Bump minimatch in /webpack/webpack4-localization-plugin (#5651)

Bumps [minimatch](https://github.com/isaacs/minimatch) from 10.1.2 to 10.2.1.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.1.2...v10.2.1)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 10.2.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

apps/api-extractor/package.json

@@ -70,7 +70,7 @@
     "@rushstack/ts-command-line": "workspace:*",
     "diff": "~8.0.2",
     "lodash": "~4.17.23",
-    "minimatch": "10.1.2",
+    "minimatch": "10.2.1",
     "resolve": "~1.22.1",
     "semver": "~7.5.4",
     "source-map": "~0.6.1",

common/changes/@microsoft/api-extractor/bump-minimatch_2026-02-20-02-51.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@microsoft/api-extractor",
+      "comment": "Bump minimatch from 10.1.2 to 10.2.1",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@microsoft/api-extractor"
+}

common/changes/@rushstack/package-extractor/bump-minimatch_2026-02-20-02-51.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/package-extractor",
+      "comment": "Bump minimatch from 10.1.2 to 10.2.1",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@rushstack/package-extractor"
+}

common/changes/@rushstack/webpack4-localization-plugin/bump-minimatch_2026-02-20-02-51.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/webpack4-localization-plugin",
+      "comment": "Bump minimatch from 10.1.2 to 10.2.1",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@rushstack/webpack4-localization-plugin"
+}

common/config/subspaces/build-tests-subspace/pnpm-lock.yaml

@@ -1,6 +1,6 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "2e83a5ce6283e922a1f2904047c3b52f6323a37c",
+  "pnpmShrinkwrapHash": "970749d264e69bf8ff6a9fb6007b379832c9ac09",
   "preferredVersionsHash": "550b4cee0bef4e97db6c6aad726df5149d20e7d9",
-  "packageJsonInjectedDependenciesHash": "4efa246b20efc7e2e5b0a203952794918e1358d3"
+  "packageJsonInjectedDependenciesHash": "0124c511e290517bf309935112b2dbab981575bb"
 }

common/config/subspaces/build-tests-subspace/repo-state.json

@@ -35,7 +35,7 @@
     "eslint": "~9.37.0",
 
     // Updated minimatch and its types to latest major version to resolve ReDoS vulnerability
-    "minimatch": "10.1.2"
+    "minimatch": "10.2.1"
   },
 
   /**

common/config/subspaces/default/common-versions.json

@@ -1,5 +1,5 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "a97a152eec27dd54ce31e3973f851f572c326c76",
-  "preferredVersionsHash": "9ba05fe872434900a0b29c308a94015078f37c47"
+  "pnpmShrinkwrapHash": "425296840bc63395649600913e66041583bdc287",
+  "preferredVersionsHash": "93bf435032db8da4a18734f1eaa359c12ad147c1"
 }

common/config/subspaces/default/pnpm-lock.yaml

@@ -46,7 +46,7 @@
     "@rushstack/ts-command-line": "workspace:*",
     "ignore": "~5.1.6",
     "jszip": "~3.8.0",
-    "minimatch": "10.1.2",
+    "minimatch": "10.2.1",
     "npm-packlist": "~5.1.3",
     "semver": "~7.5.4"
   },