Resolved CVE-2026-27904, CVE-2026-33532, and CVE-2026-33672.

Signed-off-by: Thomas Hurney <hurneyt@amazon.com>

Author: AWSHurneyt

package.json

@@ -60,9 +60,11 @@
     "js-yaml": "^4.1.1",
     "sha.js": "^2.4.12",
     "form-data": "4.0.4",
-    "minimatch": "^3.1.3",
+    "minimatch": "^3.1.4",
     "qs": "^6.14.1",
-    "brace-expansion": "^5.0.5"
+    "brace-expansion": "^5.0.5",
+    "yaml": "^1.10.3",
+    "picomatch": "^2.3.2"
   },
   "devDependencies": {
     "@babel/plugin-transform-class-properties": "^7.22.9",