[rushstack] minimatch has high vulnerabilities

[simasjar]

Summary

The current minimatch version has two high vulnerabilities:

GHSA-7r86-cg39-jmmj
GHSA-23c5-xmqv-rm74

Updating minimatch to version 10.2.3 should fix it.

[raulrtello]

Yes please , we are with same issue

[octogonz]

These are not actual security concerns for Rush Stack (since DOS attacks aren't relevant to build tools), however the automated warnings are a nuisance and affect compliance. If someone wants to upgrade it, it should be an easy fix.

[pydsigner]

Looks like PRs exist as #5675 and #5677.

[codingLogan]

@octogonz thank you for responding, it's nice to know in today's automated world that a human is on the other end of an issue 😄

As @pydsigner mentioned, there are a couple PRs up for review that might have this resolved already.

Looks like PRs exist as #5675 and #5677.

[cmalonzo]

@octogonz @IanC, y'all can probably close this out.