pin node dependencies

only substantial changes:
- @eslint/js 9.38.0 -> 9.37.0, basically just reverting the
  change from previous commit
- word-wrap 1.2.3 -> 1.2.5, matching version in lockfile,
  apparently changed via eslint 8 -> 9 update and not on
  purpose by us, may 2025 (255102c2)

pinning chroma-js keeps chroma.min.js from disappearing out of
the root of that package, so import continues working, broken at
some point more recently - affecting people using other package
managers or running npm update themselves

0 files changed, 0 insertions, 0 deletions