Skip to content

chore(deps): bump minimatch and npm - #750

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f99a02fa0c
Open

chore(deps): bump minimatch and npm#750
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f99a02fa0c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown

Bumps minimatch and npm. These dependencies needed to be updated together.
Updates minimatch from 10.1.1 to 10.2.5

Changelog

Sourced from minimatch's changelog.

change log

10.2

  • Add braceExpandMax option

10.1

  • Add magicalBraces option for escape
  • Fix makeRe when partial: true is set.
  • Fix makeRe when pattern ends in a final ** path part.

10.0

  • Require node 20 or 22 and higher

9.0

  • No default export, only named exports.

8.0

  • Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
  • Bump required Node.js version

7.4

  • Add escape() method
  • Add unescape() method
  • Add Minimatch.hasMagic() method

7.3

  • Add support for posix character classes in a unicode-aware way.

7.2

  • Add windowsNoMagicRoot option

7.1

  • Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

... (truncated)

Commits

Updates npm from 11.8.0 to 11.19.0

Release notes

Sourced from npm's releases.

v11.19.0

11.19.0 (2026-07-28)

Features

Bug Fixes

Dependencies

v11.18.0

11.18.0 (2026-06-29)

Features

Bug Fixes

Documentation

Dependencies

Chores

... (truncated)

Changelog

Sourced from npm's changelog.

11.19.0 (2026-07-28)

Features

Bug Fixes

Dependencies

11.18.0 (2026-06-29)

Features

Bug Fixes

Documentation

Dependencies

Chores

... (truncated)

Commits
  • bfacd33 chore: release 11.19.0
  • 3529ca2 fix(pack): honor min-release-age-exclude (#9811)
  • 67f12ae fix(owner): use scoped registry for user lookup (#9810)
  • aea0c6e fix(arborist): avoid crash when peer back-off detaches a node (#9808)
  • ca41636 fix(arborist): allow audit fix to install safe downgrades (#9791)
  • 7d39aa6 feat(install-scripts): use install-scripts as the warning log title
  • a9c8c06 chore: release 11.18.0
  • f79b37f chore: dev dependency updates
  • 54656b6 deps: undici@6.27.0
  • 31c4773 deps: brace-expansion@5.0.7
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-f99a02fa0c branch 6 times, most recently from b24ad1a to d5f626f Compare August 3, 2026 06:02
Bumps [minimatch](https://github.com/isaacs/minimatch) and [npm](https://github.com/npm/cli). These dependencies needed to be updated together.

Updates `minimatch` from 10.1.1 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.1.1...v10.2.5)

Updates `npm` from 11.8.0 to 11.19.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/v11.19.0/CHANGELOG.md)
- [Commits](npm/cli@v11.8.0...v11.19.0)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: indirect
- dependency-name: npm
  dependency-version: 11.18.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-f99a02fa0c branch from d5f626f to b807533 Compare August 3, 2026 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants