Vuln CVE-2026-26996 on minimatch

[jaysson1710]

Hi guys,
With the version "azure-pipelines-task-lib": "^5.2.6", there is a vulnerability reported on minimatch dependency, since this uses "minimatch": "3.0.5"

Is there a close fix?

[ArjenKorevaar]

Updating minimatch might cause backwards compatiblity issues for Node < 18.
See also isaacs/minimatch#286

Created PR #1158 to update minimatch and types lib.

[github-actions]

This issue has had no activity in 90 days. Please comment if it is not actually stale