Skip to content

Update minimatch to fix GHSA-g3hv-75wg-m249 - #11

Closed
nitodeco wants to merge 1 commit into
mainfrom
update-minimatch
Closed

nitodeco wants to merge 1 commit into
mainfrom
update-minimatch

Conversation

@nitodeco

@nitodeco nitodeco commented Nov 3, 2026 •

Copy link
Copy Markdown
Member

c8 pulls in minimatch 10 through test-exclude and glob 13. The advisory is fixed only in minimatch 11.0.1 and later, and glob 13 uses minimatch APIs that version 11 removes. This overrides glob to 14 and minimatch to 11 for test-exclude. test-exclude uses only the glob() and minimatch() functions, which did not change. Both packages are development dependencies only.

@nitodeco

nitodeco commented Nov 3, 2026

Copy link
Copy Markdown
Member Author

Moved into #10.

@nitodeco nitodeco closed this Nov 3, 2026
@nitodeco
nitodeco deleted the update-minimatch branch November 3, 2026 16:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant