chore(deps-dev): bump minimatch from 3.1.2 to 3.1.4

[dependabot]

Bumps minimatch from 3.1.2 to 3.1.4.

Commits

• 1a2e084 3.1.4
• ae24656 update lockfile
• b100374 limit recursion for **, improve perf considerably
• 26ffeaa lockfile update
• 9eca892 lock node version to 14
• 00c323b 3.1.3
• 30486b2 update CI matrix and actions
• 9c31b2d update test expectations for coalesced consecutive stars
• 46fe687 coalesce consecutive non-globstar * characters
• 5a9ccbd [meta] update publishConfig.tag to legacy-v3
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[sonarqubecloud]

SonarQube reviewer guide

Summary: Updates dependency versions in package-lock.json, primarily upgrading minimatch across multiple package versions and removing unused @isaacs scoped packages in favor of standard brace-expansion.

Review Focus:

• Removal of @isaacs/balanced-match and @isaacs/brace-expansion packages and their replacement with standard balanced-match and brace-expansion in glob and loopback-datasource-juggler dependencies
• Verify all minimatch version upgrades (3.1.2→3.1.4, 5.1.6→5.1.8, 9.0.5→9.0.7, 10.x versions) are compatible with their respective dependents
• Ensure the shift from @isaacs/brace-expansion to standard brace-expansion doesn't introduce breaking changes, particularly regarding Node.js engine compatibility changes (18+)

Start review at: package-lock.json lines around the main minimatch package (line ~13853) and glob/loopback-datasource-juggler dependency trees. This is critical as these are the core changes where dependencies transition from @isaacs-scoped to standard packages, and the engine requirement adjustments need validation against your project's Node.js version support.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[stale]

This pull request has been marked stale because it has not seen any activity within two months. It will be closed within 15 days of being stale unless there is new activity.

[stale]

This pull request has been closed due to continued inactivity. If you are interested in finishing the proposed changes, then feel free to re-open this pull request or open a new one.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.