Skip to content

meta: bump minimatch from 3.1.2 to 10.2.5#8894

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minimatch-10.2.5
Open

meta: bump minimatch from 3.1.2 to 10.2.5#8894
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minimatch-10.2.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Bumps minimatch from 3.1.2 to 10.2.5.

Changelog

Sourced from minimatch's changelog.

change log

10.2

  • Add braceExpandMax option

10.1

  • Add magicalBraces option for escape
  • Fix makeRe when partial: true is set.
  • Fix makeRe when pattern ends in a final ** path part.

10.0

  • Require node 20 or 22 and higher

9.0

  • No default export, only named exports.

8.0

  • Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
  • Bump required Node.js version

7.4

  • Add escape() method
  • Add unescape() method
  • Add Minimatch.hasMagic() method

7.3

  • Add support for posix character classes in a unicode-aware way.

7.2

  • Add windowsNoMagicRoot option

7.1

  • Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot Bot requested a review from a team as a code owner May 14, 2026 13:50
@dependabot dependabot Bot added auto-merge Ready to automatically merge after being open for 48 hours dependencies Pull requests that update a dependency file github_actions:pull-request Trigger Pull Request Checks javascript Pull requests that update javascript code labels May 14, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented May 14, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nodejs-org Ready Ready Preview May 16, 2026 4:07am

Request Review

@codecov
Copy link
Copy Markdown

codecov Bot commented May 14, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.24%. Comparing base (9a6f924) to head (5831fac).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #8894      +/-   ##
==========================================
+ Coverage   73.20%   73.24%   +0.04%     
==========================================
  Files         102      102              
  Lines        8628     8628              
  Branches      314      313       -1     
==========================================
+ Hits         6316     6320       +4     
+ Misses       2311     2307       -4     
  Partials        1        1              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minimatch-10.2.5 branch from 805e5d8 to 2394ed9 Compare May 16, 2026 03:33
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 10.2.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v10.2.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minimatch-10.2.5 branch from 2394ed9 to 5831fac Compare May 16, 2026 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Ready to automatically merge after being open for 48 hours dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants