fix(deps): update all packages to use catalog for @socketsecurity/lib

Updates 9 packages from pinned version 2.10.4 to catalog version 3.1.3.

This fixes CommonJS/ESM import issues in build scripts that were failing
with "getDefaultLogger is not a function" errors.

Also fixes:
- build-output.mjs: Use hoisted logger pattern for better performance
- clean.mjs: Replace forbidden fs.rm() with safeDelete() from @socketsecurity/lib/fs
- clean.mjs: Fix logger imports to work with updated lib version

Packages updated:
- bootstrap
- build-infra
- codet5-models-builder
- minilm-builder
- models
- node-smol-builder
- onnxruntime
- sbom-generator
- socket
- yoga-layout

Author: jdalton

packages/bootstrap/dist/bootstrap-npm.js

@@ -22,7 +22,7 @@
     "@babel/types": "^7.28.5",
     "@socketsecurity/build-infra": "workspace:*",
     "@socketsecurity/cli": "workspace:*",
-    "@socketsecurity/lib": "2.10.4",
+    "@socketsecurity/lib": "catalog:",
     "del-cli": "catalog:",
     "esbuild": "catalog:",
     "magic-string": "catalog:",

packages/bootstrap/dist/bootstrap-smol.js

@@ -5,45 +5,46 @@
  */
 
 import loggerPkg from '@socketsecurity/lib/logger'
-const { getDefaultLogger } = loggerPkg
+
+const logger = loggerPkg.getDefaultLogger()
 
 /**
  * Print header.
  */
 export function printHeader(message) {
-  getDefaultLogger().step(message)
+  logger.step(message)
 }
 
 /**
  * Print step.
  */
 export function printStep(message) {
-  getDefaultLogger().substep(message)
+  logger.substep(message)
 }
 
 /**
  * Print substep.
  */
 export function printSubstep(message) {
-  getDefaultLogger().info(`  ${message}`)
+  logger.info(`  ${message}`)
 }
 
 /**
  * Print success message.
  */
 export function printSuccess(message) {
-  getDefaultLogger().success(message)
+  logger.success(message)
 }
 
 /**
  * Print error message.
  */
 export function printError(message, error = null) {
-  getDefaultLogger().error(message)
+  logger.error(message)
   if (error) {
-    getDefaultLogger().error(error.message)
+    logger.error(error.message)
     if (error.stack) {
-      getDefaultLogger().error(error.stack)
+      logger.error(error.stack)
     }
   }
 }
@@ -52,5 +53,5 @@ export function printError(message, error = null) {
  * Print warning message.
  */
 export function printWarning(message) {
-  getDefaultLogger().warn(message)
+  logger.warn(message)
 }

packages/bootstrap/package.json

@@ -25,7 +25,7 @@
   "dependencies": {
     "@babel/parser": "catalog:",
     "@babel/traverse": "catalog:",
-    "@socketsecurity/lib": "2.10.4",
+    "@socketsecurity/lib": "catalog:",
     "magic-string": "catalog:"
   }
 }

packages/build-infra/lib/build-output.mjs

@@ -11,6 +11,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.10.4"
+    "@socketsecurity/lib": "catalog:"
   }
 }

packages/build-infra/package.json

@@ -2,13 +2,15 @@
  * Clean codet5-models build artifacts.
  */
 
-import { promises as fs } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 import { cleanCheckpoint } from '@socketsecurity/build-infra/lib/checkpoint-manager'
 import { printHeader, printSuccess } from '@socketsecurity/build-infra/lib/build-output'
-import { getDefaultLogger } from '@socketsecurity/lib/logger'
+import { safeDelete } from '@socketsecurity/lib/fs'
+import loggerPkg from '@socketsecurity/lib/logger'
+
+const logger = loggerPkg.getDefaultLogger()
 
 const __filename = fileURLToPath(import.meta.url)
 const __dirname = path.dirname(__filename)
@@ -21,10 +23,10 @@ async function main() {
   printHeader('Cleaning codet5-models')
 
   // Remove models directory.
-  await fs.rm(MODELS_DIR, { recursive: true, force: true }).catch(() => {})
+  await safeDelete(MODELS_DIR).catch(() => {})
 
   // Remove build directory.
-  await fs.rm(BUILD_DIR, { recursive: true, force: true }).catch(() => {})
+  await safeDelete(BUILD_DIR).catch(() => {})
 
   // Clean checkpoints.
   await cleanCheckpoint('codet5-models')
@@ -33,6 +35,6 @@ async function main() {
 }
 
 main().catch((e) => {
-  getDefaultLogger().error('Clean failed:', e.message)
+  logger.error('Clean failed:', e.message)
   process.exit(1)
 })

packages/codet5-models-builder/package.json

@@ -11,6 +11,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.10.4"
+    "@socketsecurity/lib": "catalog:"
   }
 }

packages/codet5-models-builder/scripts/clean.mjs

@@ -20,6 +20,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.10.4"
+    "@socketsecurity/lib": "catalog:"
   }
 }

packages/minilm-builder/package.json

@@ -2,7 +2,7 @@
   "dependencies": {
     "@socketsecurity/bootstrap": "workspace:*",
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.10.4"
+    "@socketsecurity/lib": "catalog:"
   },
   "description": "Custom Node.js binary builder with Socket security patches",
   "devDependencies": {