chore(deps): Update npm packages to remediate security vulnerabilities

lib/DBSQLClient.ts

@@ -1,3 +1,4 @@
+import './utils/thriftCompat';
 import thrift from 'thrift';
 import Int64 from 'node-int64';
 

lib/connection/connections/HttpConnection.ts

@@ -1,3 +1,4 @@
+import '../../utils/thriftCompat';
 import thrift from 'thrift';
 import https from 'https';
 import http from 'http';

lib/connection/connections/ThriftHttpConnection.ts

@@ -5,6 +5,7 @@
 */
 
 import { EventEmitter } from 'events';
+import '../../utils/thriftCompat';
 import { TBinaryProtocol, TBufferedTransport, Thrift, TProtocol, TProtocolConstructor, TTransport } from 'thrift';
 import fetch, { RequestInit, HeadersInit, Request, Response, FetchError } from 'node-fetch';
 // @ts-expect-error TS7016: Could not find a declaration file for module

lib/index.ts

@@ -1,5 +1,6 @@
 // Don't move this import - it should be placed before any other
 import './polyfills';
+import './utils/thriftCompat';
 
 import { Thrift } from 'thrift';
 import TCLIService from '../thrift/TCLIService';

lib/utils/thriftCompat.ts

@@ -0,0 +1,25 @@
+import Module from 'module';
+
+type InternalModuleLoader = {
+  _load: (request: string, parent: NodeJS.Module | undefined, isMain: boolean) => unknown;
+};
+
+const PATCH_KEY = Symbol.for('databricks.sql.thriftUuidCompatInstalled');
+const globalState = globalThis as typeof globalThis & { [PATCH_KEY]?: boolean };
+
+if (!globalState[PATCH_KEY]) {
+  const moduleWithLoader = Module as unknown as InternalModuleLoader;
+  const originalLoad = moduleWithLoader._load.bind(Module);
+
+  moduleWithLoader._load = (request, parent, isMain) => {
+    if (request === 'uuid' && parent?.filename && /[\\/]node_modules[\\/]thrift[\\/]/.test(parent.filename)) {
+      // thrift 0.23.x still loads uuid using require(), which fails with uuid@13 on older Node.js.
+      // Force thrift internals to use our direct uuid dependency (v9, CommonJS-compatible).
+      return require('uuid'); // eslint-disable-line global-require
+    }
+
+    return originalLoad(request, parent, isMain);
+  };
+
+  globalState[PATCH_KEY] = true;
+}