chore(deps): update dependency @google/clasp to v3.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@google/clasp	3.3.0 → 3.4.0

---

Release Notes

google/clasp (@​google/clasp)

v3.4.0

Compare Source

Features

• cli: add global --allow-symlinks option for shared symlinked folders/files (78d7104)
• commands: surface security warnings for skipped files and enforce strict deletion boundaries (f2d835d)
• implement PKCE support in OAuth flows (#​1142) (1a1665e)

Bug Fixes

• auth: secure credential file writing with symlink protection and permissions (378c1a6)
• core: secure file system crawling, atomic writes, and structured security reporting (aa4cfeb)
• create-script: accept --type webapp and --type api as standalone aliases (#​1155) (34a468e), refs #​1154
• deps: update google-auth-library and googleapis to resolve Node 22+/25+ compatibility issues (87a3759)
• mcp: validate projectDir against permitted base paths (CWE-22 path traversal) (#​1141) (1e8132c)
• prevent OAuth CSRF via missing state parameter in authorization flow (#​1135) (8dac6c2)
• Print help instead of throwing error on unknown commands (#​1157) (39a9c12)
• security: clean up CSRF demo script and harden path boundary & test mocks (0a28a48)
• security: prevent path traversal via srcDir in .clasp.json (#​1140) (408448e)
• security: validate sourceDir MCP parameter and use realpath in WriteFiles (#​1144) (4eb9dca)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.