Bump braces and xo

Bumps [braces](https://github.com/micromatch/braces) to 3.0.3 and updates ancestor dependency [xo](https://github.com/xojs/xo). These dependencies need to be updated together.


Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `xo` from 0.26.1 to 0.58.0
- [Release notes](https://github.com/xojs/xo/releases)
- [Commits](xojs/xo@v0.26.1...v0.58.0)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
- dependency-name: xo
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>