fix(deps): minimatch version bump

[shelldandy]

Handle CVE: https://ops.grafana-ops.net/a/grafana-vulnerabilityobs-app/projects/1249/version/13858/cve/43077944

CVE-2026-26996

[Copilot]

Pull request overview

This PR addresses a ReDoS (Regular Expression Denial of Service) vulnerability in the minimatch package by enforcing a minimum version of 10.2.1 across all dependencies through pnpm's overrides feature.

Changes:

• Added minimatch: >=10.2.1 to pnpm overrides in package.json
• Updated pnpm-lock.yaml to resolve all minimatch dependencies to version 10.2.2
• Removed vulnerable minimatch versions (3.1.3, 9.0.6, 10.1.2) and their associated dependencies

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Added minimatch override to enforce minimum version >=10.2.1 for security
pnpm-lock.yaml	Removed vulnerable minimatch versions and updated all 16 transitive dependency references to use safe version 10.2.2

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[shelldandy]

not needed anymore, was dealt on another pr