Skip to content

Comments

build(deps-dev): Bump minimatch to 10.2.2#1312

Merged
d3xter666 merged 1 commit intomainfrom
deps/update-minimatch
Feb 23, 2026
Merged

build(deps-dev): Bump minimatch to 10.2.2#1312
d3xter666 merged 1 commit intomainfrom
deps/update-minimatch

Conversation

@d3xter666
Copy link
Member

@d3xter666 d3xter666 requested a review from a team February 23, 2026 08:27
@maxreichmann
Copy link
Member

What is our approach regarding dependencies using minimatch prior to version 10? E.g. in the builder package, ava is depending on minimatch@9.0.5.
The vulnerability report states all versions prior to 10.2.1 are affected. I guess, we can only update version 10?

@d3xter666
Copy link
Member Author

What is our approach regarding dependencies using minimatch prior to version 10? E.g. in the builder package, ava is depending on minimatch@9.0.5. The vulnerability report states all versions prior to 10.2.1 are affected. I guess, we can only update version 10?

This change will only update production dependencies! Unfortunatelly at this point we cannot do much for those eslint deps

@d3xter666 d3xter666 merged commit cca4695 into main Feb 23, 2026
30 checks passed
@d3xter666 d3xter666 deleted the deps/update-minimatch branch February 23, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants