build(deps): bump vite, ws, js-yaml, esbuild, @babel/core in /frontend (#734)

* build(deps): bump vite, ws, js-yaml, esbuild, @babel/core in /frontend

Closes six Dependabot advisories that had no automated PR because all but
vite are transitive and not expressible as direct bumps:

  vite         7.3.1  -> 7.3.6   3 high
  ws           8.19.0 -> 8.21.3  1 high
  js-yaml      4.1.1  -> 4.3.0   1 high
  esbuild      0.27.3 -> 0.28.1  1 low
  @babel/core  7.29.0 -> 7.29.7  1 low

storybook moves 10.2.10 -> 10.5.7 as a prerequisite: 10.2.10 caps esbuild
at ^0.27.0, so 0.28.1 was unreachable until storybook widened the range.
That is within the declared ^10.2.10, so only the vite range changed in
package.json.

Verified with npm ci, vite build and tsc --noEmit.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(frontend): give action() story callbacks a void return

storybook 10.5.7 types action() as returning any, so the concise arrow
bodies tripped @typescript-eslint/no-unsafe-return. Wrapping the calls in
block bodies discards the return value and restores the void contract the
onSelect/onClick props expect.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

frontend/package.json

@@ -91,7 +91,7 @@
     "tailwindcss": "^4.2.0",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.56.0",
-    "vite": "^7.3.1",
+    "vite": "^7.3.5",
     "vite-plugin-static-copy": "^3.2.0"
   },
   "overrides": {

frontend/src/components/SelectMenu.stories.tsx

@@ -31,6 +31,8 @@ export const Default: StoryObj<typeof SelectMenu> = {
       <SelectMenuItem label="Item 3" id={3} key="item3" />,
     ],
     selected: 1,
-    onSelect: (id: number) => action("onSelect")(id),
+    onSelect: (id: number) => {
+      action("onSelect")(id);
+    },
   },
 };

frontend/src/components/modal/Modal.stories.tsx

@@ -77,7 +77,9 @@ export const CustomModal: StoryObj<typeof Modal> = {
         <button
           className="bg-cyan-500 p-2"
           type="button"
-          onClick={() => action("onClick")("just a button")}
+          onClick={() => {
+            action("onClick")("just a button");
+          }}
         >
           Just a button
         </button>