[kernel-internal]

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA	Package	Ecosystem	Old Version	New Version	Manifest	Confirmation
GHSA-p498-v437-472g	%40humanfs/node, eslint	None	9.39.1	0.16.8		confirmed

Not Included

• Deferred by batch limit: 7 advisories. They will be considered by future runs.
• Other deferred scanner findings: 0.
• Unconfirmed attempted fixes: 0.

---

Note

Low Risk
Lockfile-only transitive dependency upgrades for lint tooling with no runtime or application code impact.

Overview
Updates yarn.lock only to remediate GHSA-p498-v437-472g by pulling in newer transitive packages on the ESLint toolchain—chiefly @humanfs/node 0.16.6 → 0.16.8, with matching bumps to @humanfs/core, the new @humanfs/types, and consolidated @humanwhocodes/retry 0.4.3. No package.json or source changes; install graph shifts under the existing eslint dev dependency.

^{Reviewed by Cursor Bugbot for commit 3129370. Bugbot is set up for automated code reviews on this repo. Configure here.}