to close #5381

This PR fixes several issues that can cause uncaught exceptions and crash Node-RED:

1. Fixed typo: `toLowercase()` -> `toLowerCase()` in getHeaderValue()
2. Added try-catch to beforeRequest hook
3. Added try-catch to beforeRedirect hook
4. Added try-catch to afterResponse hook (digest auth)
5. Added input validation to extractCookies() with array check
6. Added input validation to buildDigestHeader() for nonce/realm

These changes ensure that malformed responses or invalid data from servers
don't crash the entire Node-RED runtime.

Fixes: Uncaught exceptions in HTTP request node

… previously selected label

Fix size and scrolling in Git config UI

Stricter validator for flow file name in project feature

Expand folder to avoid error in library

Removed 'fix/**' branch from push triggers.

Editor: Flow & subflow names are changed to all lowercase in search dialog #5348

- Remove package-lock.json from .gitignore
- Add validated package-lock.json (Node 20, 1003 packages)
- Update CI workflow to use npm ci instead of npm install
- Update README development instructions to use npm ci

This ensures all developers and CI get identical dependency trees,
protecting against npm supply chain attacks where compromised patch
versions could automatically propagate through semver ranges.

Closes #5424

File node TypedInput width fix

…rror

Fix flushing when in variable delay mode

…ceptions

fix(http-request): prevent uncaught exceptions in async hooks

…flow-navigation

TreeList: Fix widget treeList keyboard navigation scroll behavior

Ensure quick-add filter is applied properly when retriggering add

Readme markdown refactor for legibility in IDE's

…row-key-navigation

5343/Editor/Bug: Node help tab resets focus when arrow keys are used to switch between nodes

…hain

Add package-lock.json for reproducible dependency chains

Bump for 4.1.3