fix(ci): move deps:tree to script file to fix publish failure

The inline node -e command had backticks that sh on Linux interpreted
as command substitution, causing `sh: 1: n+t+: not found`. Also,
npm ls exits non-zero on ELSPROBLEMS (version mismatches in optional
platform-specific deps), which made execSync throw during publish.

Fix: move to scripts/gen-deps.cjs with try/catch to handle npm ls
failures gracefully, and use --omit=dev to exclude devDependencies.

Author: github-actions[bot]

package.json

@@ -30,7 +30,7 @@
     "lint:fix": "biome check --write src/ tests/",
     "format": "biome format --write src/ tests/",
     "prepare": "npm run build:wasm && husky && npm run deps:tree",
-    "deps:tree": "node -e \"const{execSync}=require('child_process');const t=execSync('npm ls --all --omit=dev',{encoding:'utf8'});require('fs').writeFileSync('DEPENDENCIES.md','# Dependencies\\n\\n```\\n'+t+'```\\n')\"",
+    "deps:tree": "node scripts/gen-deps.cjs",
     "release": "commit-and-tag-version",
     "release:dry-run": "commit-and-tag-version --dry-run",
     "version": "node scripts/sync-native-versions.js && git add package.json",

scripts/gen-deps.cjs

@@ -0,0 +1,21 @@
+const { execSync } = require('child_process');
+const fs = require('fs');
+
+try {
+  const tree = execSync('npm ls --all --omit=dev', { encoding: 'utf8' });
+  fs.writeFileSync(
+    'DEPENDENCIES.md',
+    '# Dependencies\n\n```\n' + tree + '```\n',
+  );
+} catch (err) {
+  // npm ls exits non-zero on ELSPROBLEMS (version mismatches in optional deps).
+  // If stdout still has content, write it; otherwise skip silently.
+  if (err.stdout) {
+    fs.writeFileSync(
+      'DEPENDENCIES.md',
+      '# Dependencies\n\n```\n' + err.stdout + '```\n',
+    );
+  } else {
+    console.warn('deps:tree skipped —', err.message);
+  }
+}