Security patches, fix broken test and tiny nix flake change

[ignatiusm]

Resolves #895

[ignatiusm]

Security checks now passing (I kicked of a CI run from this branch):

[ignatiusm]

Note @iamtanuj18 @plouka13, if we upgrade react-router to v8 in the future it will involve removing react-router-dom and some code changes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md

[ignatiusm]

Note: I had to upgrade the sharp library due to CVE. This new version likely was bundled with a different version of the underlying libvips binary and codecs, and as a result the image hashes after resizing were different. I didn't want to just blindly update the test data with the hash values printing in the failing tests so I used this following snippet to invoke the same version of sharp that was installed, and use the same resize and hash commands to verify the output:

❯ node -e "
const sharp = require('sharp');
const crypto = require('crypto');
const fs = require('fs');
const input = fs.readFileSync('application/common/testing/fixtures/valid_logo.png');   // the SAME fixture the test uses
const original = crypto.createHash('md5').update(input).digest('hex');
sharp(input).resize(200).png().toBuffer().then(buf => {
  const resized = crypto.createHash('md5').update(buf).digest('hex');
  console.log('originalHash', original);
  console.log('resizedHash ', resized);
});
"
originalHash 096eb6d90cb757f8eb1a3d2fc4008e3e
resizedHash  e0ee98ef4e1db2b2c9c1c3c45508fb81

This illustrates that using hashes is a slightly brittle way to test the logo resize function... but I don't have bandwidth to think about a more fuzzy way to verify this at the moment 🤷 If you have ideas feel free to create an issue and suggest them

[plouka13]

No issues with the code. Tested locally everything seems to work as expected. LGTM!

[plouka13]

Good name change choice - confused about which resource id it was before the change.

[plouka13]

Seems like a lot of these hooks are re-implementations of the react hooks from this change. Do you reckon there's a need to move away from some of these custom hooks to avoid dependency on refine?

Out of scope for this PR.

[ignatiusm]

Yeah - I don't have a strong view on this at the moment. Would have to have a think about it 🤔