[kernel-internal]

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA	Package	Ecosystem	Old Version	New Version	Manifest	Confirmation
GHSA-p498-v437-472g	%40humanfs/node, eslint	None	9.39.1	0.16.8		confirmed

Not Included

• Deferred by batch limit: 7 advisories. They will be considered by future runs.
• Other deferred scanner findings: 0.
• Unconfirmed attempted fixes: 0.

---

Note

Low Risk
Lockfile-only transitive upgrades under eslint with no production code or direct dependency manifest changes.

Overview
Addresses GHSA-p498-v437-472g by refreshing yarn.lock only—no manifest version bumps. Transitive packages pulled in through eslint are updated: @humanfs/node 0.16.6 → 0.16.8, @humanfs/core 0.19.1 → 0.19.2, plus new @humanfs/types@0.15.0, and @humanwhocodes/retry is deduplicated onto 0.4.3 (replacing the older 0.3.x line).

This is Socket-driven vulnerability remediation; runtime application dependencies are unchanged—only the dev-tooling filesystem stack used by ESLint moves to patched versions.

^{Reviewed by Cursor Bugbot for commit 1fcd021. Bugbot is set up for automated code reviews on this repo. Configure here.}