fix(deps): update @socketsecurity/lib to v5.5.3 and add signal-exit v4 compatibility patches

- Update @socketsecurity/lib from 5.5.2 to 5.5.3
- Add signal-exit override to force v4.1.0 everywhere
- Add execa@2.1.0 and execa@5.1.1 patches for signal-exit v4 compatibility
- Update ink@6.3.1 patch to use named import for signal-exit v4
- Fixes "onExit3/onExit4 is not a function" errors when using cdxgen command

Author: jdalton

package.json

@@ -1,7 +1,7 @@
 {
   "name": "socket-cli-monorepo",
   "version": "0.0.0",
-  "packageManager": "pnpm@10.28.0",
+  "packageManager": "pnpm@10.28.1",
   "private": true,
   "engines": {
     "node": ">=24.10.0",
@@ -188,6 +188,7 @@
       "semver": "catalog:",
       "set-function-length": "catalog:",
       "shell-quote": "catalog:",
+      "signal-exit": "4.1.0",
       "side-channel": "catalog:",
       "string_decoder": "catalog:",
       "string-width": "catalog:",
@@ -205,6 +206,8 @@
       "@npmcli/run-script@9.1.0": "patches/@npmcli__run-script@9.1.0.patch",
       "@npmcli/run-script@10.0.3": "patches/@npmcli__run-script@10.0.3.patch",
       "@sigstore/sign@4.1.0": "patches/@sigstore__sign@4.1.0.patch",
+      "execa@2.1.0": "patches/execa@2.1.0.patch",
+      "execa@5.1.1": "patches/execa@5.1.1.patch",
       "ink@6.3.1": "patches/ink@6.3.1.patch",
       "node-gyp@11.5.0": "patches/node-gyp@11.5.0.patch",
       "node-gyp@12.1.0": "patches/node-gyp@12.1.0.patch"

packages/cli/package.json

@@ -88,7 +88,7 @@
     "@socketsecurity/lib": "catalog:",
     "@socketsecurity/registry": "catalog:",
     "@socketsecurity/sdk": "catalog:",
-    "@types/react": "^19.2.8",
+    "@types/react": "^19.2.9",
     "ajv-dist": "catalog:",
     "ansi-regex": "catalog:",
     "brace-expansion": "catalog:",

packages/cli/test/unit/commands/scan/handle-create-new-scan.test.mts

@@ -144,11 +144,9 @@ describe('handleCreateNewScan', () => {
   })
 
   it('creates scan successfully with found files', async () => {
-    // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
     const { fetchSupportedScanFileNames } = await import(
       '../../../../src/commands/scan/fetch-supported-scan-file-names.mts'
     )
-    // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
     const { getPackageFilesForScan } = await import(
       '../../../../src/utils/fs/path-resolve.mts'
     )
@@ -231,15 +229,12 @@ describe('handleCreateNewScan', () => {
   })
 
   it('handles no eligible files found', async () => {
-    // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
     const { fetchSupportedScanFileNames } = await import(
       '../../../../src/commands/scan/fetch-supported-scan-file-names.mts'
     )
-    // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
     const { getPackageFilesForScan } = await import(
       '../../../../src/utils/fs/path-resolve.mts'
     )
-    // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
     const { checkCommandInput } = await import(
       '../../../../src/utils/validation/check-input.mts'
     )

packages/cli/test/unit/commands/scan/handle-scan-view.test.mts

@@ -40,7 +40,6 @@ describe('handleScanView', () => {
   })
 
   it('fetches and outputs scan view successfully', async () => {
-    // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
     const { fetchScan } = await import(
       '../../../../../src/commands/scan/fetch-scan.mts'
     )
@@ -76,7 +75,6 @@ describe('handleScanView', () => {
   })
 
   it('handles fetch failure', async () => {
-    // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
     const { fetchScan } = await import(
       '../../../../../src/commands/scan/fetch-scan.mts'
     )

packages/cli/test/unit/utils/coana/extract-scan-id.test.mts

@@ -32,7 +32,6 @@ vi.mock('@socketsecurity/lib/fs', () => ({
 describe('coana utilities', () => {
   describe('extractTier1ReachabilityScanId', () => {
     it('extracts scan ID from valid socket facts file', async () => {
-      // biome-ignore lint/correctness/noUnusedVariables: imported for mocking.
       const { readJsonSync } = vi.mocked(await import('@socketsecurity/lib/fs'))
       mockReadJsonSync.mockReturnValue({
         tier1ReachabilityScanId: 'scan-123-abc',

packages/cli/test/unit/utils/dlx/binary.test.mts

@@ -16,7 +16,11 @@ import path from 'node:path'
 
 import { describe, expect, it } from 'vitest'
 
-import { cleanDlxCache, getDlxCachePath, listDlxCache } from '@socketsecurity/lib/dlx/binary'
+import {
+  cleanDlxCache,
+  getDlxCachePath,
+  listDlxCache,
+} from '@socketsecurity/lib/dlx/binary'
 import { normalizePath } from '@socketsecurity/lib/paths/normalize'
 import { getSocketHomePath } from '@socketsecurity/lib/paths/socket'
 

patches/execa@2.1.0.patch

@@ -0,0 +1,12 @@
+diff --git a/lib/kill.js b/lib/kill.js
+index dc1c77c38407a9157cfc847c78deaac17b8898bb..998d34578b1d3a360c2a0c7a2dc0acb6d5c15ea0 100644
+--- a/lib/kill.js
++++ b/lib/kill.js
+@@ -1,6 +1,6 @@
+ 'use strict';
+ const os = require('os');
+-const onExit = require('signal-exit');
++const { onExit } = require('signal-exit');
+ const pFinally = require('p-finally');
+
+ const DEFAULT_FORCE_KILL_TIMEOUT = 1000 * 5;

patches/execa@5.1.1.patch

@@ -0,0 +1,12 @@
+diff --git a/lib/kill.js b/lib/kill.js
+index 287a14238ea9fa99b3a9c0bdaabd13df72230d78..998d34578b1d3a360c2a0c7a2dc0acb6d5c15ea0 100644
+--- a/lib/kill.js
++++ b/lib/kill.js
+@@ -1,6 +1,6 @@
+ 'use strict';
+ const os = require('os');
+-const onExit = require('signal-exit');
++const { onExit } = require('signal-exit');
+ 
+ const DEFAULT_FORCE_KILL_TIMEOUT = 1000 * 5;
+ 

patches/ink@6.3.1.patch

@@ -1,3 +1,16 @@
+diff --git a/build/ink.js b/build/ink.js
+index 5c3dd7e8e3b3a77fe2bbf6e3e94d67f5820e2076..7a6d8e5f9d9c6f0da9b41f6b6d7f9e8e9a0a1b2b3 100644
+--- a/build/ink.js
++++ b/build/ink.js
+@@ -4,7 +4,7 @@ import { throttle } from 'es-toolkit/compat';
+ import ansiEscapes from 'ansi-escapes';
+ import isInCi from 'is-in-ci';
+ import autoBind from 'auto-bind';
+-import signalExit from 'signal-exit';
++import { onExit as signalExit } from 'signal-exit';
+ import patchConsole from 'patch-console';
+ import { LegacyRoot } from 'react-reconciler/constants.js';
+ import Yoga from 'yoga-layout';
 diff --git a/build/reconciler.js b/build/reconciler.js
 index dbcad54d70b0870a469eb5767bae375f6804eb36..c9013afef1c67e820dc3595a4b2d648d0456c2fb 100644
 --- a/build/reconciler.js