## Summary
Update packages in devbox repo to address any vulnerabilities:
- Updated drupal and other devbox examples
- Update to typeid/v2
- Update to latest dependencies on opensource/pkg (and by extension
update the transitive extract/v3 dependency to extract/v4)

## How was it tested?
Ran all tests but ... tests do seem to be hanging and timing out. Hoping
someone has run into this issue to help debug and make sure the tests do
pass.

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary
- Updates `form-data` dependency from `^4.0.0` to `^4.0.4` in the VS
Code extension
- Updates `packageManager` from `pnpm@9.12.1` to `pnpm@10.13.1` in the
documentation app

## How was it tested?
N/A didn't change any core devbox functionality

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

…missing `seccomp BPF program` in arm64 linux (#2665)

## Summary

The docker-image is failing to build in GHA:

https://github.com/jetify-com/devbox/actions/runs/16204700194/job/47358742840

The error indicates that the seccomp (secure computing mode) BPF
(Berkeley Packet Filter) program that Nix tries to load is incompatible
with the Docker container environment on ARM64.

When filter-syscalls = true (the default), Nix uses seccomp BPF to
filter system calls for security sandboxing. Setting filter-syscalls =
false disables Nix's syscall filtering, which bypasses the seccomp BPF
program entirely and prevents the error.

This PR uses the approach from #1811 to fix this for arm64 platforms.


## How was it tested?

`docker build --platform linux/arm64 -t devbox-image-arm64 -f
/Users/savil/code/jetpack/devbox/internal/devbox/generate/tmpl/DevboxImageDockerfile
.`
`docker build --platform linux/arm64 -t devbox-image-arm64 -f
/Users/savil/code/jetpack/devbox/internal/devbox/generate/tmpl/DevboxImageDockerfileRootUser
.`

BEFORE: these failed with the error seen in the GHA above
AFTER: build successfully

Also confirmed that --platform linux/amd64 would build successfully

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).