chore(deps): bump tmp and @inquirer/editor

[dependabot]

Removes tmp. It's no longer used after updating ancestor dependency @inquirer/editor. These dependencies need to be updated together.

Removes tmp

Updates @inquirer/editor from 4.2.12 to 4.2.23

Release notes

Sourced from @​inquirer/editor's releases.

@​inquirer/editor@​4.2.22

• fix @inquirer/editor: Fix typo s/waitForUseInput/waitForUserInput
• Bump dependencies

Commits

• 4731a37 Publish
• ef537e3 fix: Downgrade mute-stream to v2 for Node 18+ compatibility (#1891)
• 7e6c3a2 fix(inquirer): Allow Partial<*> types as prefilled answers (#1889)
• 3458ab6 chore: Add CLAUDE.md
• 6881993 Publish
• db2ffca feat(@​inquirer/input): Document pattern/patternError in README
• 160958a chore: Bump dependencies (#1886)
• c3bab7a feat: Improve Inquirer types to infer more valid types (#1880)
• 48d0668 chore: Remove README sponsor block (#1885)
• c562b2d chore: Refactor scaffolding script (#1884)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Note

Low Risk
Changes are limited to dev transitive dependencies (Inquirer CLI tooling); runtime library code is untouched, though verify Node 20 engine entries in the lockfile align with your supported Node versions.

Overview
This PR only updates package-lock.json, mainly to bump @inquirer/editor (4.2.12 → 4.2.23) and refresh the Inquirer dev-dependency tree.

@inquirer/editor now uses @inquirer/external-editor instead of the legacy external-editor package. That drops tmp and os-tmpdir from the lockfile (they were only needed by the old external-editor path). Related bumps include @inquirer/core, chardet, and new @inquirer/ansi.

The lockfile also records node": ">= 20.0.0" for workspace @redis/* packages (previously >= 18.19.0 in the lockfile section). Confirm that matches intentional engine policy; there is no package.json change in this diff.

^{Reviewed by Cursor Bugbot for commit 9809116. Bugbot is set up for automated code reviews on this repo. Configure here.}

[jit-ci]

🛡️ Jit Security Scan Results

✅ No security findings were detected in this PR

---

^{Security scan by Jit}