chore: update packages to resolve package security audits

[innerdvations]

What does it do?

Updates a myriad of packages to fix

CVE-2024-4068 (braces)
CVE-2024-31207 (vite)
CVE-2024-4067 (micromatch)

Why is it needed?

security

How to test it?

everything should still work

Related issue(s)/PR(s)

[changeset-bot]

🦋 Changeset detected

Latest commit: 73710cd

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[innerdvations]

Does anyone know if these upgrades will potentially affect the linting/prettier downstream? If so, this might need to be a major version bump. If not, it can just be a patch.

I might release it as a beta so we can test

[Convly]

Overall LGTM, I'm only curious about whether it'll impact the prettier formatting in the types generation 🤔

Did you notice any differences?

[alexandrebodin]

it doesn't run any eslint for the user. just reads the tsconfig.

I think it's using prettier for some stuff so might be worth check what exactly

[innerdvations]

Released @strapi/[email protected] to test this directly in @strapi/strapi and make sure nothing breaks

[innerdvations]

For anyone who wants to check, I released experimental @strapi/strapi 0.0.0-experimental.1610404a03d98b65f497f9adda35815021b8fd76 that uses this PR as the version of @strapi/pack-up and it works with no side effects 🎉

So I'll merge and release this as a patch tomorrow since it doesn't cause any change other than the pack-up internals