fix: resolve minimatch high severity vulnerabilities in CLI

[github-actions]

Summary

This PR fixes three high severity security vulnerabilities in the minimatch dependency.

Vulnerabilities Fixed

Vulnerability	Severity	Description
SNYK-JS-MINIMATCH-15309438	High	Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-15353387	High	Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-15353389	High	Inefficient Algorithmic Complexity

Root Cause

The vulnerable minimatch@9.0.5 was introduced as a transitive dependency through:

@sentry/profiling-node > @sentry/node > minimatch@9.0.5

Solution

Added an npm overrides section in package.json to force @sentry/node to use minimatch@^9.0.7, which contains fixes for all three vulnerabilities.

Verification

After applying the fix, running npx snyk test confirms that all high severity vulnerabilities are resolved:

• Before: 8 issues found (3 high severity security vulnerabilities)
• After: 5 issues found (all medium severity license issues, no security vulnerabilities)

---

Generated with Continue

---

Continue Tasks: ❌ 7 failed — View all

---

Summary by cubic

Fixes three high-severity minimatch vulnerabilities (ReDoS/algorithmic complexity) in the CLI by forcing minimatch@9 to a patched version via npm override. Snyk now reports no security vulnerabilities.

• Dependencies
  • Added overrides to pin minimatch@9 to ^9.0.7 across transitive deps (introduced via @sentry/profiling-node > @sentry/node); lockfile resolves to 9.0.9.

^{Written for commit 12215bb. Summary will update on new commits.}

[RomneyDa]

duplicate of #11057