chore(security): fix minimatch version

[gregberge]

Fix https://github.com/argos-ci/argos/security/dependabot/283

[argos-ci]

The latest updates on your projects. Learn more about Argos notifications ↗︎

Build	Status	Details	Updated (UTC)
default (Inspect)	✅ No changes detected	-	Feb 20, 2026, 9:41 PM

[Copilot]

Pull request overview

This PR addresses the Dependabot security alert for minimatch by standardizing the workspace to minimatch@^10.2.2 via pnpm’s catalog/override mechanism and updating the lockfile accordingly.

Changes:

• Add minimatch@^10.2.2 to the pnpm workspace catalog.
• Route minimatch through the root pnpm overrides and backend package dependency using catalog:.
• Regenerate pnpm-lock.yaml to resolve to minimatch@10.2.2 and drop older minimatch@9.x-related entries.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
pnpm-workspace.yaml	Adds minimatch to the shared catalog to centralize versioning.
package.json	Adds minimatch to pnpm overrides using catalog: to enforce the catalog version repo-wide.
apps/backend/package.json	Switches backend’s minimatch dependency to catalog: for consistency with the workspace catalog.
pnpm-lock.yaml	Updates lockfile to use minimatch@10.2.2 and reflects resulting dependency graph changes.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.