minimatch 9.0.9 (GHSA-g3hv-75wg-m249, fixed in 11.0.1) is a dev dependency of
@typescript-eslint/typescript-estree and of nothing else. It calls only
minimatch(filePath, pattern, { dot: true }) for allowDefaultProject; minimatch
11 keeps that function and drops makeRe, the regexp property, AST and debug.
An override keeps the release on the next install.
11.0.1 and @isaacs/nonrecursive-glob-match 1.0.1 are the newest releases at
least 14 days old.