chore(deps-dev): bump minimatch from 3.1.2 to 3.1.4

[dependabot]

Bumps minimatch from 3.1.2 to 3.1.4.

Commits

• 1a2e084 3.1.4
• ae24656 update lockfile
• b100374 limit recursion for **, improve perf considerably
• 26ffeaa lockfile update
• 9eca892 lock node version to 14
• 00c323b 3.1.3
• 30486b2 update CI matrix and actions
• 9c31b2d update test expectations for coalesced consecutive stars
• 46fe687 coalesce consecutive non-globstar * characters
• 5a9ccbd [meta] update publishConfig.tag to legacy-v3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[sonarqubecloud]

SonarQube reviewer guide

Summary: Update dependency versions in package-lock.json, primarily upgrading minimatch across multiple packages and restructuring brace-expansion dependencies to use standard packages instead of @isaacs scoped versions.

Review Focus: Key areas to examine:

• The removal of @isaacs/balanced-match and @isaacs/brace-expansion packages and their replacement with standard balanced-match and brace-expansion versions in glob and loopback-datasource-juggler dependencies—verify this doesn't introduce compatibility issues.
• The upgrade of minimatch from v9.0.5 to v9.0.7 and its dependency change from brace-expansion@^2.0.1 to brace-expansion@^5.0.2—ensure this major version bump in brace-expansion doesn't break existing functionality.
• Multiple minimatch version bumps (3.1.2→3.1.4, 5.1.6→5.1.8, 10.0.3→10.2.3) across different package scopes—check for any breaking changes in these patches.

Start review at: package-lock.json root-level minimatch entry (line ~10677). This is the primary dependency that cascades to many transitive dependencies, making it critical to understand the core upgrade rat

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud