fix: resolve CVE-2026-33671 in picomatch

Upgrade picomatch to satisfy >=4.0.4
Advisory: GHSA-c2c7-rcm5-vvqj

Co-authored-by: Claude <noreply@anthropic.com>
Signed-off-by: Florent Benoit <fbenoit@redhat.com>

Author: benoitf

package.json

@@ -66,7 +66,8 @@
     "overrides": {
       "glob": "10.5.0",
       "minimatch@<3.1.3": "3.1.5",
-      "minimatch@>=9.0.0 <9.0.7": "9.0.9"
+      "minimatch@>=9.0.0 <9.0.7": "9.0.9",
+      "picomatch@>=4.0.0 <4.0.4": "4.0.4"
     }
   }
 }