[mswilkison]

Refresh the development dependency graph to remove affected versions for 39 of the 40 currently open Dependabot alerts. Upgrade Mocha 9 to 11.8, refresh compatible transitive ranges, and use parent-scoped resolutions where Hardhat, Mocha, Sentry, and solc still require vulnerable release lines.

Hardhat remains on 2.29.1. The plugin's runtime dependencies, public Hardhat peer range, source, and committed dist/ are preserved. The root-only resolutions update this repository's development installation; consuming projects resolve their own dependency graphs.

• Patch Hardhat's Undici, adm-zip, and UUID dependencies; Sentry's cookie dependency; solc's tmp dependency; and Mocha's diff and serialize-javascript dependencies.
• Refresh compatible lodash, immutable, js-yaml, follow-redirects, debug, semver, path-parse, and diff resolutions, and remove the obsolete Mocha 9 subtree.
• Add compatibility checks for Hardhat JSON-RPC success/error handling, redirected compiler downloads, the Windows compiler ZIP API, solc temporary-file cleanup, and Mocha assertion diffs. CI also runs tests in parallel to exercise worker serialization.
• Document the overrides and maintenance checks in the README.

Validation on Node 20.20.2 / Yarn 4.12.0:

• yarn install --immutable — passes.
• yarn build and git diff --exit-code -- dist — pass; generated artifacts are unchanged.
• yarn test — 20 passing.
• yarn test --parallel --jobs 2 — 20 passing.
• git diff --check — passes.
• Compared every open alert's affected range with the new lockfile: 39 no longer match; only #18 remains.
• yarn npm audit --all --recursive --no-deprecations reports only the low-severity elliptic advisory below, and exits 1. No advisories are suppressed.

Remaining alert: #18 — GHSA-848j-6mx2-7j84, elliptic@6.6.1 via @ethersproject/signing-key. There is no patched upstream release. Replacing Hardhat's signing implementation is outside this dependency-maintenance change.