rollback to brace-expansion 2, for cjs support

Author: isaacs

package-lock.json

@@ -53,7 +53,7 @@
     "node": "20 || >=22"
   },
   "dependencies": {
-    "brace-expansion": "^4.0.0"
+    "brace-expansion": "^2.0.1"
   },
   "devDependencies": {
     "@types/brace-expansion": "^1.1.2",