[GSTJ]

Summary

Updated the development tooling to node-forge 1.4.3, which fixes the newly reported TLS, HTTP parser and Ed25519 advisories.

Details

• Keeps the override and release-age exception scoped to the patched version, with the installed-version security check updated alongside it.
• The published plugin has no runtime dependency on node-forge. Expo tooling uses it locally.
• Local config-mod output and proof script exercise the built iOS and Android config mods and certificate signing. This does not establish device or OTA acceptance.

Testing steps

Run:

pnpm install --frozen-lockfile
pnpm run lint
pnpm run format
pnpm run typecheck
pnpm run test --runInBand
pnpm run build
pnpm run security:check
pnpm run changelog:check

All checks should pass. The security check still reports the three existing advisories covered by the repository's tested patches; the four node-forge advisories are gone.