* 'master' of github.com:mtr/angular-iscroll:
  Create codeql.yml

Bumps [loader-utils](https://github.com/webpack/loader-utils) from 2.0.0 to 2.0.4.
- [Release notes](https://github.com/webpack/loader-utils/releases)
- [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md)
- [Commits](webpack/loader-utils@v2.0.0...v2.0.4)

---
updated-dependencies:
- dependency-name: loader-utils
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

…2.0.4

Bump loader-utils from 2.0.0 to 2.0.4

…`^2.0.4` independent of yarn.lock.

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.0.8.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.0.8)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump minimatch from 3.0.4 to 3.0.8

This change resolves the security issues related to `minimatch` and `loader-utils` dependencies. `brace-expansion` package and its associated dependencies have been removed from `yarn.lock`. The `minimatch` and `loader-utils` dependencies were updated in the same file to meet the minimum security requirements. These updates were necessary to ensure the application is secured against potential vulnerabilities. This change also ensures that the minimum security requirement of `loader-utils version ^2.0.4` is now independent of `yarn.lock`.