Dependency on minimatch flagged in security advisory

dependabot is complaining about my project because of https://github.com/advisories/GHSA-3ppc-4f35-3m26 

it seems this plugin depends on a pretty old version of minimatch... any chance of a release to upgrade dependencies?
