fix(deps): cap upper bounds on pnpm overrides

Bugbot flagged unbounded '>=X' replacements causing cross-major
version jumps. express resolved to 5.2.1 (breaks Storybook builders),
react-router to 7.14.1 (mismatch with react-router-dom 6.x), and
undici/path-to-regexp to 8.x.

Add explicit upper-major caps to all replacements to keep resolution
within the intended major line.

Author: nelitow

package.json

@@ -111,81 +111,81 @@
       "ignoreMissing": ["react", "react-dom"]
     },
     "overrides": {
-      "@adobe/css-tools@<4.3.2": ">=4.3.2",
-      "@babel/helpers@<7.26.10": ">=7.26.10",
-      "@babel/runtime@<7.26.10": ">=7.26.10",
-      "@babel/traverse@<7.23.2": ">=7.23.2",
-      "@metamask/sdk-communication-layer@<0.33.1": ">=0.33.1",
-      "@metamask/sdk@<0.33.1": ">=0.33.1",
-      "@remix-run/router@<1.23.2": ">=1.23.2",
-      "@tootallnate/once@<3.0.1": ">=3.0.1",
-      "@xmldom/xmldom@<0.8.12": ">=0.8.12",
-      "ajv@>=7.0.0 <8.18.0": ">=8.18.0",
-      "bn.js@>=5.0.0 <5.2.3": ">=5.2.3",
-      "body-parser@<1.20.3": ">=1.20.3",
-      "braces@<3.0.3": ">=3.0.3",
-      "cipher-base@>=1.0.0 <1.0.5": ">=1.0.5",
-      "cookie@<0.7.0": ">=0.7.0",
+      "@adobe/css-tools@<4.3.2": ">=4.3.2 <5.0.0",
+      "@babel/helpers@<7.26.10": ">=7.26.10 <8.0.0",
+      "@babel/runtime@<7.26.10": ">=7.26.10 <8.0.0",
+      "@babel/traverse@<7.23.2": ">=7.23.2 <8.0.0",
+      "@metamask/sdk-communication-layer@<0.33.1": ">=0.33.1 <1.0.0",
+      "@metamask/sdk@<0.33.1": ">=0.33.1 <1.0.0",
+      "@remix-run/router@<1.23.2": ">=1.23.2 <2.0.0",
+      "@tootallnate/once@<3.0.1": ">=3.0.1 <4.0.0",
+      "@xmldom/xmldom@<0.8.12": ">=0.8.12 <0.9.0",
+      "ajv@>=7.0.0 <8.18.0": ">=8.18.0 <9.0.0",
+      "bn.js@>=5.0.0 <5.2.3": ">=5.2.3 <6.0.0",
+      "body-parser@<1.20.3": ">=1.20.3 <2.0.0",
+      "braces@<3.0.3": ">=3.0.3 <4.0.0",
+      "cipher-base@>=1.0.0 <1.0.5": ">=1.0.5 <2.0.0",
+      "cookie@<0.7.0": ">=0.7.0 <1.0.0",
       "cross-fetch": "4.0.0",
-      "cross-spawn@<7.0.5": ">=7.0.5",
-      "debug@<3.1.0": ">=3.1.0",
-      "defu@<6.1.5": ">=6.1.5",
-      "elliptic@<6.6.0": ">=6.6.0",
+      "cross-spawn@<7.0.5": ">=7.0.5 <8.0.0",
+      "debug@<3.1.0": ">=3.1.0 <5.0.0",
+      "defu@<6.1.5": ">=6.1.5 <7.0.0",
+      "elliptic@<6.6.0": ">=6.6.0 <7.0.0",
       "esbuild@<=0.24.2": ">=0.25.0",
-      "express@<4.20.0": ">=4.20.0",
-      "fast-xml-parser@>=4.1.3 <5.3.5": ">=5.3.5",
-      "flatted@<3.4.2": ">=3.4.2",
-      "follow-redirects@<1.16.0": ">=1.16.0",
-      "form-data@>=4.0.0 <4.0.4": ">=4.0.4",
+      "express@<4.20.0": ">=4.20.0 <5.0.0",
+      "fast-xml-parser@>=4.1.3 <5.3.5": ">=5.3.5 <6.0.0",
+      "flatted@<3.4.2": ">=3.4.2 <4.0.0",
+      "follow-redirects@<1.16.0": ">=1.16.0 <2.0.0",
+      "form-data@>=4.0.0 <4.0.4": ">=4.0.4 <5.0.0",
       "glob-parent@<5.1.2": ">=5.1.2",
-      "glob@>=10.0.0 <10.5.0": ">=10.5.0",
-      "h3@<1.15.9": ">=1.15.9",
-      "handlebars@<4.7.9": ">=4.7.9",
-      "image-size@>=1.1.0 <1.2.1": ">=1.2.1",
-      "js-yaml@>=4.0.0 <4.1.1": ">=4.1.1",
+      "glob@>=10.0.0 <10.5.0": ">=10.5.0 <11.0.0",
+      "h3@<1.15.9": ">=1.15.9 <2.0.0",
+      "handlebars@<4.7.9": ">=4.7.9 <5.0.0",
+      "image-size@>=1.1.0 <1.2.1": ">=1.2.1 <2.0.0",
+      "js-yaml@>=4.0.0 <4.1.1": ">=4.1.1 <5.0.0",
       "json5": ">=2.2.2",
       "markdown-to-jsx@<7.4.0": ">=7.4.0",
