fix(with-react-native): bump the socket.io-parser pin to 4.2.7

[yosriady]

Follow-up to #131, which fixed the same issue in with-reown.

The problem

with-react-native's override pins socket.io-parser to exactly 4.2.6, which remediated the earlier <4.2.6 advisory. GHSA-2m8v-j782-fhvr (zero-attachment memory exhaustion, high) now covers <4.2.7, so that pin actively holds the example on a known-vulnerable version. It is reached through @metamask/sdk's socket.io-client.

CI does not catch this: the matrix audits with-react-native at critical, not high, so the build stays green while the dependency is genuinely vulnerable.

socket.io-parser@<4.2.6: 4.2.6   # before
socket.io-parser@<4.2.7: 4.2.7   # after

Why bump the pin rather than add an override

Adding socket.io-parser@<4.2.7: ^4.2.7 alongside the existing <4.2.6: 4.2.6 silently does nothing — it registers in the lockfile, the more specific pin still wins, and resolution stays at 4.2.6. I hit exactly that while fixing with-reown. The existing pin has to be bumped.

Verification

• pnpm install --frozen-lockfile passes
• socket.io-parser resolves to 4.2.7 and no longer appears in pnpm audit at all
• audit passes at critical (CI's level for this example)
• the lockfile diff touches only socket.io-parser, nothing else re-resolved

Two unrelated high advisories remain (fast-uri, shell-quote). Both predate this change and are outside its scope; neither affects CI at critical.

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[socket-security]

Dependency limit exceeded — report not shown.

This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report.

Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard.

Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account.