fix: Remove remaining vulnerabilities by updating the hosted-git-info, tar, semver, ejs, elliptic packages

[sw-joelmut]

Addresses #4684
#minor

Description

This updates remaining medium and low vulnerable packages to latest possible versions:

• hosted-git-info https://github.com/microsoft/botbuilder-js/security/dependabot/27 - CVE-2021-23362
• tar https://github.com/microsoft/botbuilder-js/security/dependabot/343 - CVE-2024-28863
• semver https://github.com/microsoft/botbuilder-js/security/dependabot/279 - CVE-2022-25883
• ejs https://github.com/microsoft/botbuilder-js/security/dependabot/347 - CVE-2024-33883
• elliptic https://github.com/microsoft/botbuilder-js/security/dependabot/18 - CVE-2020-28498

Specific Changes

• Updated hosted-git-info, semver , and elliptic versions by changing the yarn resolution reference inside yarn.lock file.
• Removed tar resolutions as it's no longer needed.
• Added ejs resolutions due to Nightwatch vulnerable pinned version.

Testing

Test image isn't needed, package version changes are small.

[coveralls]

Pull Request Test Coverage Report for Build 9861270438

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 84.433%

---

Totals
Change from base Build 9861219534:	0.0%
Covered Lines:	20429
Relevant Lines:	22904

---

💛 - Coveralls