fix(deps): update picomatch for security vulnerabilities (#328)

Co-authored-by: Sascha Bratton <sascha@queen.one>

package.json

@@ -31,14 +31,14 @@
     "@actions/core": "^1.10.0",
     "@actions/exec": "^1.1.1",
     "@actions/github": "6.0.0",
-    "picomatch": "^2.3.1"
+    "picomatch": "^4.0.7"
   },
   "devDependencies": {
     "@octokit/webhooks-types": "^7.3.1",
     "@types/jest": "^29.5.11",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^24.0.0",
-    "@types/picomatch": "^2.3.3",
+    "@types/picomatch": "^4.0.3",
     "@typescript-eslint/eslint-plugin": "^6.19.1",
     "@typescript-eslint/parser": "^6.19.1",
     "@vercel/ncc": "^0.38.1",