fix(security): CVE-2025-13465, CVE-2026-27904, CVE-2026-26996, CVE-2025-59433 (#5974)

closes https://github.com/NativeScript/nativescript-cli/security/dependabot/294
closes https://github.com/NativeScript/nativescript-cli/security/dependabot/296
closes https://github.com/NativeScript/nativescript-cli/security/dependabot/290
closes https://github.com/NativeScript/nativescript-cli/security/dependabot/256

Author: NathanWalker

package-lock.json

@@ -75,11 +75,11 @@
     "ios-mobileprovision-finder": "1.2.1",
     "ios-sim-portable": "4.5.1",
     "jimp": "1.6.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "log4js": "6.9.1",
     "marked": "15.0.12",
     "marked-terminal": "7.3.0",
-    "minimatch": "10.1.1",
+    "minimatch": "10.2.4",
     "mkdirp": "3.0.1",
     "mute-stream": "2.0.0",
     "nativescript-dev-xcode": "0.8.1",
@@ -118,7 +118,7 @@
     "@types/chai-as-promised": "8.0.2",
     "@types/color": "4.2.0",
     "@types/convert-source-map": "2.0.3",
-    "@types/lodash": "4.17.21",
+    "@types/lodash": "4.17.23",
     "@types/marked-terminal": "^6.1.1",
     "@types/node": "^22.0.0",
     "@types/npmcli__arborist": "^6.3.0",
@@ -163,11 +163,21 @@
     "fsevents": "*"
   },
   "overrides": {
+    "@conventional-changelog/git-client": "2.5.1",
     "jimp": {
       "xml2js": "0.6.2"
     },
     "npm-watch": {
       "nodemon": "3.0.3"
+    },
+    "grunt": {
+      "minimatch": "3.1.5"
+    },
+    "globule": {
+      "minimatch": "3.1.5"
+    },
+    "replace": {
+      "minimatch": "3.1.5"
     }
   },
   "analyze": true,