ci(scorecard): remove fixtures removals and fix found vulnerability (#26715)

.github/workflows/scorecard.yml

@@ -24,10 +24,6 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Delete fixtures to suppress false positives
-        run: |
-          find ./lib -type d -name '__fixtures__' -exec rm -rf {} \; || true
-
       - name: 'Run analysis'
         uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
         with:

lib/modules/manager/npm/post-update/__fixtures__/update-lockfile-massage-1/package-lock.json

@@ -28,8 +28,8 @@
       "integrity": "sha512-1fygroTLlHu66zi26VoTDv8yRgm0Fccecssto+MhsZ0D/DGW2sm8E8AjW7NU5VVTRt5GxbeZ5qBuJr+HyLYkjQ=="
     },
     "node_modules/postcss": {
-      "version": "8.4.8",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.8.tgz",
+      "version": "8.4.31",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz",
       "integrity": "sha512-2tXEqGxrjvAO6U+CJzDL2Fk2kPHTv1jQsYkSoMeOis2SsYaXRO2COxTdQp99cYvif9JTXaAk9lYGc3VhJt7JPQ==",
       "dependencies": {
         "nanoid": "^3.3.1",

lib/modules/manager/npm/post-update/__snapshots__/npm.spec.ts.snap

@@ -100,8 +100,8 @@ exports[`modules/manager/npm/post-update/npm performs lock file updates retainin
       "integrity": "sha512-1fygroTLlHu66zi26VoTDv8yRgm0Fccecssto+MhsZ0D/DGW2sm8E8AjW7NU5VVTRt5GxbeZ5qBuJr+HyLYkjQ=="
     },
     "node_modules/postcss": {
-      "version": "8.4.8",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.8.tgz",
+      "version": "8.4.31",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz",
       "integrity": "sha512-2tXEqGxrjvAO6U+CJzDL2Fk2kPHTv1jQsYkSoMeOis2SsYaXRO2COxTdQp99cYvif9JTXaAk9lYGc3VhJt7JPQ==",
       "dependencies": {
         "nanoid": "^3.3.1",