chore: Upgrade minimatch to fix RegEx DoS security issue

[phacks]

Fixes #10282

TODO:

• Switch to recursive-readdir library
• Implement async readdir behavior
• Fix existing tests
• Test error handling
• Test on a gatsby-starter-blog with few examples of REPLs
• Try and implement the Promise.all refactor

[DSchau]

@phacks applied the do not merge and WIP labels while you're still working on this and validating.

Please let us know when it's ready for another set of 👀!

[phacks]

@DSchau Should be ready for a review!

I created a sample repo with lots of code REPLs to test it out, it’s available here: https://github.com/phacks/gatsby-code-repl-samples

I managed to implement the Promise.all() refactor, although in my benchmark (~10 000 code REPLs), I found virtually no differences in the createPages duration. I’m not sure whether that’s normal or not 🤔

[phacks]

I forgot to mention that for some (as yet unknown) reason, the /redirect-to-codepen links do not work in my example repo. However, they do not work with the current gatsby-remark-code-repls plugin, so I don’t think my PR has something to do with that. I may take some time to investigate the issue after this PR!

[phacks]

@DSchau do you think you may have some time this week to review the PR? Thanks!

[DSchau]

@phacks of course--will look at it today and leave any feedback! Thanks!

[LekoArts]

@phacks Hi. Do you have time to answer @DSchau question? :)

[phacks]

@LekoArts @DSchau Oops! This one went under my radar. I will have a look at it by this weekend (probably today though), thanks!

[wardpeet]

@phacks almost there! sorry about this!

[phacks]

@wardpeet No worries! It looks like the syntax you suggested isn’t available for async functions — I suggested a few alternatives (including mine) in the first comment.