[LOW] tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

[cdk8s-automation]

Github reported a new dependabot security alert at: https://github.com/cdk8s-team/cdk8s-cdktf-resolver/security/dependabot/12