Howdy, thanks for supporting/maintaining textlint!

glob v10 depends on a minimatch version that has a CVE: GHSA-3ppc-4f35-3m26

It looks like glob v11 uses a newer version of minimatch that is not affected, and still supports back to node 20 which would align with the current supported version specified in textlint.