Update Socket patches: +5 patches

[socket-security]

Summary

This PR updates Socket security patches for your dependencies.

These patches are applied via the Socket patch agent — .socket/manifest.json + a package.json postinstall hook.

Changes

• ✅ Added: CVE-2026-4800 in pkg:npm/lodash@4.17.23 (Socket Patch)
  • Severity: HIGH
  • Summary: lodash vulnerable to Code Injection via _.template imports key names
• ✅ Added: CVE-2022-3517 in pkg:npm/minimatch@3.0.4 (Socket Patch)
  • Severity: HIGH
  • Summary: minimatch ReDoS vulnerability
• ✅ Added: CVE-2021-3807 in pkg:npm/ansi-regex@5.0.0 (Socket Patch)
  • Severity: HIGH
  • Summary: Inefficient Regular Expression Complexity in chalk/ansi-regex
• ✅ Added: CVE-2026-26996 in pkg:npm/minimatch@3.0.4 (Socket Patch)
  • Severity: HIGH
  • Summary: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
• ✅ Added: CVE-2026-33671 in pkg:npm/picomatch@4.0.3 (Socket Patch)
  • Severity: HIGH
  • Summary: Picomatch has a ReDoS vulnerability via extglob quantifiers

Testing

Review the patches and test your application to ensure compatibility.

---

🔒 Powered by Socket Security

[linux-foundation-easycla]

• ❌ - login: @Socket-Security[bot] / name: socket-security[bot]. The commit (aaa33f1) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please visit our EasyCLA portal and chat with our support bot.