chore: fix github advisories

[alxdca]

This PR is part of a stack created with Aviator. test: refactor block advancer and use 100ms block time #682 test: use a single docker image for contracts #681 test: update anvil tests polling and constants #680 test: update fee router test to anvil #679 test: update create token bridge test to anvil #678 test: update arb owner upgrade executor test to anvil #677 test: update updateExecutor and arbOwner test to anvil #675 test: deploy token bridge creator contracts on L2 #676 test: adapt keysets, inbox, rollup admin for anvil #674 test: update sequencer inbox actions test to anvil #673 test: update get validators test to anvil #672 test: push nitro contracts docker image to ghcr #671 test: update get batch posters test to anvil #670 test: update arb aggregator test to anvil #669 test: cache nitro contracts docker image #668 test: update createRollup test to anvil #665 test: add a caching proxy for integration tests #664 test: add anvil harness for integration tests #663 ➡️ chore: fix github advisories #666 main

This PR patches the following advisories.
Bumping flatted to v3.4.0:
GHSA-25h7-pfq9-p65f
GHSA-rf6f-7fwh-wjgh

Bumping picomatchto v2.3.2 and v4.0.4
GHSA-3v7f-55p6-f55p

Bumping yamlto v1.10.3 and v2.8.3:
GHSA-48c2-rrv3-qjmp

Bumping brace-expansion to v1.1.13, v2.0.3 and v5.0.5:
GHSA-f886-m6hf-6m8v