Update minimatch version because of CVE

[alfaproject]

We add to add an override to this transitive dependency, but it would be good if it's sorted upstream. This is the CVE: GHSA-3ppc-4f35-3m26

[marc136]

Thank you for creating this issue @alfaproject, will publish the update later.

[marc136]

Published 4.1.2

[marc136]

Published also a 3.3.4