Skip to content

Fix sbom dependencies#32888

Merged
Raushen merged 1 commit intoDevExpress:26_1from
Raushen:Dependabot-5-2
Mar 12, 2026
Merged

Fix sbom dependencies#32888
Raushen merged 1 commit intoDevExpress:26_1from
Raushen:Dependabot-5-2

Conversation

@Raushen
Copy link
Copy Markdown
Contributor

@Raushen Raushen commented Mar 12, 2026

No description provided.

@Raushen Raushen self-assigned this Mar 12, 2026
@Raushen Raushen added the 26_1 label Mar 12, 2026
Copilot AI review requested due to automatic review settings March 12, 2026 15:37
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the packages/sbom dependency resolution to address minimatch versioning for the SBOM tool workspace by adding an override and regenerating the lockfile accordingly.

Changes:

  • Add a pnpm override to force minimatch versions <10.2.3 to resolve to ^10.2.4.
  • Update packages/sbom/pnpm-lock.yaml to use minimatch@10.2.4 and remove older resolved minimatch entries.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
packages/sbom/package.json Adds a pnpm override to ensure minimatch resolves to a non-affected version.
packages/sbom/pnpm-lock.yaml Lockfile update reflecting the new minimatch@10.2.4 resolution and updated snapshots.
Files not reviewed (1)
  • packages/sbom/pnpm-lock.yaml: Language not supported

@Raushen Raushen merged commit 4f84350 into DevExpress:26_1 Mar 12, 2026
106 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants