CVE-2024-4068 — braces ReDoS (build-time DoS)

A ReDoS in the `braces` package — pulled transitively by virtually every Node project via micromatch — allowed malicious brace patterns to hang parser processes.