update .trivyignore

Author: anthony-nhs

README.md

@@ -303,6 +303,7 @@ You can run it manually using the following. Using the `dry-run` flag just shows
 
 ```
 make github-login
+# or gh auth login --scopes read:packages,delete:packages if you want to be able to delete images
 bash .github/scripts/delete_unused_images.sh --delete-pr --dry-run
 bash .github/scripts/delete_unused_images.sh --delete-ci --dry-run
 bash .github/scripts/delete_unused_images.sh --delete-pr --delete-ci

src/common_node_24/.trivyignore.yaml

@@ -35,3 +35,9 @@ vulnerabilities:
     purls:
       - "pkg:npm/tar@7.5.1"
     expired_at: 2026-08-18
+  - id: CVE-2026-26996
+    statement: "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern"
+    purls:
+      - "pkg:npm/minimatch@10.0.3"
+      - "pkg:npm/minimatch@9.0.5"
+    expired_at: 2026-08-19