Update JS and PY deps, lock eslint and related plugins (go-gitea#30452)

Update all JS dependencies and lock eslint and flat-only plugins. There
is at least the blocker
SonarSource/eslint-plugin-sonarjs#454
preventing us from upgrading to eslint 9.

Tested API spec, charts and absolute dates.

Author: silverwind