chore(deps-dev): bump browserslist from 4.28.1 to 4.28.2 in /frontend

[dependabot]

Bumps browserslist from 4.28.1 to 4.28.2.

Release notes

Sourced from browserslist's releases.

4.28.2

• Fix prototype pollution (by @​chluo1997).

Changelog

Sourced from browserslist's changelog.

4.28.2

• Fix prototype pollution (by @​chluo1997).

Commits

• 502ea00 Release 4.28.2 version
• 4621a79 Re-use single constant
• 0b5a150 Update email
• 8e105c8 Process all files with oxfmt
• a6247d5 Add oxfmt support
• 32e5cb1 Update dependencies
• 60c60b7 Merge pull request #926 from chluo1997/fix-pp
• f263978 fix: prevent prototype pollution
• 2b97b75 Merge pull request #924 from SethFalco/custom-stats
• f366165 docs: add more details on custom stats
• Additional commits viewable in compare view

[cursor]

PR Summary

Low Risk
Lockfile-only dev dependency bumps with no application code changes; primary impact is build tooling and a security fix in browserslist.

Overview
Updates frontend/package-lock.json only, refreshing the resolved browserslist toolchain from 4.28.1 to 4.28.9 (along with matching bumps to baseline-browser-mapping, caniuse-lite, electron-to-chromium, node-releases, and update-browserslist-db).

This is a dev/build-time dependency refresh—browserslist is pulled in transitively (not declared in package.json), so the change affects how browser targets and compatibility data are resolved during frontend builds, not runtime app logic. The upstream 4.28.2+ line includes a prototype pollution fix in browserslist, which is the main functional reason to take this update.

^{Reviewed by Cursor Bugbot for commit 3ec8822. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}