Skip to content

build(deps-dev): bump glob from 13.0.6 to 14.0.3 in /docs/v3 - #5603

Merged
moleske merged 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/v3/glob-14.0.3
Nov 7, 2026
Merged

moleske merged 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/v3/glob-14.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps glob from 13.0.6 to 14.0.3.

Changelog

Sourced from glob's changelog.

changeglob

14

  • Use minimatch 11. Each portion of a pattern with magic is now matched with a Matcher from @isaacs/nonrecursive-glob-match in place of a RegExp, so patterns can no longer cause ReDoS. Matching follows the minimatch 11 changes, which are closer to Bash in some edge cases.
  • Pattern#pattern() returns a Matcher for a portion with magic. The MMPattern type is now minimatch's ParseReturnFiltered, and the new MMMatcher type is the Matcher part of it.
  • Rename Pattern#isRegExp() to isMatcher(), and Processor#testRegExp() to testMatcher().
  • Remove the debug option, which minimatch no longer has.
  • Add the normalize option, to normalize unicode in the pattern and in the file names that it is matched against.
  • GlobWalker#walk() and walkSync() return arrays in place of sets, and MatchRecord#entries() is removed.
  • ignore patterns that start with / now start at the same place as other patterns that start with /: the root option if set, or else the root of the cwd, such as C:\ on Windows.
  • ignore patterns follow the windowsPathsNoEscape option, the same as other patterns.
  • On Windows, patterns that start with a long UNC root like //?/UNC/host/share/ walk that share, the same as //host/share/.
  • Faster ignore patterns (about 1.2 to 3 times faster), and less work for each entry in a walk (about 10% faster sync, and 15% to 30% faster async, for large trees).
  • Allow const string[] or readonly string[] as ignore option or pattern argument.
  • When the signal aborts an async walk, the walk stops. Before, it rejected, but continued to read directories.

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/v3/glob-14.0.3 branch from f344123 to 25e2ad1 Compare November 5, 2026 07:38
jochenehret
jochenehret previously approved these changes Nov 5, 2026
Bumps [glob](https://github.com/isaacs/node-glob) from 13.0.6 to 14.0.3.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v13.0.6...v14.0.3)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/v3/glob-14.0.3 branch from 25e2ad1 to 70c6d9e Compare November 5, 2026 07:48
@moleske
moleske merged commit 9d96509 into main Nov 7, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/docs/v3/glob-14.0.3 branch November 7, 2026 03:17
ari-wg-gitbot added a commit to cloudfoundry/capi-release that referenced this pull request Nov 7, 2026
Dependency updates in cloud_controller_ng:

- build(deps): bump googleapis-common-protos-types from 1.24.0 to 1.25.0
    PR: cloudfoundry/cloud_controller_ng#5631
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump github/codeql-action from 4.39.1 to 4.39.2
    PR: cloudfoundry/cloud_controller_ng#5630
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump sequel from 5.109.0 to 5.110.0
    PR: cloudfoundry/cloud_controller_ng#5628
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump rails-html-sanitizer from 1.7.1 to 1.7.2
    PR: cloudfoundry/cloud_controller_ng#5626
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump loofah from 2.25.2 to 2.25.3
    PR: cloudfoundry/cloud_controller_ng#5625
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps-dev): bump glob from 13.0.6 to 14.0.3 in /docs/v3
    PR: cloudfoundry/cloud_controller_ng#5603
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump redis from 5.4.1 to 6.0.0
    PR: cloudfoundry/cloud_controller_ng#5619
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump rack from 3.2.7 to 3.2.8
    PR: cloudfoundry/cloud_controller_ng#5613
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants