fix(test): resolve TypeScript errors in bundle validation

Adds @types/babel__traverse to fix type checking errors in CI.
Uses type assertions to work around version mismatches between
@babel/types used by parser (7.26.3) vs traverse types (7.28.4).

Author: jdalton

package.json

@@ -63,6 +63,7 @@
     "@eslint/js": "9.35.0",
     "@socketregistry/packageurl-js": "1.3.5",
     "@socketsecurity/lib": "3.1.3",
+    "@types/babel__traverse": "7.28.0",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20250926.1",
     "@vitest/coverage-v8": "4.0.3",

pnpm-lock.yaml

@@ -61,16 +61,16 @@ async function checkBundledDependencies(content: string): Promise<{
   const bundledDeps: string[] = []
 
   // Parse the bundle into an AST.
-  const ast = parse(content, {
+  const file = parse(content, {
     sourceType: 'module',
     plugins: ['typescript'],
   })
 
   // Collect all import sources from the AST.
   const importSources = new Set<string>()
-  // @ts-expect-error - traverse types are complex
-  traverse(ast, {
-    ImportDeclaration(path) {
+
+  traverse(file as any, {
+    ImportDeclaration(path: any) {
       const source = path.node.source.value
       importSources.add(source)
     },
@@ -97,15 +97,16 @@ async function checkBundledDependencies(content: string): Promise<{
         // If it's just in string literals (like constants), that's fine.
         // Use AST to check if it appears in any meaningful way.
         let foundInCode = false
-        // @ts-expect-error - traverse types are complex
-        traverse(ast, {
-          StringLiteral(path) {
+
+        traverse(file as any, {
+          StringLiteral(path: any) {
             // Skip string literals - these are fine
             if (pattern.test(path.node.value)) {
               // It's in a string literal, which is fine
             }
           },
-          Identifier(path) {
+
+          Identifier(path: any) {
             // Check if the package name appears in identifiers or other code
             if (
               pattern.test(path.node.name) ||