chore(deps): bump non-breaking npm dependencies

[jokerttu]

Consolidates the open Dependabot npm PRs into one update, taking every bump that
does not require a code or config migration.

Direct dependencies

The non-major subset of #663:

Package	From	To
react, react-test-renderer	19.2.3	19.3.0
react-native	0.87.0	0.87.1
@react-native/babel-preset, @react-native/metro-config, @react-native/typescript-config	0.87.0	0.87.1
@types/react	19.2.0	19.3.0
react-native-gesture-handler	3.0.2	3.3.0

Lockfile-only

Transitive updates from the standalone Dependabot PRs, each resolved at or above
the requested version: fast-uri #669, js-yaml #668, qs #667,
baseline-browser-mapping #666, browserslist #665, joi #664, tar #619,
ws #618, launch-editor #617, shell-quote #610, tmp #605,
@babel/plugin-transform-modules-systemjs #589, ip-address #586,
fast-xml-parser #564, lodash #561, handlebars #558, picomatch #556,
flatted #553, minimatch #544, @babel/helpers #426, nanoid #378,
serve-static #265.

Left out

The major bumps grouped into #663 break the build, which is why that PR's lint
and build-library jobs fail: ESLint 10 requires a flat eslint.config.* and
this repo still uses .eslintrc.js, and TypeScript 7 fails bob build. Also
held back from that group: Babel 8, Jest 30, @types/node 26, commitlint 21,
lefthook 2, del-cli 7, @testing-library/react-native 14,
eslint-plugin-react-hooks 7, react-native-pager-view 9, and the 0.x bumps of
react-native-builder-bob and react-native-monorepo-config.

turbo 1 to 2 (#595) is held back for the same reason: turbo 2 renamed pipeline
to tasks and turbo.json still uses pipeline, which is what fails that PR's
Android and iOS builds.

Each of these needs its own migration, so they stay as separate follow-ups.

Verification

yarn lint, yarn test:types, yarn prepare, and
yarn turbo run build:android all pass locally.

Pre-launch Checklist

• I read the Contributor Guide and followed the process outlined there for submitting PRs.
• I signed the CLA.
• I listed at least one issue that this PR fixes in the description above.
• I updated/added relevant documentation
• I added new tests to check the change I am making
• All existing and new tests are passing.

🤖 Generated with Claude Code

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.