feat: update to avoid brace-extansion issue

[MaitreGEEK]

@sentry/node › @fastify/otel › minimatch › brace-expansion
moderate: brace-expansion: Zero-step sequence causes process hang and memory exhaustion - GHSA-f886-m6hf-6m8v

Before submitting a pull request, please take a look at our
Contributing guidelines and verify:

• [x ] If you've added code that should be tested, please add tests.
• [ x] Ensure your code lints and the test suite passes (yarn lint) & (yarn test).
• [x ] Link an issue if there is one related to your pull request. If no issue is linked, one will be auto-generated and linked.

Closes #issue_link_here

[sdk-maintainer-bot]

This PR has been automatically closed. All non-maintainer contributions must reference an existing GitHub issue.

Next steps:

1. Find or open an issue describing the problem or feature
2. Discuss the approach with a maintainer in the issue
3. Once a maintainer has acknowledged your proposed approach, open a new PR referencing the issue

Please review our contributing guidelines for more details.

[github-actions]

Semver Impact of This PR

🟡 Minor (new features)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

New Features ✨

• Update to avoid brace-extansion issue by MaitreGEEK in #20203

---

_{🤖 This preview updates automatically when you update the PR.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 53ef9de. Configure here.}

[cursor]

Dependency version 0.18.1 does not exist on npm

High Severity

@fastify/otel version 0.18.1 does not appear to exist on npm — the latest published version is 0.18.0. The yarn.lock also still references 0.18.0, confirming it was never resolved. A fresh install will fail because yarn cannot find version 0.18.1 in the registry. The stated goal of fixing the brace-expansion vulnerability via minimatch won't be achieved by this change.

 

^{Reviewed by Cursor Bugbot for commit 53ef9de. Configure here.}