Bump the npm_and_yarn group across 1 directory with 1 update

Bumps the npm_and_yarn group with 1 update in the /cdk directory: [minimatch](https://github.com/isaacs/minimatch).


Updates `minimatch` from 3.1.2 to 3.1.4
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.4)

Updates `minimatch` from 9.0.5 to 9.0.7
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.4)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 9.0.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

cdk/package-lock.json

@@ -26,7 +26,7 @@
     "@aws-appsync/utils": "^1.12.0",
     "@aws-sdk/client-cognito-identity-provider": "^3.987.0",
     "@types/aws-lambda": "^8.10.149",
-    "aws-cdk-lib": "^2.189.1",
+    "aws-cdk-lib": "^2.240.0",
     "cdk-nag": "^2.14.29",
     "constructs": "^10.0.0",
     "deploy-time-build": "^0.3.32",