Bump transitive undici to ^5.28.5 — patches 5 GHSA advisories (resource exhaustion, request smuggling, memory consumption, unhandled exception, CRLF injection)

Author: rajibcse94

package-lock.json

@@ -2,6 +2,7 @@
   "name": "ledgerprove-sign-sbom-action",
   "version": "1.0.0",
   "description": "GitHub Action: cryptographically sign your SBOM with LedgerProve.",
+  "license": "MIT",
   "private": true,
   "main": "dist/index.js",
   "scripts": {
@@ -14,7 +15,7 @@
   },
   "devDependencies": {
     "@vercel/ncc": "^0.38.1",
-    "@types/node": "^20.11.0",
+    "@types/node": "^22.0.0",
     "typescript": "^5.5.0"
   }
 }