fix(deps): Resolve more security vulnerability alerts

[liamhughes]

Resolving the following High severity vulnerability alerts:

• https://github.com/OctopusDeploy/util-actions/security/dependabot/34
• https://github.com/OctopusDeploy/util-actions/security/dependabot/36

Note: minimatch is incorporated into add-changeset via glob. As such, I have marked this as fix and may warrant a release of the packages following merge.

[Copilot]

Pull request overview

Resolves Dependabot-reported high severity vulnerabilities by forcing patched minimatch versions via pnpm overrides and updating the lockfile accordingly.

Changes:

• Override vulnerable minimatch ranges to patched versions (3.1.4 and 9.0.7) in package.json.
• Regenerate/update pnpm-lock.yaml to reflect the new resolved minimatch (and related dependency) versions.

Reviewed changes

Copilot reviewed 1 out of 3 changed files in this pull request and generated no comments.

File	Description
package.json	Updates pnpm.overrides to force patched minimatch versions for vulnerable ranges.
pnpm-lock.yaml	Updates resolved minimatch entries (and removes now-unused older dependency entries) to match the overrides.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.