Bump @npmcli/arborist from 2.6.2 to 2.10.0 in /cirq-web/cirq_ts (quan…

…tumlib#4937)

Bumps [@npmcli/arborist](https://github.com/npm/arborist) from 2.6.2 to 2.10.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/npm/arborist/commit/00e21644608fc1f5a22223038ac3726535fe1402"><code>00e2164</code></a> 2.10.0</li>
<li><a href="https://github.com/npm/arborist/commit/6bda3e39f3065d0414ff70e6f138c69e5425b1dc"><code>6bda3e3</code></a> disable ws with workspaceEnabled=false and add includeWorkspaceRoot</li>
<li><a href="https://github.com/npm/arborist/commit/bb4b906ad8692b852a78a7bcb3dd02416ab2d3a9"><code>bb4b906</code></a> 2.9.0</li>
<li><a href="https://github.com/npm/arborist/commit/50c293dac77c07fe72d42ce04418f11d5c3f02fa"><code>50c293d</code></a> feat(vuln): expose isDirect</li>
<li><a href="https://github.com/npm/arborist/commit/6baafaab335de1afff501bb16113e0454dd5b768"><code>6baafaa</code></a> 2.8.5</li>
<li><a href="https://github.com/npm/arborist/commit/5b46b8bcfba9980f90c4a71ac993002d3f2ef884"><code>5b46b8b</code></a> fix: use Intl.Collator for string sorting when available</li>
<li><a href="https://github.com/npm/arborist/commit/cb91e3ed4e8e7a70713b4f11b1671f8333ce46dd"><code>cb91e3e</code></a> 2.8.4</li>
<li><a href="https://github.com/npm/arborist/commit/cb623a27fd327b63cd21a4cf96f892d39d1dd308"><code>cb623a2</code></a> fix: avoid infinite loops in peer dep replacements</li>
<li><a href="https://github.com/npm/arborist/commit/995f885d520c8add2c53aa58b9ff429be95b8802"><code>995f885</code></a> tests: add fixtures for overlapping peer dep sets</li>
<li><a href="https://github.com/npm/arborist/commit/ddeb2d9792ec2715bb77ac434b9e17255c4df2a0"><code>ddeb2d9</code></a> chore: update settings.yml</li>
<li>Additional commits viewable in <a href="https://github.com/npm/arborist/compare/v2.6.2...v2.10.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@npmcli/arborist&package-manager=npm_and_yarn&previous-version=2.6.2&new-version=2.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/quantumlib/Cirq/network/alerts).

</details>