chore(dev-deps): Update some dev dependencies (#17816)

Just bumping some transitive dev deps to fix security warnings.

Author: mydea

.github/dependency-review-config.yml

@@ -9,3 +9,5 @@ allow-ghsas:
   - GHSA-v784-fjjh-f8r4
   # Next.js Cache poisoning - We require a vulnerable version for E2E testing
   - GHSA-gp8f-8m3g-qvj9
+  # devalue vulnerability - this is just used by nuxt & astro as transitive dependency
+  - GHSA-vj54-72f3-p5jv

packages/react/package.json

@@ -52,15 +52,13 @@
     "@types/history-4": "npm:@types/history@4.7.8",
     "@types/history-5": "npm:@types/history@4.7.8",
     "@types/hoist-non-react-statics": "^3.3.5",
-    "@types/node-fetch": "^2.6.11",
     "@types/react": "17.0.3",
     "@types/react-router-4": "npm:@types/react-router@4.0.25",
     "@types/react-router-5": "npm:@types/react-router@5.1.20",
     "eslint-plugin-react": "^7.20.5",
     "eslint-plugin-react-hooks": "^4.0.8",
     "history-4": "npm:history@4.6.0",
     "history-5": "npm:history@4.9.0",
-    "node-fetch": "^2.6.7",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-router-3": "npm:react-router@3.2.0",

packages/replay-internal/package.json

@@ -86,8 +86,7 @@
     "@sentry-internal/rrweb-snapshot": "2.40.0",
     "fflate": "0.8.2",
     "jest-matcher-utils": "^29.0.0",
-    "jsdom-worker": "^0.3.0",
-    "node-fetch": "^2.6.7"
+    "jsdom-worker": "^0.3.0"
   },
   "dependencies": {
     "@sentry-internal/browser-utils": "10.26.0",