fix: update file-type, ajv and jose packages (#16118)

## Summary

Updates three key dependencies to their latest versions to address
security vulnerabilities, bug fixes, and compatibility improvements.

Fixes #16072

## Changes

### file-type (19.3.0 → 21.3.4)

  - Updated in @payloadcms/payload, @payloadcms/next, and test suite
- Major version bump includes new file type detection capabilities and
improved performance
  - Now requires Node.js >=20 (up from >=18)

### ajv (8.17.1 → 8.18.0)

  - Updated in @payloadcms/payload
  - Minor version bump with bug fixes and schema validation improvements

### jose (5.9.6 → 5.10.0)

  - Updated in @payloadcms/payload
  - Patch version bump for JWT/JWS/JWE handling library
  - Includes security patches and standards compliance updates

### nodemailer (7.0.12 → 8.0.4)

  - Updated in test suite only (dev dependency)
  - Major version bump with improved email sending capabilities

## Impact

- All packages remain compatible with the project's Node.js version
requirements (^18.20.2 || >=20.9.0)
  - No breaking API changes expected for end users
  - Lock file updated to resolve dependency tree

Author: DanRibbens

packages/next/package.json

@@ -116,7 +116,7 @@
     "@payloadcms/ui": "workspace:*",
     "busboy": "^1.6.0",
     "dequal": "2.0.3",
-    "file-type": "19.3.0",
+    "file-type": "21.3.4",
     "graphql-http": "^1.22.0",
     "graphql-playground-html": "1.6.30",
     "http-status": "2.1.0",

packages/payload/package.json

@@ -102,20 +102,20 @@
     "@next/env": "^15.1.5",
     "@payloadcms/translations": "workspace:*",
     "@types/busboy": "1.5.4",
-    "ajv": "8.17.1",
+    "ajv": "8.18.0",
     "bson-objectid": "2.0.4",
     "busboy": "^1.6.0",
     "ci-info": "^4.1.0",
     "console-table-printer": "2.12.1",
     "croner": "9.1.0",
     "dataloader": "2.2.3",
     "deepmerge": "4.3.1",
-    "file-type": "19.3.0",
+    "file-type": "21.3.4",
     "get-tsconfig": "4.8.1",
     "http-status": "2.1.0",
     "image-size": "2.0.2",
     "ipaddr.js": "2.2.0",
-    "jose": "5.9.6",
+    "jose": "5.10.0",
     "json-schema-to-typescript": "15.0.3",
     "minimist": "1.2.8",
     "path-to-regexp": "6.3.0",

pnpm-lock.yaml

@@ -94,12 +94,12 @@
     "escape-html": "1.0.3",
     "eslint-plugin-playwright": "2.3.0",
     "execa": "5.1.1",
-    "file-type": "19.3.0",
+    "file-type": "21.3.4",
     "http-status": "2.1.0",
     "jwt-decode": "4.0.0",
     "mongoose": "8.15.1",
     "next": "16.2.1",
-    "nodemailer": "7.0.12",
+    "nodemailer": "8.0.4",
     "object-to-formdata": "4.5.1",
     "payload": "workspace:*",
     "pg": "8.16.3",