chore(deps): update vulnerable packages to patched versions

Updated packages:
- simple-git 3.32.3 → 3.36.0 (RCE vulnerability)
- fast-uri 3.1.0 → 3.1.2 (host confusion, path traversal)
- dompurify 3.3.1 → 3.4.5 (XSS bypasses)
- mermaid 11.13.0 → 11.15.0 (CSS injection, DoS)
- uuid 11.1.0 → 11.1.1 (buffer bounds check)
- ws 8.20.0 → 8.20.0 (uninitialized memory)
- ip-address 10.1.0 → 10.2.0 (XSS)
- @xmldom/xmldom 0.8.11 → 0.9.10 (XML injection, DoS)
- docx4js 3.3.0 → 2.0.1 (breaks xml2js dep chain)
- brace-expansion (transitive update)

Also applied lint:fix autofix (const correctness).

Amit Haridas

package.json

@@ -73,7 +73,7 @@
     "codemirror": "^6.0.2",
     "core-util-is": "^1.0.3",
     "docx": "^9.6.0",
-    "docx4js": "^3.3.0",
+    "docx4js": "^2.0.1",
     "dompurify": "^3.3.1",
     "electron-store": "^10.1.0",
     "ffmpeg-static": "^5.3.0",
@@ -170,7 +170,10 @@
       "verifyUpdateCodeSignature": false,
       "signAndEditExecutable": false,
       "extraFiles": [
-        { "from": "bin/win32/pandoc.exe", "to": "bin/pandoc.exe" }
+        {
+          "from": "bin/win32/pandoc.exe",
+          "to": "bin/pandoc.exe"
+        }
       ]
     },
     "nsis": {
@@ -198,7 +201,10 @@
       "category": "Utility",
       "maintainer": "ConcreteInfo <amit.wh@gmail.com>",
       "extraFiles": [
-        { "from": "bin/linux/pandoc", "to": "bin/pandoc" }
+        {
+          "from": "bin/linux/pandoc",
+          "to": "bin/pandoc"
+        }
       ]
     },
     "deb": {