fix: resolve minimatch high severity vulnerabilities in CLI

[github-actions]

Summary

This PR fixes three high severity security vulnerabilities in the minimatch dependency.

Vulnerabilities Fixed

Vulnerability	Severity	Description
SNYK-JS-MINIMATCH-15309438	High	Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-15353387	High	Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-15353389	High	Inefficient Algorithmic Complexity

Root Cause

The vulnerable minimatch@9.0.5 was introduced as a transitive dependency through:

@sentry/profiling-node > @sentry/node > minimatch@9.0.5

Solution

Added an npm overrides section in package.json to force @sentry/node to use minimatch@^9.0.7, which contains fixes for all three vulnerabilities.

Verification

After applying the fix, running npx snyk test confirms that all high severity vulnerabilities are resolved:

• Before: 8 issues found (3 high severity security vulnerabilities)
• After: 5 issues found (all medium severity license issues, no security vulnerabilities)

---

Generated with Continue

---

Continue Tasks: ❌ 7 failed — View all

---

Summary by cubic

Fixes three high-severity minimatch vulnerabilities (ReDoS/algorithmic complexity) in the CLI by forcing @sentry/node to use minimatch >=9.0.7. Snyk now reports no security vulnerabilities.

• Dependencies
  • Added npm overrides in extensions/cli/package.json to pin minimatch to ^9.0.7 under @sentry/node; lockfile now resolves to minimatch 9.0.9.

^{Written for commit eddf857. Summary will update on new commits.}