fix pip audit

package-lock.json

@@ -17,6 +17,7 @@
         "ci-info": "^4.4.0",
         "d3": "^7.9.0",
         "immutable": "^5.1.5",
+        "picomatch": "^4.0.4",
         "playwright": "^1.58.2",
         "python": "^0.0.4",
         "query-command-supported": "1.0.0",
@@ -9643,9 +9644,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
       "license": "MIT",
       "engines": {
         "node": ">=12"

package.json

@@ -44,7 +44,8 @@
     "query-command-supported": "1.0.0",
     "sass-embedded": "^1.97.3",
     "textarea-caret": "3.1.0",
-    "immutable": "^5.1.5"
+    "immutable": "^5.1.5",
+    "picomatch": "^4.0.4"
   },
   "devDependencies": {
     "@babel/core": "^7.29.0",