chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
@aws-sdk/client-sts (source)	devDependencies	pin	^3.1058.0 → 3.1064.0
@types/mocha (source)	devDependencies	pin	^10.0.9 → 10.0.10
@types/node (source)	devDependencies	pin	^22.0.0 → 22.19.18
@types/sinon (source)	devDependencies	pin	^21.0.1 → 21.0.1
aws-cdk-lib (source)	devDependencies	pin	^2.253.0 → 2.258.0
eslint (source)	devDependencies	pin	^10.4.1 → 10.4.1
globals	devDependencies	pin	^17.6.0 → 17.6.0
gts	devDependencies	pin	^7.0.0 → 7.0.0
mocha (source)	devDependencies	pin	^11.7.6 → 11.7.6
public.ecr.aws/sam/build-python3.14	final	pinDigest	→ 2c5be5e
sinon (source)	devDependencies	pin	^22.0.0 → 22.0.0
ts-loader	devDependencies	pin	^9.6.0 → 9.6.0
ts-node (source)	devDependencies	pin	^10.9.2 → 10.9.2
typescript (source)	devDependencies	pin	^5.7.0 → 5.9.3
typescript-eslint (source)	devDependencies	pin	^8.60.1 → 8.60.1
ubuntu	final	pinDigest	→ f3d2860
vitest (source)	devDependencies	pin	^4.1.0 → 4.1.0
webpack	devDependencies	pin	^5.107.2 → 5.107.2
webpack-cli (source)	devDependencies	pin	^7.0.3 → 7.0.3
webpack-node-externals	devDependencies	pin	^3.0.0 → 3.0.0

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.