Release 0.0 - Upgrade Packages & Code Scanning

**Acceptance Criteria**
- [ ] Review and resolve: https://github.com/bcgov/SIMS/security/code-scanning
- [ ] Update all packages required to resolve the dependabot PRs, which means updating to the recommended PR version or the most updated version when available.
- [ ] Nodejs should be updated to the most updated minor and patch versions of the current major version, or a major version upgrade if agreed by the team.
- [ ] Any package not yet raised to be upgraded by Dependabot can be upgraded.
- [ ] Overall package upgrades can be verified using the npm-check-updates
- [ ] formio webgroup dependabot PRs should NOT be merged. The ones below are currently part of the `web-formio`.
- "@formio*"
- "bootstrap*"
- "@fortawesome/fontawesome-free"
- [ ] By the end of the effort, as much as possible, executing an npm audit on all packages should result in some vulnerability only if there are no fixes available.

Start with the open Dependabot pull requests and the repository's package manifests, then review the GitHub code-scanning results. Use npm-check-updates to identify available upgrades and npm audit to verify the package set; done means resolving applicable vulnerabilities, excluding the listed web-formio packages, and meeting the acceptance criteria.

Written by the indexing model from the issue text.