Update Composer dependencies for security

[lancewillett]

Summary

• updates phpunit/phpunit from 9.6.25 to 9.6.34 to address the high-severity PHPUnit advisory
• updates symfony/dom-crawler from v6.4.25 to v6.4.40 to address the low-severity DomCrawler advisory
• updates the committed production vendor files for symfony/dom-crawler

Validation

• composer validate --strict --no-check-publish
• composer audit --locked reports no advisories
• composer phpcs
• git diff --check

Notes

• This supersedes Dependabot PR Bump phpunit/phpunit from 9.6.25 to 9.6.33 #98, which only updates phpunit/phpunit and leaves the symfony/dom-crawler alert open.
• PHPUnit was not run locally because wp-env is not installed in this shell; the PR CI matrix covers PHPUnit on WordPress 6.0/latest and PHP 8.1/8.3.

[alecgeatches]

@lancewillett Thank you for the security updates, looks good to me!

[alecgeatches]

This has been merged into the latest 1.4.8 release: https://github.com/Automattic/vip-block-data-api/releases/tag/1.4.8.