[jonathannorris]

Summary

• Resolves the open Dependabot alert for glob (medium) by resolving the ^10 consumers to ^14.0.2.
• Rebuilds the committed dist/ bundle so it matches the current lockfile.
• Related: Dependabot-style CLI version PRs chore: update CLI version to 6.6.1 #73, chore: update CLI version to 6.6.0 #72 and chore: update CLI version to 6.3.2 #60 are untouched.

[Copilot]

🔵 Needs a closer look

The glob 10→14 override affects cacache, node-gyp, and rimraf while resolving its minimatch ^11 dependency to 9.x, requiring compatibility validation unavailable in this review environment.

No open issues 🎉

What changed in this PR

This PR addresses the reported glob Dependabot alert and refreshes the GitHub Action’s committed runtime bundle.

Changes:

• Overrides three glob v10 dependency ranges to ^14.0.2, locking them to version 14.0.4.
• Updates transitive dependencies and removes packages no longer needed by glob.
• Rebuilds dist/index.js to reflect the current lockfile, including bundled HTTP-client fixes.

File	Description
yarn.lock	Locks updated glob dependencies and removes unused transitive packages.
package.json	Adds resolution overrides for three glob v10 ranges.
dist/​index.js	Refreshes the committed bundle with dependency fixes.

_{Review effort: Balanced}