Update jake dependency to avoid [email protected] snyk vulnerability

[tmbp95]

Hello, I'm currently using the latest ejs version (3.1.9) which points to the version of Jake 10.8.5 (https://github.com/mde/ejs/blob/v3.1.9/package.json#L25)
Unfortunately, that version of Jake still uses [email protected] which is being pointed out by Snyk as a vulnerability.

path: [email protected] › [email protected] › [email protected]

I see that the jake package already updated its version to 10.8.7 and that version already updated the minimatch.
Do you have any estimation or timeframe for the update to the new version of jake?

Thank you!