fix(security): CVE-2026-27904, CVE-2026-26996

closes https://github.com/NativeScript/nativescript-cli/security/dependabot/294
closes https://github.com/NativeScript/nativescript-cli/security/dependabot/296
closes https://github.com/NativeScript/nativescript-cli/security/dependabot/290

Author: NathanWalker

package-lock.json

@@ -79,7 +79,7 @@
     "log4js": "6.9.1",
     "marked": "15.0.12",
     "marked-terminal": "7.3.0",
-    "minimatch": "10.1.1",
+    "minimatch": "10.2.4",
     "mkdirp": "3.0.1",
     "mute-stream": "2.0.0",
     "nativescript-dev-xcode": "0.8.1",
@@ -168,6 +168,15 @@
     },
     "npm-watch": {
       "nodemon": "3.0.3"
+    },
+    "grunt": {
+      "minimatch": "3.1.5"
+    },
+    "globule": {
+      "minimatch": "3.1.5"
+    },
+    "replace": {
+      "minimatch": "3.1.5"
     }
   },
   "analyze": true,