PR-733704: update dependencies to latest, bump to v1.4.1

- Bump version 1.4.0 → 1.4.1
- Upgrade Babel 7 → 8 (@babel/core, preset-env, preset-react,
  preset-typescript, register)
- Add ts-node devDependency (webpack-cli needs it to load
  webpack.config.ts now that @babel/register v8 removed .hook)
- Replace __dirname with path.resolve() in webpack.config.ts and
  webpack.cy.config.ts (ESM-safe, no __dirname needed)
- Add npm overrides: force @babel/core ^8 for ts-jest (peerOptional
  conflict) and js-yaml ^4.2.0 to fix GHSA-h67p-54hq-rp68 DoS vuln
- Add babel hook in .storybook/main.js to strip bugfixes option that
  Storybook injects into @babel/preset-env (removed in Babel 8)
- Patch Storybook addons 10.4.3 → 10.4.6, @types/node v25→v26,
  globals v16→v17, sass minor, ts-loader patch, typescript-eslint patch
- 0 npm audit vulnerabilities

.storybook/main.js

@@ -77,5 +77,30 @@ module.exports = {
 	docs: {
 		autodocs: 'tag',
 		defaultName: 'Docs',
-	}
+	},
+
+	// Babel 8 removed the `bugfixes` option from @babel/preset-env (it's now always on).
+	// Storybook injects bugfixes:true in its internal overrides AFTER babelDefault, so we
+	// strip it here in the `babel` hook which runs after all presets have composed the config.
+	async babel(config) {
+		const stripBugfixes = preset => {
+			if (!Array.isArray(preset)) return preset;
+			const [name, options] = preset;
+			if (typeof name === 'string' && name.includes('@babel/preset-env') && options?.bugfixes !== undefined) {
+				const { bugfixes: _removed, ...rest } = options;
+				return [name, rest];
+			}
+			return preset;
+		};
+		if (config.presets) {
+			config.presets = config.presets.map(stripBugfixes);
+		}
+		if (config.overrides) {
+			config.overrides = config.overrides.map(override => {
+				if (!override.presets) return override;
+				return { ...override, presets: override.presets.map(stripBugfixes) };
+			});
+		}
+		return config;
+	},
 };