chore: Update package dependencies

Author: banshee86vr

.github/workflows/security.yml

@@ -76,6 +76,8 @@ jobs:
           output: trivy-fs-results.sarif
           severity: CRITICAL,HIGH
           exit-code: "1"
+          scanners: vuln
+          ignore-unfixed: true
 
       - name: Upload Trivy filesystem scan results
         if: success()
@@ -103,6 +105,7 @@ jobs:
           output: trivy-backend-image.sarif
           severity: CRITICAL,HIGH
           exit-code: "1"
+          scanners: vuln
 
       - name: Upload Trivy backend image scan results
         if: success()
@@ -131,6 +134,7 @@ jobs:
           severity: CRITICAL,HIGH
           exit-code: "1"
           ignore-unfixed: true
+          scanners: vuln
 
       - name: Upload Trivy frontend image scan results
         if: success()

docker/Dockerfile.backend

@@ -33,7 +33,7 @@ WORKDIR /workspace
 
 # Install runtime dependencies
 RUN apk add --no-cache openssl wget && \
-    npm install -g pnpm@10
+    npm install -g npm@latest pnpm@10
 
 # Copy workspace configuration
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./

package.json

@@ -26,7 +26,8 @@
   },
   "pnpm": {
     "overrides": {
-      "defu": ">=6.1.5"
+      "defu": ">=6.1.5",
+      "picomatch": ">=4.0.4"
     },
     "onlyBuiltDependencies": [
       "@prisma/client",