fix: resolve dependabot security alerts (#404)

packages/ui/package.json

@@ -19,7 +19,7 @@
     "@usesend/eslint-config": "workspace:*",
     "@usesend/typescript-config": "workspace:*",
     "eslint": "^8.57.1",
-    "postcss": "^8.5.3",
+    "postcss": "^8.5.14",
     "prettier": "^3.5.3",
     "prettier-plugin-tailwindcss": "^0.6.11",
     "react": "19.1.0",
@@ -51,7 +51,7 @@
     "input-otp": "^1.4.2",
     "lucide-react": "^0.503.0",
     "next-themes": "^0.4.6",
-    "pnpm": "^10.9.0",
+    "pnpm": "^10.28.2",
     "react-day-picker": "^9.10.0",
     "react-hook-form": "^7.56.1",
     "recharts": "^2.15.3",