chore(deps): replace micromatch with picomatch (direct dep)

Author: IlyaKhD

packages/code-scanning/package.json

@@ -19,10 +19,10 @@
   },
   "devDependencies": {
     "@types/jest": "catalog:",
-    "@types/micromatch": "^4.0.10",
     "@types/node": "catalog:",
+    "@types/picomatch": "^4.0.3",
     "json5": "^2.2.3",
-    "micromatch": "^4.0.8",
+    "picomatch": "^4.0.7",
     "rimraf": "catalog:",
     "ts-jest": "catalog:",
     "tsx": "^4.23.11",

packages/code-scanning/src/validate-lock-files.ts

@@ -1,6 +1,6 @@
 import * as path from 'path';
 import * as yaml from 'yaml';
-import * as micromatch from 'micromatch';
+import * as picomatch from 'picomatch';
 
 import { FileSystem, NodeFileSystem } from './file-system';
 import {
@@ -133,7 +133,7 @@ export async function discoverLockFiles(
     if (!relativePath || relativePath === '.') return false;
 
     const packageDir = path.dirname(relativePath);
-    return micromatch.isMatch(packageDir, workspace.patterns, { dot: true, matchBase: false });
+    return picomatch.isMatch(packageDir, workspace.patterns, { dot: true, matchBase: false, posix: true });
   }
 
   // Find lock files in current or parent directories up to rootPath

packages/common/package.json

@@ -17,7 +17,8 @@
     "@actions/github": "catalog:",
     "@types/jest": "catalog:",
     "@types/node": "catalog:",
-    "minimatch": "^10.2.5",
+    "@types/picomatch": "^4.0.3",
+    "picomatch": "^4.0.7",
     "rimraf": "catalog:",
     "typescript": "catalog:"
   }

packages/common/src/path-utils.ts

@@ -1,13 +1,14 @@
 import * as core from '@actions/core'
-import { MinimatchOptions, minimatch } from "minimatch";
+import * as picomatch from 'picomatch';
 
 const NEGATION = '!';
-const matchOptions: MinimatchOptions = {
+const matchOptions: picomatch.PicomatchOptions = {
     dot: true,
+    posix: true,
 }
 
 function match(path: string, pattern: string): boolean {
-    return minimatch(path.replace(/\\/g, '/'), pattern, matchOptions);
+    return picomatch.isMatch(path.replace(/\\/g, '/'), pattern, matchOptions);
 }
 
 export function filterPaths(