Fix Dependabot security update failure for @babel/core

[Copilot]

Dependabot was failing with security_update_not_possible because it couldn't auto-update the transitive @babel/core dependency from the vulnerable 7.28.0 to the patched >=7.29.6. The blocker: no @jest/globals@^30 release directly pins the fixed babel version, so Dependabot's only resolution path would downgrade @jest/globals from 30.4.1 → 27.5.1.

Changes

• package.json — adds @babel/core to the existing npm overrides block, forcing ^7.29.6 (resolves to 7.29.7)
• package-lock.json — regenerated with @babel/core@7.29.7 replacing 7.28.0

"overrides": {
  "tmp": "^0.2.5",
  "@babel/core": "^7.29.6"
}

This is the fix path Dependabot itself suggested: "Add an override/resolution to pin @babel/core to a non-vulnerable version compatible with your dependencies." The override is compatible with all existing consumers — ts-jest@29.x peer-requires @babel/core >=7.0.0-beta.0 <8, and @jest/globals@30.x transitively requires @babel/core@^7.0.0, both satisfied by 7.29.7.