[Snyk] Security upgrade systeminformation from 4.24.1 to 5.27.14

[acid-chicken]

Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Command Injection SNYK-JS-SYSTEMINFORMATION-14459105	853

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Command Injection

[Copilot]

Pull request overview

This PR upgrades the systeminformation package from version 4.24.1 to 5.27.14 to fix a critical command injection vulnerability (SNYK-JS-SYSTEMINFORMATION-14459105) with a severity score of 853. This is a major version upgrade that may introduce breaking changes to the API.

Key changes:

• Security upgrade from systeminformation 4.x to 5.x addresses command injection vulnerability
• Major version bump indicates potential API breaking changes
• PR includes warning that yarn.lock failed to update

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This is a major version upgrade from 4.x to 5.x which likely introduces breaking changes in the systeminformation API. The codebase uses the mem() method in two locations (src/daemons/server-stats.ts and src/misc/show-machine-info.ts) and accesses properties like 'active', 'total', and 'available'. Before merging, verify that these properties still exist and have the same meaning in version 5.x, as major version upgrades often change the data structure returned by API methods.

Suggested change

	"systeminformation": "^5.27.14",
	"systeminformation": "^4.34.23",

[Copilot]

According to the PR description, the yarn.lock file failed to update. This means the dependency resolution is incomplete and the project cannot be built or deployed until yarn.lock is properly updated. You must run 'yarn install' locally to generate a valid yarn.lock file and commit it before this PR can be safely merged.

[Copilot]

The systeminformation library is used in server-stats.ts and show-machine-info.ts but there are no automated tests covering these modules. Since this is a major version upgrade with potential breaking changes, add integration tests to verify that the mem() method returns the expected data structure with the 'active', 'total', and 'available' properties before merging this security fix.