chore: fix high-severity minimatch ReDoS and update dependencies

Fix two high-severity Dependabot alerts for minimatch ReDoS (CVEs #14, #15):
- Update pnpm override from `<10.2.1` to `<10.2.3` (patched version is 10.2.3)
- minimatch is now resolved to 10.2.4

Also update other dependencies:
- Node.js: @types/node, @typescript-eslint/*, eslint, globals (minor/patch)
- Java: commons-cli 1.10.0 → 1.11.0
- Python: python-multipart minimum version >=0.0.6 → >=0.0.22 (security patch)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: bundolee

java/pom.xml

@@ -53,7 +53,7 @@
         <verapdf.version>[1.31.0,1.32.0-RC)</verapdf.version>
         <junit.jupiter.version>5.14.2</junit.jupiter.version>
         <assertj.version>3.27.7</assertj.version>
-        <commons.cli.version>1.10.0</commons.cli.version>
+        <commons.cli.version>1.11.0</commons.cli.version>
         <maven-compiler.plugin.version>3.14.1</maven-compiler.plugin.version>
         <flatten.plugin.version>1.7.3</flatten.plugin.version>
         <jacoco.plugin.version>0.8.14</jacoco.plugin.version>

node/opendataloader-pdf/package.json

@@ -56,12 +56,12 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@types/node": "^25.3.0",
-    "@typescript-eslint/eslint-plugin": "^8.56.0",
-    "@typescript-eslint/parser": "^8.56.0",
-    "eslint": "^10.0.1",
+    "@types/node": "^25.3.3",
+    "@typescript-eslint/eslint-plugin": "^8.56.1",
+    "@typescript-eslint/parser": "^8.56.1",
+    "eslint": "^10.0.2",
     "glob": "^13.0.6",
-    "globals": "^17.3.0",
+    "globals": "^17.4.0",
     "prettier": "^3.8.1",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
@@ -70,7 +70,7 @@
   },
   "pnpm": {
     "overrides": {
-      "minimatch@<10.2.1": ">=10.2.1"
+      "minimatch@<10.2.3": ">=10.2.3"
     }
   },
   "files": [