Latest version of @graphql-eslint/eslint-plugin (4.4.0) uses the vulnerable braces@3.0.2 package

[rujhan-arora-astronomer]

Is your feature request related to a problem? Please describe.

In order to fix CVE-2024-4068, we need to upgrade the braces package to version 3.0.3. But the latest version of @graphql-eslint/eslint-plugin (4.4.0) still uses the vulnerable braces@3.0.2 package.

Describe the solution you'd like

Use a newer version of the braces package.

Describe alternatives you've considered

You can let me know if there is a workaround.

Additional context