Yarn Audit: new or newly blocking advisories on main (436f45a6f6)

**1** new or newly blocking advisory detected on push to `main` (0 release-blocking).

CI run: https://github.com/MetaMask/metamask-extension/actions/runs/31022987693

## Informational (dev-only or low severity)

- **electron** (moderate, dev-only) — Electron: Parent process code-sign check is spoofable
https://github.com/advisories/GHSA-jm7p-cc5g-qwxx

Native audit tree

```
├─ electron
│ ├─ ID: 1136551
│ ├─ Issue: Electron: Parent process code-sign check is spoofable
│ ├─ URL: https://github.com/advisories/GHSA-jm7p-cc5g-qwxx
│ ├─ Severity: moderate
│ ├─ Vulnerable Versions: <39.8.8
│ │
│ ├─ Tree Versions
│ │ └─ 23.3.0
│ │
│ └─ Dependents
│ └─ react-devtools@npm:6.1.5
│
```

Start with the linked CI run and the Native audit tree in this issue. Confirm how Electron 23.3.0 is related to react-devtools 6.1.5 and review the advisory's affected versions. The issue does not define whether the expected result is an upgrade, mitigation, or documentation, so the completion criteria need clarification.

Written by the indexing model from the issue text.