fix(security): bump picomatch to 2.3.2 via Yarn resolution

[LinKCoding]

Resolves: SNYK-JS-PICOMATCH-15765511, SNYK-JS-PICOMATCH-15765513 CVE-2026-33671, CVE-2026-33672
Severity: High / Medium

Made-with: Cursor

Overview

PR Checklist

• Related to designs:
• Related to JIRA ticket: [ABC-123]
• Version plan added/updated (or not needed)
• I have run this code to verify it works
• This PR includes unit tests for the code change
• This PR includes testing instructions tests for the code change
• The alpha package of this PR is passing end-to-end tests in all relevant Codecademy repositories

Testing Instructions

Don't make me tap the sign.

1. Go to story X
2. Do something
3. Do that something in dark mode
4. Check it with VO
5. Finish and do a celebratory dance

PR Links and Envs

Repository	PR Link
Monolith	Monolith PR
Mono	Mono PR

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 1c244c1

---

☁️ Nx Cloud last updated this comment at 2026-03-27 14:51:09 UTC

[codecademydev]

📬 Published Alpha Packages:

Package	Version	npm	Diff
@codecademy/gamut	68.2.3-alpha.bcd743.0	npm	diff
@codecademy/gamut-icons	9.57.3-alpha.bcd743.0	npm	diff
@codecademy/gamut-illustrations	0.58.10-alpha.bcd743.0	npm	diff
@codecademy/gamut-kit	0.6.593-alpha.bcd743.0	npm	diff
@codecademy/gamut-patterns	0.10.29-alpha.bcd743.0	npm	diff
@codecademy/gamut-styles	17.13.2-alpha.bcd743.0	npm	diff
@codecademy/gamut-tests	5.3.4-alpha.bcd743.0	npm	diff
@codecademy/variance	0.26.2-alpha.bcd743.0	npm	diff
eslint-plugin-gamut	2.4.4-alpha.bcd743.0	npm	diff

[github-actions]

🚀 Styleguide deploy preview ready!

Preview URL: https://69c699eb23d69d240c4aa516--gamut-preview.netlify.app
Deploy Logs: https://app.netlify.com/projects/gamut-preview/deploys/69c699eb23d69d240c4aa516