chore: Bump brace-expansion from 5.0.6 to 5.0.8

[ernst-dev]

Bumps brace-expansion from 5.0.6 to 5.0.8 to address a Regular Expression Denial of Service (ReDoS) vulnerability.

Lockfile-only change (transitive dependency; package-lock.json only). Only the node_modules/minimatch/node_modules/brace-expansion (v5 line) entry changes.

• Advisory: GHSA-3jxr-9vmj-r5cp (High)
• Vulnerable versions: >= 3.0.0, < 5.0.7 — Patched version: 5.0.7 (bumped to latest 5.0.8)

Note: the v2 line (brace-expansion 2.0.3 → 2.1.2) is already covered by the open Dependabot PR #192, so it is intentionally left untouched here.

Opened by roko-dependabot-handler on behalf of @ernst-dev to remediate a Dependabot alert that had no auto-generated fix.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.11%. Comparing base (c2dae6a) to head (1b3f3b1).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #193   +/-   ##
=======================================
  Coverage   97.11%   97.11%           
=======================================
  Files          55       55           
  Lines        1420     1420           
  Branches      251      251           
=======================================
  Hits         1379     1379           
  Misses         35       35           
  Partials        6        6           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.