Chore/security 20260225

[Louis-7]

Pull Request Template

Description

Security update

Type of Change

• Bug fix
• New feature
• Documentation update
• Refactor
• Other

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes

[Copilot]

Pull request overview

This is a security update PR that updates several npm dependencies with known vulnerabilities and adds an .nvmrc file to specify the Node.js version for the project.

Changes:

• Updated multiple security-critical dependencies (minimatch, ajv, tar, brace-expansion, balanced-match) to patch known vulnerabilities including ReDoS attacks
• Removed transitional @isaacs/* scoped packages and replaced them with standard versions
• Added .nvmrc file specifying Node.js v25.6.1

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package-lock.json	Security updates for minimatch (multiple versions), ajv (6.12.6→6.14.0), tar (7.5.7→7.5.9), brace-expansion (2.0.2→5.0.3), balanced-match (1.x→4.0.4); removed @isaacs/* scoped packages
.nvmrc	New file specifying Node.js v25.6.1 for the project