Porting internal security-related dependency bumps

[joperezr]

Description

This PR includes changes made internally by dependabot which bumps several dependencies to newer versions.
cc: @radical

Checklist

• Is this feature complete?
  • Yes. Ready to ship.
  • No. Follow-up changes expected.
• Are you including unit tests for the changes and scenario tests if relevant?
  • Yes
  • No
• Did you add public API?
  • Yes
    • If yes, did you have an API Review for it?
      • Yes
      • No
    • Did you add <remarks /> and <code /> elements on your triple slash comments?
      • Yes
      • No
  • No
• Does the change make any security assumptions or guarantees?
  • Yes
    • If yes, have you done a threat model and had a security review?
      • Yes
      • No
  • No
• Does the change require an update in our Aspire docs?
  • Yes
    • Link to aspire-docs issue (consider using one of the following templates):
      • New (or update) doc-idea template
      • New breaking-change template
      • New diagnostic template
  • No

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.sh | bash -s -- 13752

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/dotnet/aspire/main/eng/scripts/get-aspire-cli-pr.ps1) } 13752"

[Copilot]

Pull request overview

This PR ports internal security-related dependency bumps across multiple package ecosystems to address security vulnerabilities. The changes upgrade Node.js packages (jws) and Java Maven dependencies (PostgreSQL driver, Jetty server, Netty components, and others) to their latest secure versions.

Key Changes:

• Upgrades jws package from 3.2.2 to 3.2.3 in Node.js service
• Bumps PostgreSQL JDBC driver from 42.7.1 to 42.7.2 in Java service
• Adds dependencyManagement section to Java pom.xml to pin security-critical library versions

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

File	Description
playground/PostgresEndToEnd/PostgresEndToEnd.NodeService/package.json	Adds jws as a direct dependency (should be transitive only)
playground/PostgresEndToEnd/PostgresEndToEnd.NodeService/package-lock.json	Updates jws to 3.2.3 and its jwa dependency to 1.4.2
playground/PostgresEndToEnd/PostgresEndToEnd.JavaService/pom.xml	Adds dependencyManagement section with security updates and upgrades PostgreSQL driver to 42.7.2

Files not reviewed (1)

• playground/PostgresEndToEnd/PostgresEndToEnd.NodeService/package-lock.json: Language not supported