fix: add direct dependency on bigint-buffer

[jazz-cb]

Description

Tests

Checklist

A couple of things to include in your PR for completeness:

• Updated the typescript README if relevant
• Updated the python README if relevant
• Added a changelog entry
• Added e2e tests if introducing new functionality

[cb-heimdall]

🟡 Heimdall Review Status

Requirement	Status	More Info
Reviews	🟡 0/1	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 1 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 1 1 1 if commit is unverified 0 Sum 1

[0xRAG]

Might sound a bit better to say something like

Suggested change

	Create direct dependency for a vulnerable package
	Create direct dependency to patch a vulnerable package

[0xRAG]

nit: can we alphabetize (pnpm will do it automatically if you run pnpm add bigint-buffer@npm:bigint-buffer-fixed@^1.1.6 from typescript/src