Fix #10429 jquery dependency needs to be updated to 3.5.0 or newer

[breser]

There is a vulnerability in the version currently being used.
GHSA-gxr4-xjj5-5px2

closes: #10429

---

^ Add meaningful description above

Read the Pull Request Guidelines for more information.
In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in UPDATING.md.

[boring-cyborg]

Congratulations on your first Pull Request and welcome to the Apache Airflow community! If you have any issues or are unsure about any anything please check our Contribution Guide (https://github.com/apache/airflow/blob/master/CONTRIBUTING.rst)
Here are some useful points:

• Pay attention to the quality of your code (flake8, pylint and type annotations). Our pre-commits will help you with that.
• In case of a new feature add useful documentation (in docstrings or in docs/ directory). Adding a new operator? Check this short guide Consider adding an example DAG that shows how users should use it.
• Consider using Breeze environment for testing locally, it’s a heavy docker but it ships with a working Airflow and a lot of integrations.
• Be patient and persistent. It might take some time to get a review or get the final approval from Committers.
• Please follow ASF Code of Conduct for all communication including (but not limited to) comments on Pull Requests, Mailing list and Slack.
• Be sure to read the Airflow Coding style.
  Apache Airflow is a community-driven project and together we are making it better 🚀.
  In case of doubts contact the developers at:
  Mailing List: [email protected]
  Slack: https://apache-airflow-slack.herokuapp.com/

[ryw]

@ryanahamilton can you review/test this?

[ryanahamilton]

@breser can you include your modified airflow/www/yarn.lock in this PR please?

[kaxil]

jQuery 3.5.0 does not work well with FAB, past issue: #8599

[kaxil]

Past attempts at it:

• Update JS packages to latest versions (#9811) #9921 (comment)
• Bump FAB in order to bump jQuery (resolves SNYK-JS-JQUERY-565129) #8586
• Issue in FAB: 2.3.3 (jQuery upgrade) breaks CSRF on some Safari, Chrome dpgaspar/Flask-AppBuilder#1362

[breser]

I'm closing this then because I have no time/ability to fix these deeper issues.