[novatechflow]

Updates vulnerable dependencies across the platform, SQL/Iceberg processors, and Java/JavaScript SDKs to address all 34 currently open Dependabot alerts (15 high, 11 medium, 8 low).

• Upgrade gRPC to 1.83.1, OpenTelemetry to 1.45.0, Thrift to 0.24.0, and SQL processor WebSocket to 1.5.3; tidy all affected Go modules.
• Upgrade Jackson to 2.21.7, Undici to >=6.28.1, tar to 7.5.21, and Vitest to >=4.1.11.
• Also update esbuild and the XML parser overrides to remove the additional npm audit findings. Both SDK audits report zero vulnerabilities.

Validation: full Go vet/race suite; all three nested Go module test suites; Node SDK unit test; browser SDK's 16 tests and build; Java SDK tests (10 passed, 2 Docker-dependent tests skipped); 30-second protocol fuzz run (~2.7 million executions); module checksum verification. Checked all 34 alert dependencies against GitHub's first patched versions.

Docker is unavailable locally, so Docker-backed e2e tests were not run.

make commit-check passed in full, including Go vet/race, nested modules, both SDK test suites, protocol fuzzing, and the local CodeQL gate (no error-level findings).