fix(arborist): block symlink escape in patch applier #10129

Open
rootvector2 opened 1:40am on October 15, 2026 wants to merge 25 Δ into npm/cli latest from
block-patch-applier-symlink-escape

Pull Request #10129 commits