Bump minimist from 1.2.5 to 1.2.6 in /tooling/api

Editor assessment

The subject follows the canonical bump format: package minimist, both versions, and the exact subdirectory path. Type chore and scope deps are correct. The body carries standard dependabot attribution, which is appropriate structured automation rather than noise. No explanatory body is needed for a security-relevant point bump with full version detail in the headline. No hygiene problems. A well-formed, complete message of its kind.