chore: upgrade picomatch to ^4.0.4 to address CVE-2026-33671, CVE-2026-33672#1283

brendan-kellam merged 2 commits into

mainsourcebot-dev/sourcebot:mainfrom

cursor/cve/picomatchsourcebot-dev/sourcebot:cursor/cve/picomatchCopy head branch name to clipboard