Fix dependabot security alerts for minimatch and serialize-javascript#194

Merged

Mr-Wallet merged 3 commits into

Axosoft:masterfrom

Mr-Wallet:fix/dependabot-alerts

Mar 16, 2026

Commits on Mar 6, 2026

Update minimatch to fix ReDoS vulnerability (CVE)

Mr-Wallet
and
claude
committed
Fix serialize-javascript RCE vulnerability (Dependabot alert #38)

Mr-Wallet
and
claude
committed
Bump to v2.3.0, drop Node.js 18 from CI, add changelog

Mr-Wallet
and
claude
committed