fix: resolve CI failures in Check Links and Validate Dependencies workflows

- Fix lychee link checker regex parse error by removing invalid glob patterns
  from .lycheeignore and adding proper regex to lychee.toml exclude_path
- Fix minimatch ReDoS vulnerability (GHSA-3ppc-4f35-3m26) via pnpm overrides
  forcing minimatch>=10.2.1 for all transitive dependencies
- Update ROADMAP.md with current codebase metrics (200 schemas, 6507 tests)

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

.github/workflows/check-links.yml

@@ -27,8 +27,6 @@ jobs:
           # Use configuration file for path remapping and settings
           args: >-
             --config lychee.toml
-            --exclude-path '(^|.*/)meta\.json$'
-            --exclude-path '(^|.*/)meta\.cn\.json$'
             'content/**/*.md'
             'content/**/*.mdx'
             'README.md'

.lycheeignore

@@ -17,7 +17,3 @@ https://x.com*
 
 # Common false positives
 mailto:*
-
-# Fumadocs metadata files (not actual links)
-**/meta.json
-**/meta.cn.json

ROADMAP.md

@@ -93,13 +93,13 @@ This strategy ensures rapid iteration while maintaining a clear path to producti
 | Packages (total) | 27 |
 | Apps | 2 (Studio, Docs) |
 | Examples | 4 (Todo, CRM, Host, BI Plugin) |
-| Zod Schema Files | 193 |
-| Exported Schemas | 1,100+ |
-| `.describe()` Annotations | 8,425+ |
+| Zod Schema Files | 200 |
+| Exported Schemas | 1,600+ |
+| `.describe()` Annotations | 8,750+ |
 | Service Contracts | 27 |
 | Contracts Implemented | 13 (52%) |
 | Test Files | 229 |
-| Tests Passing | 6,456 / 6,456 |
+| Tests Passing | 6,507 / 6,507 |
 | `@deprecated` Items | 3 |
 | Protocol Domains | 15 (Data, UI, AI, API, Automation, Cloud, Contracts, Identity, Integration, Kernel, QA, Security, Shared, Studio, System) |
 

lychee.toml

@@ -34,8 +34,12 @@ remap = [
     "^/docs/(.*)$ content/docs/$1.md"
 ]
 
-# Exclude patterns (loaded from .lycheeignore file)
-exclude_path = [".lycheeignore"]
+# Exclude file paths matching these regex patterns
+exclude_path = [
+    "\\.lycheeignore$",
+    "(^|.*/)meta\\.json$",
+    "(^|.*/)meta\\.cn\\.json$"
+]
 
 # Additional exclude patterns for internal paths
 exclude = [

package.json

@@ -47,5 +47,10 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "packageManager": "pnpm@10.28.1"
+  "packageManager": "pnpm@10.28.1",
+  "pnpm": {
+    "overrides": {
+      "minimatch@<10.2.1": "10.2.1"
+    }
+  }
 }