Bump minimatch to 9.0.9

[brunolins16]

Summary

• update vulnerable minimatch lockfile resolutions to patched releases
• add a version-scoped npm override for the parser dependency that pins minimatch@9.0.3
• address GHSA-7r86-cg39-jmmj

Validation

• npm ci
• npm run format:check
• npm run lint
• npm run test
• npm run ci-test
• npm run bundle
• licensed cache
• licensed status
• npm audit --package-lock-only no longer reports a minimatch advisory

[Copilot]

Pull request overview

Updates transitive minimatch dependencies to patched versions addressing GHSA-7r86-cg39-jmmj.

Changes:

• Upgrades affected 3.x and 9.x lockfile resolutions.
• Overrides the legacy parser dependency to use minimatch@9.0.9.

Show a summary per file

File	Description
package.json	Adds the scoped minimatch override.
package-lock.json	Records patched dependency resolutions.

Review details

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Balanced