Vulnerable dependency: Minimatch

[Davo00]

Is there an existing issue for this?

• I have checked for existing issues https://github.com/getsentry/sentry-javascript/issues
• I have reviewed the documentation https://docs.sentry.io/
• I am using the latest SDK release https://github.com/getsentry/sentry-javascript/releases

How do you use Sentry?

Sentry Saas (sentry.io)

Which SDK are you using?

@sentry/node - express

SDK Version

latest

Framework Version

No response

Link to Sentry event

No response

Reproduction Example/SDK Setup

Sentry/node depends on a vulnerable minimatch version, which has a high CVE score.
Please update to >=10.2.1
See: GHSA-3ppc-4f35-3m26

Steps to Reproduce

Run npm audit --omit=dev

Expected Result

no vulnerabilities

Actual Result

minimatch high vulnerability is shown

Additional Context

No response

Priority

_{React with 👍 to help prioritize this issue. Please use comments to provide useful context, avoiding +1 or me too, to help us triage it.}

[linear]

JS-1765