From a5a5f71c2ed53938eff85c209566810d853532de Mon Sep 17 00:00:00 2001
From: GitHub Copilot <github-copilot@github.com>
Date: Tue, 31 Mar 2026 19:27:54 -0400
Subject: [PATCH] fix: Upgrade picomatch to resolve CVE-2026-33671 and
 CVE-2026-33672

---
 ui/package.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ui/package.json b/ui/package.json
index 5446cfeee..3b2623c37 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -59,7 +59,8 @@
     "braces": ">=3.0.3",
     "micromatch": ">=4.0.8",
     "diff": ">=8.0.3",
-    "tar": ">=7.5.7"
+    "tar": ">=7.5.7",
+    "picomatch": ">=2.3.2"
   },
   "devDependencies": {
     "@chromatic-com/storybook": "^5.1.1",