chore(deps): bump @socketsecurity/lib to 5.18.2 and @socketregistry/packageurl-js to 1.4.2

Author: jdalton

CLAUDE.md

@@ -61,6 +61,7 @@
 - Never create files unless necessary; always prefer editing existing files
 - Forbidden to create docs unless requested
 - 🚨 **NEVER use `npx`, `pnpm dlx`, or `yarn dlx`** -- use `pnpm exec <package>` for devDep binaries, or `pnpm run <script>` for package.json scripts
+- **minimumReleaseAge**: NEVER add packages to `minimumReleaseAgeExclude` in CI. Locally, ASK before adding — the age threshold is a security control.
 
 ## EVOLUTION
 

pnpm-lock.yaml

@@ -42,10 +42,10 @@ catalog:
   '@socketregistry/hyrious__bun.lockb': 1.0.19
   '@socketregistry/indent-string': 1.0.14
   '@socketregistry/is-interactive': 1.0.6
-  '@socketregistry/packageurl-js': 1.4.1
+  '@socketregistry/packageurl-js': 1.4.2
   '@socketregistry/yocto-spinner': 1.0.25
   '@socketsecurity/config': 3.0.1
-  '@socketsecurity/lib': 5.18.0
+  '@socketsecurity/lib': 5.18.2
   '@socketsecurity/registry': 2.0.2
   '@socketsecurity/sdk': 4.0.0
   '@types/adm-zip': 0.5.7
@@ -114,7 +114,7 @@ catalog:
   open: 10.2.0
   oxfmt: 0.37.0
   oxlint: 1.52.0
-  packageurl-js: npm:@socketregistry/packageurl-js@^1.4.1
+  packageurl-js: npm:@socketregistry/packageurl-js@^1.4.2
   path-parse: npm:@socketregistry/path-parse@^1.0.8
   pony-cause: 2.1.11
   postject: 1.0.0-alpha.6