⬆️ Bump minimatch from 3.1.2 to 3.1.4

[Copilot]

minimatch@3.1.2 has a known security vulnerability; 3.1.4 contains the fix. Since it's an indirect dependency, a direct pnpm install won't pull the update automatically.

Changes

• package.json — added pnpm.overrides to force the vulnerable range to 3.1.4:

  "pnpm": {
    "overrides": {
      "minimatch@<3.1.4": "3.1.4"
    }
  }

• pnpm-lock.yaml — regenerated; all minimatch@3.1.2 references replaced with 3.1.4 (consumers: glob@7.2.3, test-exclude@6.0.0)
• .changeset/bump-minimatch-security.md — patch changeset added

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[changeset-bot]

🦋 Changeset detected

Latest commit: 75d88b6

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR