Some updates (#2089)

* *sanitize-html* repo deprecated effective 2026 02 26... claims moved to https://github.com/apostrophecms/apostrophe/tree/main/packages/sanitize-html . Do when/if possible.
* Some major sub-dep versions were tagged in outdated... will need to spend more dedicated time soon to see if they can be migrated in.

Auto-merge

Author: Martii

package.json

@@ -4,17 +4,17 @@
   "version": "0.6.0",
   "main": "app",
   "dependencies": {
-    "ace-builds": "1.39.0",
+    "ace-builds": "1.43.6",
     "animate.css": "4.1.1",
     "ansi-colors": "4.1.3",
     "async": "3.2.6",
     "@octokit/auth-oauth-app": "4.3.1",
-    "aws-sdk": "2.1692.0",
+    "aws-sdk": "2.1693.0",
     "body-parser": "1.20.3",
     "bootstrap": "3.4.1",
     "bootstrap-markdown": "git+https://github.com/OpenUserJS/bootstrap-markdown.git#marked4.x",
     "clipboard": "2.0.11",
-    "compression": "1.8.0",
+    "compression": "1.8.1",
     "connect-mongo": "5.1.0",
     "diff": "5.2.0",
     "express": "4.21.2",
@@ -24,7 +24,7 @@
     "express-session": "1.18.1",
     "express-svg-captcha": "1.0.1",
     "font-awesome": "4.7.0",
-    "formidable": "3.5.2",
+    "formidable": "3.5.4",
     "git-rev": "0.2.1",
     "git-rev-sync": "3.0.2",
     "github": "git+https://github.com/octokit/rest.js.git#29dedb3",
@@ -36,15 +36,15 @@
     "jsdom": "26.0.0",
     "less-middleware": "3.1.0",
     "marked": "12.0.2",
-    "marked-highlight": "2.2.1",
+    "marked-highlight": "2.2.4",
     "media-type": "0.3.1",
     "method-override": "3.0.0",
     "mime-db": "1.53.0",
     "moment": "2.30.1",
     "moment-duration-format": "2.3.2",
     "mongodb": "6.14.2",
     "mongoose": "5.13.23",
-    "morgan": "1.10.0",
+    "morgan": "1.10.1",
     "mu2": "0.5.21",
     "octicons": "4.4.0",
     "passport": "0.4.1",
@@ -61,15 +61,15 @@
     "request": "2.88.2",
     "rfc2047": "4.0.1",
     "s3rver": "3.7.1",
-    "sanitize-html": "2.14.0",
+    "sanitize-html": "2.17.2",
     "select2": "3.5.2-browserify",
     "select2-bootstrap-css": "1.4.6",
-    "serve-favicon": "2.5.0",
+    "serve-favicon": "2.5.1",
     "spdx-license-ids": "3.0.17",
     "strip-markdown": "4.2.0",
     "terser": "4.8.1",
     "toobusy-js": "0.5.1",
-    "underscore": "1.13.7",
+    "underscore": "1.13.8",
     "useragent": "2.3.0"
   },
   "optionalDependencies": {