fix: unify all scripts to use vendored minimatch, remove minimatch-lite.js

.github/scripts/merge_manager.js

@@ -1,5 +1,5 @@
 const { Buffer } = require('node:buffer');
-const { minimatch } = require('./minimatch-lite.js');
+const { minimatch } = require('minimatch');
 const { ensureRateLimitWrapped } = require('./github-rate-limited-wrapper.js');
 
 async function fetchAllowlist(github, owner, repo, path, ref) {

.github/scripts/pr-context-graphql.js

@@ -1,7 +1,7 @@
 'use strict';
 
 const { ensureRateLimitWrapped } = require('./github-rate-limited-wrapper.js');
-const { minimatch } = require('./minimatch-lite.js');
+const { minimatch } = require('minimatch');
 
 /**
  * GraphQL-based PR Context Fetcher

.github/sync-manifest.yml

@@ -248,6 +248,12 @@ scripts:
   - source: .github/scripts/node_modules/minimatch/
     description: "Vendored minimatch dependency for .github scripts"
 
+  - source: .github/scripts/node_modules/brace-expansion/
+    description: "Vendored brace-expansion dependency (transitive dep of minimatch)"
+
+  - source: .github/scripts/node_modules/balanced-match/
+    description: "Vendored balanced-match dependency (transitive dep of brace-expansion)"
+
   # JavaScript scripts for issue/PR handling
   - source: .github/scripts/issue_pr_locator.js
     description: "Locates PRs associated with issues"

templates/consumer-repo/.github/scripts/merge_manager.js

@@ -1,5 +1,5 @@
 const { Buffer } = require('node:buffer');
-const { minimatch } = require('./minimatch-lite.js');
+const { minimatch } = require('minimatch');
 const { ensureRateLimitWrapped } = require('./github-rate-limited-wrapper.js');
 
 async function fetchAllowlist(github, owner, repo, path, ref) {