-      "micromatch@<4.0.8": ">=4.0.8",
-      "minimatch@>=9.0.0 <9.0.7": ">=9.0.7",
-      "minimatch@>=10.0.0 <10.2.3": ">=10.2.3",
+      "micromatch@<4.0.8": ">=4.0.8 <5.0.0",
+      "minimatch@>=9.0.0 <9.0.7": ">=9.0.7 <10.0.0",
+      "minimatch@>=10.0.0 <10.2.3": ">=10.2.3 <11.0.0",
       "nanoid@<3.3.8": "3.3.8",
-      "node-forge@<1.4.0": ">=1.4.0",
+      "node-forge@<1.4.0": ">=1.4.0 <2.0.0",
       "nth-check": ">=2.1.1",
-      "on-headers@<1.1.0": ">=1.1.0",
-      "path-to-regexp@<0.1.13": ">=0.1.13",
-      "path-to-regexp@>=0.2.0 <6.3.0": ">=6.3.0",
-      "pbkdf2@<=3.1.2": ">=3.1.3",
-      "picomatch@>=4.0.0 <4.0.4": ">=4.0.4",
-      "postcss@<8.4.31": ">=8.4.31",
-      "preact@<10.26.10": ">=10.26.10",
-      "prismjs@<1.30.0": ">=1.30.0",
-      "qs@<6.14.2": ">=6.14.2",
-      "react-router@<6.30.2": ">=6.30.2",
-      "react-router@>=7.0.0 <7.9.6": ">=7.9.6",
-      "rollup@>=4.0.0 <4.59.0": ">=4.59.0",
+      "on-headers@<1.1.0": ">=1.1.0 <2.0.0",
+      "path-to-regexp@<0.1.13": ">=0.1.13 <0.2.0",
+      "path-to-regexp@>=0.2.0 <6.3.0": ">=6.3.0 <7.0.0",
+      "pbkdf2@<=3.1.2": ">=3.1.3 <4.0.0",
+      "picomatch@>=4.0.0 <4.0.4": ">=4.0.4 <5.0.0",
+      "postcss@<8.4.31": ">=8.4.31 <9.0.0",
+      "preact@<10.26.10": ">=10.26.10 <11.0.0",
+      "prismjs@<1.30.0": ">=1.30.0 <2.0.0",
+      "qs@<6.14.2": ">=6.14.2 <7.0.0",
+      "react-router@<6.30.2": ">=6.30.2 <7.0.0",
+      "react-router@>=7.0.0 <7.9.6": ">=7.9.6 <8.0.0",
+      "rollup@>=4.0.0 <4.59.0": ">=4.59.0 <5.0.0",
       "secp256k1": "@noble/secp256k1",
-      "semver@<7.5.2": ">=7.5.2",
-      "send@<0.19.0": ">=0.19.0",
-      "serve-static@<1.16.0": ">=1.16.0",
-      "sha.js@>=2.4.0 <2.4.12": ">=2.4.12",
-      "socket.io-parser@>=4.0.0 <4.2.6": ">=4.2.6",
-      "store2@<2.14.4": ">=2.14.4",
-      "svgo@>=3.0.0 <3.3.3": ">=3.3.3",
-      "tar-fs@>=1.0.0 <1.16.6": ">=1.16.6",
-      "tar-fs@>=2.0.0 <2.1.4": ">=2.1.4",
-      "tar-fs@>=3.0.0 <3.1.1": ">=3.1.1",
-      "tar@>=7.0.0 <7.5.11": ">=7.5.11",
-      "tmp@<0.2.4": ">=0.2.4",
+      "semver@<7.5.2": ">=7.5.2 <8.0.0",
+      "send@<0.19.0": ">=0.19.0 <1.0.0",
+      "serve-static@<1.16.0": ">=1.16.0 <2.0.0",
+      "sha.js@>=2.4.0 <2.4.12": ">=2.4.12 <3.0.0",
+      "socket.io-parser@>=4.0.0 <4.2.6": ">=4.2.6 <5.0.0",
+      "store2@<2.14.4": ">=2.14.4 <3.0.0",
+      "svgo@>=3.0.0 <3.3.3": ">=3.3.3 <4.0.0",
+      "tar-fs@>=1.0.0 <1.16.6": ">=1.16.6 <2.0.0",
+      "tar-fs@>=2.0.0 <2.1.4": ">=2.1.4 <3.0.0",
+      "tar-fs@>=3.0.0 <3.1.1": ">=3.1.1 <4.0.0",
+      "tar@>=7.0.0 <7.5.11": ">=7.5.11 <8.0.0",
+      "tmp@<0.2.4": ">=0.2.4 <1.0.0",
       "trim-newlines@<3.0.1": ">=3.0.1",
       "trim@<0.0.3": ">=0.0.3",
-      "undici@>=6.0.0 <6.24.0": ">=6.24.0",
-      "undici@>=7.0.0 <7.24.0": ">=7.24.0",
-      "vitest@>=2.0.0 <2.1.9": ">2.1.9",
-      "webpack@<5.104.1": ">=5.104.1",
+      "undici@>=6.0.0 <6.24.0": ">=6.24.0 <7.0.0",
+      "undici@>=7.0.0 <7.24.0": ">=7.24.0 <8.0.0",
+      "vitest@>=2.0.0 <2.1.9": ">2.1.9 <3.0.0",
+      "webpack@<5.104.1": ">=5.104.1 <6.0.0",
       "word-wrap": "npm:@aashutoshrathi/word-wrap",
-      "ws@>=8.0.0 <8.17.1": ">=8.17.1",
-      "yaml@>=2.0.0 <2.8.3": ">=2.8.3",
-      "zod@<=3.22.2": ">=3.22.3"
+      "ws@>=8.0.0 <8.17.1": ">=8.17.1 <9.0.0",
+      "yaml@>=2.0.0 <2.8.3": ">=2.8.3 <3.0.0",
+      "zod@<=3.22.2": ">=3.22.3 <4.0.0"
     }
   }
 }