Fix: Bump node-gyp from 13.0.0 to 13.0.1 to address the vulnerability

[keshav-poojary]

What / Why

This change bumps the bundled node-gyp dependency from 13.0.0 to 13.0.1.

node-gyp 13.0.1 includes the upstream security fix released in version 13.0.1. Updating the bundled dependency ensures that npm CLI no longer pulls the vulnerable node-gyp 13.0.0 version into its dependency tree.

Vulnerability Details

The vulnerability affects node-gyp versions prior to 13.0.1 due to Unidic and is addressed by the upstream fix included in node-gyp 13.0.1.

Because node-gyp is bundled as part of the npm CLI dependency tree, consumers of affected npm CLI versions may also receive the vulnerable dependency transitively.

This PR updates the bundled dependency to the patched release:

• Affected: node-gyp 13.0.0
• Fixed: node-gyp 13.0.1
• Impact: Vulnerability in the transitive/bundled node-gyp dependency
• Resolution: Upgrade node-gyp to 13.0.1

References

• Fixes: node-gyp 13.0.1 security fix
• build(deps): bump undici from 6.26.0 to 8.4.1 nodejs/node-gyp#3330
• Related: https://github.com/nodejs/node-gyp/releases/tag/v13.0.1
• https://security.snyk.io/package/npm/undici/6.26.0