fix: ReDos regex vulnerability, reported by @DayShift

[wolfy1339]

Backport of https://github.com/octokit/request.js/releases/tag/v9.2.2
Backport of https://github.com/octokit/request.js/releases/tag/v9.2.1

[github-actions]

👋 Hi! Thank you for this contribution! Just to let you know, our GitHub SDK team does a round of issue and PR reviews twice a week, every Monday and Friday! We have a process in place for prioritizing and responding to your input. Because you are a part of this community please feel free to comment, add to, or pick up any issues/PRs that are labled with Status: Up for grabs. You & others like you are the reason all of this works! So thank you & happy coding! 🚀

[github-actions]

🎉 This PR is included in version 8.4.1 🎉

The release is available on:

• GitHub release
• npm package (@release-8.x dist-tag)

Your semantic-release bot 📦🚀

[wolfy1339]

@gr2m @nickfloyd Can you update the security advisory with this fixed version

[aashutoshrathi]

@gr2m @nickfloyd can you update the security advisory for this fixed version? Since CJS users still rely on 8.x.
Thanks 🙏🏻
Since, This refer to this

[wolfy1339]

The GHSA was already updated

GHSA-rmvr-2pp2-xj38

Whatever software you are using should be pulling from that.