/cypress-dashboard/rundetails-65890b3c81d7400d08fa9ee5?branch=master&workflowId=26972153558&attempt=2"
target="_blank">Cypress dashboard</a>.
> Tags: `@tag.All`
> Spec:
> <hr>Thu, 04 Jun 2026 20:07:24 UTC
<!-- end of auto-generated comment: Cypress test results  -->

Author: subrata71

app/client/package.json

@@ -158,7 +158,7 @@
     "lodash-es": "4.17.21",
     "loglevel": "^1.7.1",
     "lottie-web": "^5.7.4",
-    "mammoth": "^1.5.1",
+    "mammoth": "^1.11.0",
     "memoize-one": "^6.0.0",
     "micro-memoize": "^4.0.10",
     "microdiff": "^1.4.0",
@@ -459,6 +459,22 @@
     "immutable": "4.3.8",
     "js-cookie": "3.0.7",
     "simple-git": "3.36.0",
-    "@protobufjs/utf8": "1.1.1"
+    "@protobufjs/utf8": "1.1.1",
+    "tar": "7.5.11",
+    "vite": "6.4.2",
+    "js-yaml": "3.14.2",
+    "mdast-util-to-hast": "13.2.1",
+    "ajv@^6.12.2": "6.14.0",
+    "ajv@^6.12.4": "6.14.0",
+    "ajv@^6.12.5": "6.14.0",
+    "@babel/plugin-transform-modules-systemjs": "7.29.4",
+    "rollup@^4.34.8": "4.59.0",
+    "rollup@^4.34.9": "4.59.0",
+    "yaml@^1.10.0": "1.10.3",
+    "yaml@^2.3.4": "2.8.3",
+    "yaml@2.3.1": "2.8.3",
+    "glob@^10.3.10": "10.5.0",
+    "glob@^10.3.7": "10.5.0",
+    "glob@^11.0.0": "11.1.0"
   }
 }

app/client/packages/icons/package.json

@@ -23,6 +23,6 @@
     "fast-glob": "^3.3.2",
     "figmagic": "^4.5.13",
     "fs-extra": "^11.2.0",
-    "svgo": "^3.2.0"
+    "svgo": "^3.3.3"
   }
 }