Security Violation fix

[agrasth]

• All tests passed. If this feature is not already covered by the tests, I added new tests.
• This pull request is on the dev branch.
• I used npm run format for formatting the code before submitting the pull request.

---

Security Vulnerabilities Fix

Summary

This PR resolves all security vulnerabilities detected in the jfrog-azure-devops-extension by updating vulnerable dependencies to their latest secure versions.

Changes

Root Package (package.json)

• Added security overrides for transitive dependencies:
  • brace-expansion: >=1.1.13 (fixes CVE: zero-step sequence DoS)
  • flatted: >=3.4.2 (fixes DoS and prototype pollution)
  • picomatch: >=4.0.4 (fixes ReDoS vulnerabilities)
  • minimatch: >=3.1.4 (fixes ReDoS vulnerabilities)

JFrog Tasks Utils (jfrog-tasks-utils/package.json)

• Updated azure-pipelines-task-lib: 5.2.1 → ^5.2.8 (fixes minimatch vulnerabilities)
• Updated azure-pipelines-tool-lib: 2.0.10 → 2.0.12 (security patches)

Tests (tests/package.json)

• Updated azure-pipelines-task-lib: 5.2.1 → ^5.2.8
• Updated mocha: ^10.2.0 → ^11.7.5 (major version with security fixes)
• Added overrides:
  • serialize-javascript: >=7.0.5 (fixes RCE vulnerability)
  • diff: >=8.0.3 (fixes DoS vulnerability)