fix(config/presets): correct security-only preset matcher

[Churro]

Changes

The security-only preset currenly includes matchPackageNames: ['*'] which doesn't work because names are not evaluated as patterns. This PR makes it work by using matchPackagePatterns instead.

Unlike matchPackagePatterns (see here), the matchPackageNames matcher (see here) doesn't massage * to .* and doesn't attempt matching names against it. Hence, the security-only preset didn't work so far.

Context

• Only Security Updates preset still raises updates for other packages #29509
• Perform *only* security updates? #15490
• feat(config/presets): add security-only preset #28320

Documentation (please check one with an [x])

• I have updated the documentation, or
• No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

• Code inspection only, or
• Newly added/modified unit tests, or
• No unit tests but ran on a real repository, or
• Both unit tests + ran on a real repository

[renovate-release]

🎉 This PR is included in version 37.414.1 🎉

The release is available on:

• GitHub release
• npm package (@latest dist-tag)
• 37.414.1

Your semantic-release bot 📦🚀