v5.4.2 worker-ts bundle advances its deps-scan gate to v5.4.1 (npm audit --omit=dev), so bundle consumers get the node prod-tree-only audit fix. Targeted advance -- the other four bundled gates stay at v4.3.0. Unblocks beacon (all-dev tree, hard-failed on devDependency-only advisories).