[tidy-dev]

Summary

• Override minimatch only for glob@10, resolving the Jest dependency path to minimatch@11.0.2.
• Keep unrelated minimatch@3.1.5 copies unchanged.

Validation

• npm ci --ignore-scripts
• npm test -- --runInBand (42 tests passed)

[Copilot]

🟢 Approval recommended

The review records no active issues, with the dependency override and lockfile updates scoped to the intended Jest/glob path while unrelated minimatch dependencies remain unchanged.

No open issues 🎉

What changed in this PR

Updates npm dependency resolution so Jest’s glob@10 uses the non-vulnerable minimatch@11.0.2, while preserving unrelated minimatch@3.1.5 dependencies.

Changes:

• Adds a scoped glob@^10 override for minimatch 11.x.
• Regenerates the lockfile with minimatch@11.0.2 and its transitive dependencies.
• Leaves older glob@7 and minimatch@3.1.5 dependency paths unchanged.

File	Description
package.json	Adds the scoped glob@^10 minimatch override.
package-lock.json	Records the resolved minimatch@11.0.2 dependency tree while preserving unrelated versions.

_{Review effort: Lite (auto)}