Merge dependabot security PRs

[mikesposito]

There are several PR related to security vulnerabilities from dependabot in repos owned by Wallet Framework (for full list, see https://github.com/MetaMask/MetaMask-planning/issues/3540).

In some cases, we should also prioritize release and update of affected packages in their consumers in order to mitigate the security issues, based on their EPSS value.

When to release the package

• if EPSS is >= 1% then release the package and deliver to clients
• if EPSS is < 1%
  • if the package is released (and delivered to clients) frequently then just merge the dependabot PR
  • if the package is rarely updated, release and deliver to (at least) other packages that are released more frequently, or to clients if it makes sense

To get the EPSS value

• Go to the alert related to the PR (e.g. https://github.com/MetaMask/actions-gh-pages-test-repo/security/dependabot/64)
• Click on See advisory in GitHub Advisory Database
• See EPSS right below GHSA ID

@mikesposito

• Bump @babel/traverse from 7.11.5 to 7.25.9 in the npm_and_yarn group actions-gh-pages-test-repo#118
• build(deps): bump the npm_and_yarn group across 1 directory with 11 updates ethjs-unit#22
• Bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group swappable-obj-proxy#61
  • Release new version
  • Update in closer consumer (with higher update frequency)

@mcmire

• build(deps): bump the npm_and_yarn group across 1 directory with 7 updates ethjs-filter#14
• Bump the npm_and_yarn group across 1 directory with 9 updates ethjs-util#25
• build(deps): bump the npm_and_yarn group across 1 directory with 7 updates ethjs#32

@MajorLift

• build(deps): bump the npm_and_yarn group across 1 directory with 9 updates ethjs-contract#25
• Bump the npm_and_yarn group across 1 directory with 9 updates ethjs-format#15
• build(deps): bump the npm_and_yarn group across 1 directory with 13 updates ethjs-provider-http#25

@mcmire

• Bump the npm_and_yarn group across 1 directory with 6 updates ethjs-query#54
• build(deps): bump the npm_and_yarn group across 1 directory with 6 updates number-to-bn#24
• Bump the npm_and_yarn group across 2 directories with 2 updates oss-attribution-generator#32