chore(deps): update nyc, babel-plugin-istanbul, rimraf, and semantic-release

[samuelwei]

In attempt to get rid of npm deprecation warning I started bumping dependencies.

I bumped:

• nyc to 18.0 (used a much newer glob)
• babel-plugin-istanbul (On Github a newer version exists, but their CI is currently broken, see Publish 8.0.0 - 8.0.2 to NPM registry istanbuljs/babel-plugin-istanbul#325)
• rimraf
• semantic-release (still outdated, but newer versions require a newer node version)

Once babel-plugin-istanbul v8 is released on npm, it should be bumped to finally remove glob v7 usage.

Before
75 vulnerabilities (5 low, 20 moderate, 45 high, 5 critical)

After
39 vulnerabilities (4 low, 9 moderate, 25 high, 1 critical)

---

Note

Medium Risk
Dependency upgrades can change build/test/release behavior (notably nyc/coverage reporting and semantic-release) and may introduce CI/runtime incompatibilities, though no product logic changes are implied.

Overview
This PR bumps several dependencies and devDependencies to reduce deprecation warnings and lower reported vulnerabilities, including upgrades to nyc, babel-plugin-istanbul, rimraf, and semantic-release.

It also updates related tooling versions in package.json (coverage/test/build stack), which may affect coverage report generation and release automation behavior.

^{Written by Cursor Bugbot for commit c172e7b. This will update automatically on new commits. Configure here.}

[cypress-app-bot]

• Create a Draft Pull Request if your PR is not ready for review. Mark the PR as Ready for Review when you're ready for a Cypress team member to review the PR.

[CLAassistant]

All committers have signed the CLA.

[cypress-app-bot]

🎉 This PR is included in version 4.0.2 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