Remediate npm audit findings and rebuild distributions

[Copilot]

Description:

• Dependencies
  • Override brace-expansion with patched version 5.0.8.
  • Use TypeScript 6.0.3 for ncc compatibility.
• Distribution
  • Refresh package-lock.json.
  • Rebuild setup and cleanup bundles.

Related issue:
None.

Check list:

• Ran npm run check locally (format, lint, build, test) and all checks pass.
• Mark if documentation changes are required. No changes required.
• Mark if tests were added or updated to cover the changes.

[Copilot]

Pull request overview

This pull request updates JavaScript/TypeScript dependencies to address npm audit findings and regenerates the Action’s compiled dist/ bundles used at runtime.

Changes:

• Downgrade TypeScript to ^6.0.3 for ncc compatibility.
• Add an npm overrides entry to force brace-expansion 5.0.8, and refresh package-lock.json.
• Rebuild dist/setup and dist/cleanup bundles to reflect the dependency updates.

Show a summary per file

File	Description
package.json	Updates TypeScript version and adds an overrides rule for brace-expansion.
package-lock.json	Refreshes the lockfile to reflect the new TypeScript version and overridden brace-expansion.
dist/setup/index.js	Regenerated setup bundle including updated transitive dependencies (notably minimatch/brace-expansion codepaths).
dist/cleanup/index.js	Regenerated cleanup bundle including updated transitive dependencies (notably minimatch/brace-expansion codepaths).

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 11/15 changed files
• Comments generated: 1
• Review effort level: Low