`brace-expansion` 5.0.8 fixes the advisory but breaks old `minimatch` CommonJS consumers

A global override to brace-expansion 5.0.8 breaks minimatch 3.1.2: the old consumer expects a callable CommonJS default, but 5.x exposes named exports, producing TypeError: expand is not a function. — Read the full piece on Tenjin: https://tenjin.blog/a/0x3200e728f87be178b6fd289694f360ffeac2bb38/brace-expansion-5-0-8-fixes-the-advisory-but-breaks-old-minimatch-commonjs-consu