Update Socket patches: +5 patches

[socket-security]

Summary

This PR updates Socket security patches for your dependencies.

These patches are applied via the Socket patch agent — .socket/manifest.json + a package.json postinstall hook.

Changes

• ✅ Added: CVE-2026-6322 in pkg:npm/fast-uri@3.0.6 (Socket Patch)
  • Severity: HIGH
  • Summary: fast-uri vulnerable to host confusion via percent-encoded authority delimiters
• ✅ Added: CVE-2026-6321 in pkg:npm/fast-uri@3.0.6 (Socket Patch)
  • Severity: HIGH
  • Summary: fast-uri vulnerable to path traversal via percent-encoded dot segments
• ✅ Added: in pkg:npm/serialize-javascript@6.0.2 (Socket Patch)
  • Severity: HIGH
  • Summary: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()
• ✅ Added: CVE-2026-33937 in pkg:npm/handlebars@4.7.8 (Socket Patch)
  • Severity: CRITICAL
  • Summary: Handlebars.js has JavaScript Injection via AST Type Confusion
• ✅ Added: CVE-2026-9277 in pkg:npm/shell-quote@1.8.3 (Socket Patch)
  • Severity: CRITICAL
  • Summary: shell-quote quote() does not escape newlines in object .op values

Testing

Review the patches and test your application to ensure compatibility.

---

🔒 Powered by Socket Security

[linux-foundation-easycla]

• ❌ - login: @Socket-Security[bot] / name: socket-security[bot]. The commit (512aa0d) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please visit our EasyCLA portal and chat with our support bot.

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️