chore(deps): resolve minimatch and glob audit advisories (WealthLedger/main#49)

scripts/minimatch-compat/index.cjs

@@ -0,0 +1,9 @@
+// ponytail: CommonJS twin of index.js (import-x ships lib/index.cjs too).
+const minimatch = require("minimatch-11");
+
+module.exports = {
+	...minimatch,
+	makeRe: (pattern, options = {}) => ({
+		test: path => minimatch.minimatch(path, pattern, options),
+	}),
+};

scripts/minimatch-compat/index.js

@@ -0,0 +1,11 @@
+// ponytail: shim for eslint-plugin-import-x@4.17.1, which still imports the
+// makeRe export removed in minimatch 11. Its only caller (no-internal-modules)
+// uses the result via .test(), so a matcher object is enough. Delete this
+// package and the override once import-x supports minimatch 11.
+import { minimatch } from "minimatch-11";
+
+export * from "minimatch-11";
+
+export const makeRe = (pattern, options = {}) => ({
+	test: path => minimatch(path, pattern, options),
+});

scripts/minimatch-compat/package.json

@@ -0,0 +1,14 @@
+{
+	"name": "minimatch",
+	"version": "11.0.2-compat.0",
+	"private": true,
+	"description": "minimatch 11 plus the makeRe export eslint-plugin-import-x 4.17.1 still imports. Remove when import-x supports minimatch 11.",
+	"type": "module",
+	"exports": {
+		"import": "./index.js",
+		"require": "./index.cjs"
+	},
+	"dependencies": {
+		"minimatch-11": "npm:minimatch@11.0.2"
+	}
+}