chore(deps): deps-security-agent run & bump stylelint to 16.26.1

Co-authored-by: PR0M3TH3AN <[email protected]>

artifacts/deps-report.md

@@ -1,17 +1,33 @@
-# Dependency Security Report (2026-02-19)
+# Dependency Report - 2026-02-20
 
 ## Vulnerabilities
-- **High**: 3 (minimatch, serve, serve-handler)
-- **Moderate**: 1 (ajv)
-- Note: 'serve' vulnerabilities relate to a known issue where the fix suggests a major downgrade. Ignoring as per policy.
+### HIGH (3)
+- **minimatch**: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
+  - Path: Direct dependency? No
+  - Fix Available: true
+- **serve**: ajv, serve-handler
+  - Path: Direct dependency? Yes
+  - Fix Available: {"name":"serve","version":"6.5.8","isSemVerMajor":true}
+- **serve-handler**: minimatch
+  - Path: Direct dependency? No
+  - Fix Available: true
+### MODERATE (1)
+- **ajv**: ajv has ReDoS when using `$data` option
 
 ## Outdated Packages
-- **nostr-tools**: 2.19.4 -> 2.23.1 (Security Sensitive - Skipped)
-- **jsdom**: 28.1.0 (Verified / Up-to-date)
-- **stylelint**: 16.12.0 -> 16.26.1
-- **tailwindcss**: 3.4.19 -> 4.1.18 (Major - Skipped)
-- **pixelmatch**: 5.3.0 -> 7.1.0 (Major - Skipped)
-- **postcss-import**: 15.1.0 -> 16.1.1 (Major - Skipped)
+### Major Updates (Risky)
+- **pixelmatch** (undefined): 5.3.0 -> 7.1.0
+- **postcss-import** (undefined): 15.1.0 -> 16.1.1
+- **prettier-plugin-tailwindcss** (undefined): 0.6.14 -> 0.7.2
+- **stylelint-config-standard** (undefined): 36.0.1 -> 40.0.0
+- **tailwindcss** (undefined): 3.4.19 -> 4.2.0
 
-## Actions
-- Verified `jsdom` is at 28.1.0 and tests pass.
+### Minor Updates (Safe-ish)
+- **nostr-tools** (undefined): 2.19.4 -> 2.23.1 (Latest: 2.23.1)
+- **stylelint** (undefined): 16.12.0 -> 16.26.1 (Latest: 17.3.0)
+
+### Patch Updates (Safe)
+
+## Triage & Actions
+- [ ] **HIGH**: Check for safe upgrades for minimatch, serve, serve-handler.
+- [ ] **Safe Candidates**: nostr-tools, stylelint

artifacts/npm-outdated.json

@@ -1,11 +1,4 @@
 {
-  "jsdom": {
-    "current": "28.0.0",
-    "wanted": "28.1.0",
-    "latest": "28.1.0",
-    "dependent": "app",
-    "location": "/app/node_modules/jsdom"
-  },
   "nostr-tools": {
     "current": "2.19.4",
     "wanted": "2.23.1",
@@ -51,7 +44,7 @@
   "tailwindcss": {
     "current": "3.4.19",
     "wanted": "3.4.19",
-    "latest": "4.1.18",
+    "latest": "4.2.0",
     "dependent": "app",
     "location": "/app/node_modules/tailwindcss"
   }