build: add postinstall patching system for node_modules fixes

Introduces a mechanism to apply patches to node_modules after npm install:

- Adds `tools/scripts/apply_patches` script to apply all patches in `etc/patches/`
- Adds `postinstall` script to package.json to auto-apply patches on install
- Add patch for `unified-message-control` to fix bug where trailing spaces in lint
  disable comments disabled all lint rules instead of just the specified rule

---
type: pre_commit_static_analysis_report
description: Results of running static analysis checks when committing changes.
report:
  - task: lint_filenames
    status: passed
  - task: lint_editorconfig
    status: passed
  - task: lint_markdown
    status: na
  - task: lint_package_json
    status: passed
  - task: lint_repl_help
    status: na
  - task: lint_javascript_src
    status: passed
  - task: lint_javascript_cli
    status: na
  - task: lint_javascript_examples
    status: na
  - task: lint_javascript_tests
    status: na
  - task: lint_javascript_benchmarks
    status: na
  - task: lint_python
    status: na
  - task: lint_r
    status: na
  - task: lint_c_src
    status: na
  - task: lint_c_examples
    status: na
  - task: lint_c_benchmarks
    status: na
  - task: lint_c_tests_fixtures
    status: na
  - task: lint_shell
    status: passed
  - task: lint_typescript_declarations
    status: passed
  - task: lint_typescript_tests
    status: na
  - task: lint_license_headers
    status: passed
---

Author: Planeshifter

etc/patches/unified-message-control+1.0.4.patch

@@ -0,0 +1,13 @@
+diff --git a/index.js b/index.js
+--- a/index.js
++++ b/index.js
+@@ -75,7 +75,7 @@ function messageControl(options) {
+       if (!mark || mark.name !== options.name) {
+         return
+       }
+
+-      ruleIds = mark.attributes.split(/\s/g)
++      ruleIds = mark.attributes.split(/\s/g).filter(Boolean)
+       verb = ruleIds.shift()
+       next = parent.children[position + 1]
+       pos = mark.node.position && mark.node.position.start

lib/node_modules/@stdlib/_tools/lint/filenames/lib/extensions.json

@@ -28,6 +28,7 @@
   ".mjs",
   ".mk",
   ".ndjson",
+  ".patch",
   ".pem",
   ".png",
   ".py",

lib/node_modules/@stdlib/_tools/lint/filenames/lib/lint.js

@@ -30,8 +30,8 @@ var SPECIAL = require( './special.json' );
 
 // VARIABLES //
 
-// Only allow alphanumeric characters, `.`, `_`, or `-`:
-var BANNED_CHARS = /[^a-zA-Z0-9._-]/; // If this is changed, be sure to update the associated error message
+// Only allow alphanumeric characters, `.`, `_`, `-`, or `+`:
+var BANNED_CHARS = /[^a-zA-Z0-9._+-]/; // If this is changed, be sure to update the associated error message
 
 
 // MAIN //
@@ -99,7 +99,7 @@ function lint( arr ) {
 		if ( BANNED_CHARS.test( fname ) ) {
 			out.push({
 				'name': arr[ i ],
-				'error': 'filename must only contain the following characters: [a-zA-Z0-9._-].'
+				'error': 'filename must only contain the following characters: [a-zA-Z0-9._+-].'
 			});
 			continue;
 		}

package.json

@@ -42,7 +42,8 @@
     "benchmark": "make benchmark",
     "clean": "make clean",
     "check-deps": "make check-deps",
-    "check-licenses": "make check-licenses"
+    "check-licenses": "make check-licenses",
+    "postinstall": "tools/scripts/apply_patches"
   },
   "homepage": "https://github.com/stdlib-js/stdlib",
   "repository": {

tools/scripts/apply_patches

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+#
+# @license Apache-2.0
+#
+# Copyright (c) 2025 The Stdlib Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Apply patches to node_modules after npm install.
+#
+# Patches follow the naming convention: <package-name>+<version>.patch
+# where <package-name> uses the npm package name with / replaced by +
+# (e.g., unified-message-control+1.0.4.patch)
+
+# Get the root directory:
+root_dir="$(git rev-parse --show-toplevel)"
+
+# Patches directory:
+patches_dir="${root_dir}/etc/patches"
+
+# Apply each patch:
+for patch in "${patches_dir}"/*.patch; do
+	if [[ -f "${patch}" ]]; then
+		# Extract package name from filename (everything before the +version.patch)...
+		filename=$(basename "${patch}")
+		package_name="${filename%%+*}"
+
+		# Apply the patch (silently skip if already applied):
+		git apply --directory="node_modules/${package_name}" "${patch}" 2>/dev/null || true
+	fi
+done