fix(deps): resolve Dependabot alerts (#710)

## Summary
- pin `axios` to 1.18.0 for eight open advisories
- pin `protobufjs` 7.x to 7.6.5
- pin `@opentelemetry/propagator-jaeger` to 2.9.0
- pin `js-yaml` 4.x to 4.3.0
- regenerate the pnpm lockfile

## Verification
- `pnpm install --frozen-lockfile` passed
- `git diff --check` passed
- confirmed vulnerable lockfile versions were removed
- `pnpm format:check` blocked by a missing
`@oxfmt/binding-linux-x64-gnu` optional native binding in this Node 18
sandbox
- `pnpm typecheck` reached existing missing
`@langchain/sandbox-standard-tests/vitest` declarations in integration
tests
- `pnpm audit --prod` reports the separate known `node-vfs-polyfill`
malware advisory, which has no patched version and is not among the open
Dependabot alerts addressed here

Co-authored-by: John Kennedy <john@users.noreply.github.com>