deps: bump minipass from 5.0.0 to 7.0.2 (#253)

Bumps [minipass](https://github.com/isaacs/minipass) from 5.0.0 to
7.0.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/isaacs/minipass/blob/main/CHANGELOG.md">minipass's
changelog</a>.</em></p>
<blockquote>
<h1>chernge lerg</h1>
<h2>7.0</h2>
<p>This is a big one, please read carefully before upgrading from
prior versions, especially if you extend Minipass in a subclass.</p>
<h3>Breaking Changes</h3>
<ul>
<li>Rewritten in TypeScript as hybrid esm/cjs build, so a lot of
types changed in subtle ways, and several behaviors got
stricter.</li>
<li>Minipass now inherits from <code>EventEmitter</code> rather than
<code>Stream</code>.
Nothing from the <code>Stream</code> class was ever used by Minipass,
but
it inherited from <code>Stream</code> to pass checks in some stream
libraries that checked <code>instanceof Stream</code>. Unfortunately,
the
type difference in the <code>pipe()</code> method signature made it
challenging to continue doing in TypeScript.</li>
<li>It is no longer possible to change the type of data emitted
after a Minipass stream is instantiated, as this would thwart
TypeScript's static checks. As a consequence:
<ul>
<li>The <code>setEncoding</code> method and the <code>encoding</code>
setter are
deprecated. Encoding may <em>only</em> be set in the constructor
options object.</li>
<li><code>objectMode</code> is no longer inferred by writing something
other
than a string or Buffer. It may <em>only</em> be set in the
constructor options object.</li>
</ul>
</li>
<li>If all existing data consumers are removed, via
<code>stream.unpipe(dest)</code>, <code>stream.removeListener('data',
handler)</code>,
<code>stream.removeAllListeners('data')</code>, and/or
<code>stream.removeAllListeners()</code>, then the data will stop
flowing.
Note that it is still possible to explicitly discard a stream's
data by calling <code>stream.resume()</code> in the absence of any
consumers.</li>
</ul>
<h3>Features and Fixes</h3>
<ul>
<li>Removed a very subtle performance issue that made objectMode
Minipass streams slower in some cases than node core streams.
Minipass is now faster than node core streams for all data
types.</li>
<li>The array returned by <code>stream.collect()</code> for objectMode
streams
will have a <code>dataLength</code> property equal to 0, rather than
undefined.</li>
<li><code>isStream</code> is moved from a static member on the Minipass
class
to a named export.</li>
<li><code>isWritable()</code> and <code>isReadable()</code> methods
added.</li>
</ul>
<h2>6.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/isaacs/minipass/commit/b220db67d918c9717911ac5a05d427d2da6074d3"><code>b220db6</code></a>
7.0.2</li>
<li><a
href="https://github.com/isaacs/minipass/commit/a7ba1e31c6eeab5afc2fc97acf7ad9afdece4079"><code>a7ba1e3</code></a>
declare return type for concat(), promise(), collect()</li>
<li><a
href="https://github.com/isaacs/minipass/commit/6baaade6726d1cac656426f89f15de631a56b3d1"><code>6baaade</code></a>
7.0.1</li>
<li><a
href="https://github.com/isaacs/minipass/commit/9fc5be045a4c76e2b9aa99f0cb3d12d50a1e2fff"><code>9fc5be0</code></a>
pipe() should always return the dest, even if destroyed</li>
<li><a
href="https://github.com/isaacs/minipass/commit/d63abffc8734d679177d2382ac1841caa82349f3"><code>d63abff</code></a>
7.0.0</li>
<li><a
href="https://github.com/isaacs/minipass/commit/838c8554b1871e239cbb7debfd6c5bdea053ff2d"><code>838c855</code></a>
Rewrite in TypeScript</li>
<li><a
href="https://github.com/isaacs/minipass/commit/98531132ad1d2ce38429002171d7fe45ee977396"><code>9853113</code></a>
fix benchmarks, test against more mp versions</li>
<li><a
href="https://github.com/isaacs/minipass/commit/15ab07809dab7a278f9c79027cf25a3a150b770a"><code>15ab078</code></a>
6.0.2</li>
<li><a
href="https://github.com/isaacs/minipass/commit/0c7b958a800186e63fd87d27e80cc7d93fe60e9e"><code>0c7b958</code></a>
allow symbol as an event type</li>
<li><a
href="https://github.com/isaacs/minipass/commit/6125ceeddb721eb3f69749d4e71953adb48ad37d"><code>6125cee</code></a>
6.0.1</li>
<li>Additional commits viewable in <a
href="https://github.com/isaacs/minipass/compare/v5.0.0...v7.0.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=minipass&package-manager=npm_and_yarn&previous-version=5.0.0&new-version=7.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

package.json

@@ -37,7 +37,7 @@
     "cacache": "^17.0.0",
     "http-cache-semantics": "^4.1.1",
     "is-lambda": "^1.0.1",
-    "minipass": "^5.0.0",
+    "minipass": "^7.0.2",
     "minipass-fetch": "^3.0.0",
     "minipass-flush": "^1.0.5",
     "minipass-pipeline": "^1.2.4",