Similiar to #443 another CVE in micromatch requiring update to micromatch (which isn't available yet?) See https://github.com/advisories/GHSA-952p-6rrq-rcjv