[codex] fix dependency security alerts

[haasonsaas]

Summary

• upgrade @typescript-eslint parser/plugin to the current 8.x line so minimatch resolves to patched versions
• refresh the npm lockfile, including the flatted/picomatch audit fixes from npm audit fix
• keep this limited to dependency remediation; no CodeQL or GitHub default code scanning is enabled

Closes #51

Test plan

• npm audit --audit-level=high
• npm run build
• npm test
• npm run lint
• git diff --check

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
src	96%	83%	0	✔
src.integrations	95%	75%	0	✔
Summary	96% (1122 / 1171)	81% (900 / 1107)	0	✔

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​typescript-eslint/​parser@​6.21.0 ⏵ 8.59.4	+1		+1
	npm/​@​typescript-eslint/​eslint-plugin@​6.21.0 ⏵ 8.59.4	+1		+1

View full report