Upgraded requirejs from 2.36 to 2.37

[orangejenny]

Summary

https://dimagi.atlassian.net/browse/SAAS-15983

HQ was done in dimagi/commcare-hq#34917

Safety Assurance

• Risk label is set correctly
• The set of people pinged as reviewers is appropriate for the level of risk of the change
• If QA is part of the safety story, the "Awaiting QA" label is used
• I have confidence that this PR will not introduce a regression for the reasons below

Automated test coverage

There is test coverage, I'll also smoke test on staging.

QA Plan

no

Safety story

Rollback instructions

• This PR can be reverted after deploy with no further considerations

[gherceg]

I always miss CVEs for vellum. Thank you! Remind me, would vellum end up using the version of RequireJS set in HQ, or are the versions of their dependencies independent of one another?

[orangejenny]

They're independent - Vellum had requirejs long before HQ. Check out here and here to see how it gets loaded.