fix vulnerability

Author: cx-margarita-levitm

package-lock.json

@@ -11,7 +11,7 @@
   ],
   "dependencies": {
     "async-mutex": "^0.5.0",
-    "azure-pipelines-tool-lib": "^2.0.8",
+    "azure-pipelines-tool-lib": "2.0.8",
     "https-proxy-agent": "^7.0.6",
     "log4js": "^6.9.1",
     "node-fetch": "^3.3.2",
@@ -55,7 +55,8 @@
     "typescript": "^5.6.3"
   },
   "overrides": {
-    "bluebird": "3.7.2"
+    "bluebird": "3.7.2",
+    "minimatch": "^3.1.4"
   },
   "publishConfig": {
     "registry": "https://npm.pkg.github.com"