From 69f19af49696fe13cd09f612f57556a16a215b4b Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 12 Jan 2026 22:44:17 +0000
Subject: [PATCH] fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073
---
 package.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/package.json b/package.json
index c6ab8029946fd..1e04a376ff743 100644
--- a/package.json
+++ b/package.json
@@ -52,11 +52,11 @@
   },
   "dependencies": {
     "@isaacs/string-locale-compare": "^1.1.0",
-    "@npmcli/arborist": "^6.3.0",
+    "@npmcli/arborist": "^7.0.0",
     "@npmcli/config": "^6.2.1",
     "@npmcli/map-workspaces": "^3.0.4",
     "@npmcli/package-json": "^4.0.0",
-    "@npmcli/run-script": "^6.0.2",
+    "@npmcli/run-script": "^7.0.2",
     "abbrev": "^2.0.0",
     "archy": "~1.0.0",
     "cacache": "^17.1.3",
@@ -71,26 +71,26 @@
     "graceful-fs": "^4.2.11",
     "hosted-git-info": "^6.1.1",
     "ini": "^4.1.1",
-    "init-package-json": "^5.0.0",
+    "init-package-json": "^6.0.0",
     "is-cidr": "^4.0.2",
     "json-parse-even-better-errors": "^3.0.0",
     "libnpmaccess": "^7.0.2",
-    "libnpmdiff": "^5.0.19",
-    "libnpmexec": "^6.0.2",
-    "libnpmfund": "^4.0.19",
+    "libnpmdiff": "^6.0.0",
+    "libnpmexec": "^7.0.0",
+    "libnpmfund": "^4.0.20",
     "libnpmhook": "^9.0.3",
     "libnpmorg": "^5.0.4",
-    "libnpmpack": "^5.0.19",
+    "libnpmpack": "^6.0.0",
     "libnpmpublish": "^7.5.0",
     "libnpmsearch": "^6.0.2",
     "libnpmteam": "^5.0.3",
-    "libnpmversion": "^4.0.2",
+    "libnpmversion": "^5.0.0",
     "make-fetch-happen": "^11.1.1",
     "minimatch": "^9.0.0",
     "minipass": "^5.0.0",
     "minipass-pipeline": "^1.2.4",
     "ms": "^2.1.2",
-    "node-gyp": "^9.4.0",
+    "node-gyp": "^10.0.0",
     "nopt": "^7.2.0",
     "npm-audit-report": "^5.0.0",
     "npm-install-checks": "^6.1.1",
@@ -101,7 +101,7 @@
     "npm-user-validate": "^2.0.0",
     "npmlog": "^7.0.1",
     "p-map": "^4.0.0",
-    "pacote": "^15.2.0",
+    "pacote": "^17.0.4",
     "parse-conflict-json": "^3.0.1",
     "proc-log": "^3.0.0",
     "qrcode-terminal": "^0.12.0",