chore(deps): Resolve security vulnerability alerts

[liamhughes]

Resolving the following High severity vulnerability alerts:

• https://github.com/OctopusDeploy/util-actions/security/dependabot/31
• https://github.com/OctopusDeploy/util-actions/security/dependabot/33
• https://github.com/OctopusDeploy/util-actions/security/dependabot/38
• https://github.com/OctopusDeploy/util-actions/security/dependabot/39
• https://github.com/OctopusDeploy/util-actions/security/dependabot/47

[Copilot]

Pull request overview

This PR addresses multiple GitHub security vulnerability alerts by forcing patched versions of vulnerable transitive dev-dependencies via pnpm.overrides, and updating the lockfile accordingly.

Changes:

• Add pnpm.overrides entries for flatted, minimatch, and lodash to ensure patched versions are used.
• Regenerate pnpm-lock.yaml so dependency graph resolves to the overridden versions (e.g., flatted@3.4.2, minimatch@3.1.3, lodash@4.18.1).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Adds new pnpm.overrides entries to pin patched versions for flagged vulnerable ranges.
pnpm-lock.yaml	Updates resolved versions and lock entries to reflect the new override pins across the dependency graph.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.