Fix: Resolve minimatch ReDoS vulnerability (CVE-2026-26996)

[sandinak]

Summary

This PR fixes 6 high severity vulnerabilities related to a ReDoS (Regular Expression Denial of Service) vulnerability in the minimatch package.

Vulnerability Details

• CVE: CVE-2026-26996
• GHSA: GHSA-3ppc-4f35-3m26
• Severity: High
• Affected versions: minimatch < 10.2.1
• Fixed version: minimatch >= 10.2.1

Changes Made

Added an overrides section to package.json to force all transitive dependencies to use minimatch version ^10.2.1, which contains the security fix.

"overrides": {
  "minimatch": "^10.2.1"
}

Verification

After applying this fix:

• ✅ npm audit reports 0 vulnerabilities (previously 6 high severity)
• ✅ All builds pass successfully
• ✅ No breaking changes to the API

Testing

npm install
npm audit  # Should report 0 vulnerabilities
npm run build  # Should complete successfully

References

• GitHub Advisory GHSA-3ppc-4f35-3m26
• minimatch security fix commit

---

Pull Request opened by Augment Code with guidance from the PR author