[netopsengineer]

Summary

• Remove the vulnerable minimatch → glob → rimraf → del chain loaded by semantic-release-monorepo's legacy tempy dependency (GHSA-g3hv-75wg-m249).
• Scope a dependency-free native temporary-directory adapter to the installed monorepo consumer's three no-argument directory() calls. Atomic creation, private permissions and caller-owned cleanup are explicit; unsupported APIs are not provided.
• Lock the consumer version/API through regression tests, including module resolution, unique private directories and actual bare/non-bare Git initialization. Document removal criteria for the override.

Verification

• Clean npm ci and audit:ci: zero vulnerabilities, no exceptions.
• 158 tests passed; lint, generated artifacts, repository invariants, spelling and targeted Markdown checks passed.
• Claude 2.1.311 and Codex 0.164.0 isolated marketplace installation smokes passed; validator smoke 4/4.
• Independent review found no blocking correctness/security issues.

Release impact

Root CI/release tooling only. Shipped plugin sources, catalogs and manifests are unchanged; no release warranted. The release-note preset 9.3.1 compatibility hold remains intact. No permissions, workflow gates, required reviews or repository settings are changed.

The previous automatic npm audit fix found no compatible lockfile update; this repairs the underlying dependency graph rather than weakening the audit.