[2.19] Configure whitesource remediate to auto create PRs for deps with known vulnerabilities

[cwperks]

Description

This PR copies the whitesource config from skills-eval repo which has been successfully creating PRs like opensearch-project/skills-eval#62 to auto resolve dependency updates with known vulnerabilies.

This is an alternative to dependabot to keep the number of PRs down, but dependabot may also be useful to try out as well.

Changelog

• chore: Configure whitesource remediate to auto create PRs for deps with known vulnerabilities

Check List

• All tests pass
  • yarn test:jest
  • yarn test:jest_integration
• New functionality includes testing.
• New functionality has been documented.
• Update CHANGELOG.md
• Commits are signed per the DCO using --signoff

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 61.15%. Comparing base (a659762) to head (90969c5).

Additional details and impacted files

@@            Coverage Diff             @@
##             2.19   #10792      +/-   ##
==========================================
- Coverage   61.16%   61.15%   -0.02%     
==========================================
  Files        3815     3815              
  Lines       91512    91512              
  Branches    14459    14459              
==========================================
- Hits        55975    55960      -15     
- Misses      31980    31993      +13     
- Partials     3557     3559       +2     

Flag	Coverage Δ
Linux_1	29.13% <ø> (ø)
Linux_2	56.60% <ø> (ø)
Linux_3	38.06% <ø> (-0.01%)	⬇️
Linux_4	29.17% <ø> (-0.01%)	⬇️
Windows_1	29.14% <ø> (-0.02%)	⬇️
Windows_2	56.55% <ø> (ø)
Windows_3	38.06% <ø> (ø)
Windows_4	29.17% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.