Merge pull request #741 from sid88in/fix/tmp-path-traversal-247

fix(security): force external-editor's tmp to >=0.2.6 (CVE-2026-44705)

Author: sid88in

package-lock.json

@@ -58,6 +58,9 @@
     },
     "serverless": {
       "tar": "^7.5.8"
+    },
+    "external-editor": {
+      "tmp": "^0.2.6"
     }
   },
   "dependencies": {