Skip to content

chore(deps):(deps-dev): bump glob from 13.0.6 to 14.0.2 - #6494

Merged
daggerstuff merged 1 commit into
stagingfrom
dependabot/npm_and_yarn/glob-14.0.2
Nov 3, 2026
Merged

daggerstuff merged 1 commit into
stagingfrom
dependabot/npm_and_yarn/glob-14.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps glob from 13.0.6 to 14.0.2.

Changelog

Sourced from glob's changelog.

changeglob

14

  • Use minimatch 11. Each portion of a pattern with magic is now matched with a Matcher from @isaacs/nonrecursive-glob-match in place of a RegExp, so patterns can no longer cause ReDoS. Matching follows the minimatch 11 changes, which are closer to Bash in some edge cases.
  • Pattern#pattern() returns a Matcher for a portion with magic. The MMPattern type is now minimatch's ParseReturnFiltered, and the new MMMatcher type is the Matcher part of it.
  • Rename Pattern#isRegExp() to isMatcher(), and Processor#testRegExp() to testMatcher().
  • Remove the debug option, which minimatch no longer has.
  • Add the normalize option, to normalize unicode in the pattern and in the file names that it is matched against.
  • GlobWalker#walk() and walkSync() return arrays in place of sets, and MatchRecord#entries() is removed.
  • ignore patterns that start with / now start at the same place as other patterns that start with /: the root option if set, or else the root of the cwd, such as C:\ on Windows.
  • ignore patterns follow the windowsPathsNoEscape option, the same as other patterns.
  • On Windows, patterns that start with a long UNC root like //?/UNC/host/share/ walk that share, the same as //host/share/.
  • Faster ignore patterns (about 1.2 to 3 times faster), and less work for each entry in a walk (about 10% faster sync, and 15% to 30% faster async, for large trees).
  • Allow const string[] or readonly string[] as ignore option or pattern argument.
  • When the signal aborts an async walk, the walk stops. Before, it rejected, but continued to read directories.

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

... (truncated)

Commits
  • 93957bf 14.0.2
  • 4682e8c fix: do not continue walking after signal abort
  • 668a669 14.0.1
  • 6ff2314 allow const/readonly string[] for ignore, patterns
  • bbe1e5d 14.0.0
  • d9586ad use actual published deps, not symlinks
  • 8b16637 handle long unc forms
  • 5bcdc65 extglobs cannot contain /
  • d8b40c2 handle root in platform-independent way, for ignores and patterns
  • 7d1c45a add native fs glob test (todo on failure)
  • Additional commits viewable in compare view

@vercel

vercel Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
pixelated Ignored Ignored Preview Nov 3, 2026 2:52pm UTC

Request Review

@dependabot
dependabot Bot requested a review from daggerstuff as a code owner November 3, 2026 13:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pnpm Pull requests that update pnpm dependencies labels Nov 3, 2026
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • lhr-1793714240185
  • lhr-1793714252839
  • lhr-1793714264941
  • lhr-1793714276298
  • lhr-1793714287602
  • lhr-1793714298950
  • lhr-1793714310401
  • lhr-1793714321719
  • lhr-1793714333034

Reports are also available as workflow artifacts

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/glob-14.0.2 branch from a87125f to e189d6c Compare November 3, 2026 14:23
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • lhr-1793716260016
  • lhr-1793716271905
  • lhr-1793716283469
  • lhr-1793716294343
  • lhr-1793716305172
  • lhr-1793716316013
  • lhr-1793716326823
  • lhr-1793716337690
  • lhr-1793716348548

Reports are also available as workflow artifacts

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/glob-14.0.2 branch from e189d6c to f1df304 Compare November 3, 2026 14:48
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

Bumps [glob](https://github.com/isaacs/node-glob) from 13.0.6 to 14.0.2.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v13.0.6...v14.0.2)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 14.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@daggerstuff
daggerstuff force-pushed the dependabot/npm_and_yarn/glob-14.0.2 branch from f1df304 to 15f6795 Compare November 3, 2026 14:51
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • lhr-1793717484306
  • lhr-1793717496948
  • lhr-1793717509055
  • lhr-1793717520464
  • lhr-1793717531754
  • lhr-1793717543104
  • lhr-1793717554418
  • lhr-1793717565771
  • lhr-1793717577166

Reports are also available as workflow artifacts

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • lhr-1793717799226
  • lhr-1793717811409
  • lhr-1793717823265
  • lhr-1793717834349
  • lhr-1793717845445
  • lhr-1793717856489
  • lhr-1793717867531
  • lhr-1793717878494
  • lhr-1793717889557

Reports are also available as workflow artifacts

@daggerstuff
daggerstuff merged commit 875bb29 into staging Nov 3, 2026
40 of 43 checks passed
@daggerstuff
daggerstuff deleted the dependabot/npm_and_yarn/glob-14.0.2 branch November 3, 2026 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pnpm Pull requests that update pnpm dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant