Merge branch 'fix/security-vulnerabilities-feb-2026' into 'master'

fix: address 3 security vulnerabilities in UI npm dependencies

Closes #680

See merge request postgres-ai/database-lab!1099

Author: agneum

ui/package.json

@@ -34,7 +34,9 @@
       "semver@>=7.0.0 <7.5.2": ">=7.5.2",
       "semver@<5.7.2": ">=5.7.2",
       "semver@>=6.0.0 <6.3.1": ">=6.3.1",
-      "minimatch": "3.1.2",
+      "minimatch@<3.1.4": ">=3.1.4 <4.0.0",
+      "rollup@<2.80.0": ">=2.80.0 <3.0.0",
+      "bn.js@<5.2.3": "5.2.3",
       "json5@<1.0.2": ">=1.0.2",
       "json5@>=2.0.0 <2.2.2": ">=2.2.2",
       "ip@<1.1.9": ">=1.1.9",