Update tmp package to the latest version

[wojtekn]

Motivation for the change, related issues

I want to close Dependabot finding: https://github.com/Automattic/studio/security/dependabot/57

Implementation details

Testing Instructions (or ideally a Blueprint)

Confirm that the build works fine.

[adamziel]

Thanks @wojtekn! Would peerDependencies also work for this? I worry about someone removing the tmp from dependencies once they realize nothing imports it directly

[wojtekn]

As far as I read, peerDependencies wouldn't work - they don't force updates of transitive dependencies, only declare that a dependency should be available.

I added direct dependency and kept override to:

• make it explicit, so it won't be accidentally removed
• force all instances to use 0.2.5, including deep deps

Let me know what you think.

[adamziel]

TIL, thank you!