Bump micromatch to v4.0.0

[trivikr]

Is your request related to a problem? Please describe.

jscodeshift has deprecated package urix as a transitive dependency, and it shows up in Socket Security report.

$ yarn why urix -R 
...
=> Found "urix@0.1.0"
info Reasons this module exists
   - "micromatch#snapdragon#source-map-resolve" depends on it
   - Hoisted from "micromatch#snapdragon#source-map-resolve#urix"

Describe the solution you'd like

Bump micromatch to v4.0.0 which removes transitive dependency on "#snapdragon#source-map-resolve#urix"

[trivikr]

Last bump of micromatch was done in #257