Fix npm audit failures on releases/v5

[brunoborges]

Description:
npm audit --audit-level=high fails on releases/v5 because transitive minimatch, brace-expansion, and js-yaml versions are covered by new denial-of-service advisories.

Override minimatch with the patched 10.2.6 release, refresh the lockfile, and rebuild the checked-in action bundles. The audit now reports zero vulnerabilities.

Related issue:
N/A

Check list:

• Ran npm run check locally (format, lint, build, test) and all checks pass.
• Mark if documentation changes are required.
• Mark if tests were added or updated to cover the changes.

[Copilot]

Pull request overview

This PR addresses npm audit --audit-level=high failures on releases/v5 by updating vulnerable transitive dependencies (notably minimatch, brace-expansion, and js-yaml) via an npm override, refreshing the lockfile, and updating the checked-in compiled action bundle output.

Changes:

• Add an npm overrides entry to force a patched minimatch version.
• Refresh package-lock.json to resolve updated transitive versions (including brace-expansion and js-yaml).
• Update the checked-in dist/cleanup/index.js bundle to reflect the new dependency graph.

Show a summary per file

File	Description
package.json	Adds an npm override to force a patched minimatch version.
package-lock.json	Updates resolved transitive dependency versions to eliminate audit findings.
dist/cleanup/index.js	Rebuilds the compiled cleanup action bundle with updated dependency contents.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/4 changed files
• Comments generated: 1
• Review effort level: Low