From fc4f37cb54a2f288c831860248e5975a6a09dbf8 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 2 Feb 2026 11:45:42 +0000
Subject: [PATCH] fix: workspaces/libnpmhook/package.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-15127355
---
 workspaces/libnpmhook/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/workspaces/libnpmhook/package.json b/workspaces/libnpmhook/package.json
index 2f76b52f8e1be..0a57361655f07 100644
--- a/workspaces/libnpmhook/package.json
+++ b/workspaces/libnpmhook/package.json
@@ -36,7 +36,7 @@
   "license": "ISC",
   "dependencies": {
     "aproba": "^2.0.0",
-    "npm-registry-fetch": "^13.0.0"
+    "npm-registry-fetch": "^18.0.1"
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^3.0.1",