build(deps-dev): bump eslint-plugin-security from 1.7.1 to 4.1.0 in the eslint group

[dependabot]

Bumps the eslint group with 1 update: eslint-plugin-security.

Updates eslint-plugin-security from 1.7.1 to 4.1.0

Release notes

Sourced from eslint-plugin-security's releases.

eslint-plugin-security: v4.1.0

4.1.0 (2026-09-16)

Features

• detect-invisible-characters rule (#212) (81a6c2d)

Bug Fixes

• handle all ECMAScript line terminators (#221) (48134ba)
• use valid rule meta types (#219) (baead41)

eslint-plugin-security: v4.0.1

4.0.1 (2026-06-12)

Bug Fixes

• treat import.meta.dirname and import.meta.filename as static (#200) (74c97bb)

eslint-plugin-security: v4.0.0

4.0.0 (2026-02-19)

⚠ BREAKING CHANGES

• requires node ^18.18.0 || ^20.9.0 || >=21.1.0 (#146)
• switch the recommended config to flat (#118)

Features

• add config recommended-legacy (#132) (13d3f2f)
• Add meta object documentation for all rules (#79) (fb1d9ef)
• detect-bidi-characters rule (#95) (4294d29)
• detect-non-literal-fs-filename: change to track non-top-level require() as well (#105) (d3b1543)
• extend detect non literal fs filename (#92) (08ba476)
• improve detect-child-process rule (#108) (64ae529)
• non-literal-require: support template literals (#81) (208019b)
• requires node ^18.18.0 || ^20.9.0 || >=21.1.0 (#146) (df1b606)
• switch the recommended config to flat (#118) (e20a366)

Bug Fixes

• Add ESLint 10 compatibility for context.sourceCode API change (#186) (7f9ee77)
• add name to recommended flat config (#161) (aa1c8c5)
• Avoid crash when exec() is passed no arguments (7f97815), closes #82 #23
• Avoid TypeError when exec stub is used with no arguments (#97) (9c18f16)

... (truncated)

Changelog

Sourced from eslint-plugin-security's changelog.

4.1.0 (2026-09-16)

Features

• detect-invisible-characters rule (#212) (81a6c2d)

Bug Fixes

• handle all ECMAScript line terminators (#221) (48134ba)
• use valid rule meta types (#219) (baead41)

4.0.1 (2026-06-12)

Bug Fixes

• treat import.meta.dirname and import.meta.filename as static (#200) (74c97bb)

4.0.0 (2026-02-19)

⚠ BREAKING CHANGES

• requires node ^18.18.0 || ^20.9.0 || >=21.1.0 (#146)
• switch the recommended config to flat (#118)

Features

• add config recommended-legacy (#132) (13d3f2f)
• Add meta object documentation for all rules (#79) (fb1d9ef)
• detect-bidi-characters rule (#95) (4294d29)
• detect-non-literal-fs-filename: change to track non-top-level require() as well (#105) (d3b1543)
• extend detect non literal fs filename (#92) (08ba476)
• improve detect-child-process rule (#108) (64ae529)
• non-literal-require: support template literals (#81) (208019b)
• requires node ^18.18.0 || ^20.9.0 || >=21.1.0 (#146) (df1b606)
• switch the recommended config to flat (#118) (e20a366)

Bug Fixes

• Add ESLint 10 compatibility for context.sourceCode API change (#186) (7f9ee77)
• add name to recommended flat config (#161) (aa1c8c5)
• Avoid crash when exec() is passed no arguments (7f97815), closes #82 #23
• Avoid TypeError when exec stub is used with no arguments (#97) (9c18f16)
• detect-child-process: false positive for destructuring with exec (#102) (657921a)
• detect-child-process: false positives for destructuring spawn (#103) (fdfe37d)
• Ensure empty eval() doesn't crash detect-eval-with-expression (#139) (8a7c7db)

... (truncated)

Commits

• c80f6b5 chore: release 4.1.0 🚀 (#224)
• baead41 fix: use valid rule meta types (#219)
• 81a6c2d feat: detect-invisible-characters rule (#212)
• 9735451 ci: fix the CI failure in pr.yml (#218)
• 48134ba fix: handle all ECMAScript line terminators (#221)
• 1f8de13 chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 (#223)
• 2727df0 chore(deps): bump brace-expansion (#216)
• 8d13e34 chore(deps-dev): bump js-yaml from 4.2.0 to 4.3.1 (#214)
• 28da72b chore(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 (#211)
• 886ff6b chore(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 (#206)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-security since your current version.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
eslint-plugin-security	[>= 3.0.a, < 3.1]
eslint-plugin-security	[>= 2.1.a, < 2.2]
eslint-plugin-security	[>= 2.a, < 3]
eslint-plugin-security	[>= 4.0.a, < 4.1]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions