Skip to content

fix(deps): upgrading minimatch#3381

Merged
RobinTail merged 1 commit into
masterfrom
up-minimatch-2026-05-10
May 10, 2026
Merged

fix(deps): upgrading minimatch#3381
RobinTail merged 1 commit into
masterfrom
up-minimatch-2026-05-10

Conversation

@RobinTail
Copy link
Copy Markdown
Owner

No description provided.

@RobinTail RobinTail added the dependencies Pull requests that update a dependency file label May 10, 2026
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 10, 2026

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a0a148d5-35ba-47e1-8523-6decf5a2265a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch up-minimatch-2026-05-10

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

  • Generate code and open pull requests
  • Plan features and break down work
  • Investigate incidents and troubleshoot customer tickets together
  • Automate recurring tasks and respond to alerts with triggers
  • Summarize progress and report instantly

Built for teams:

  • Shared memory across your entire org—no repeating context
  • Per-thread sandboxes to safely plan and execute work
  • Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown
Contributor

@pullfrog pullfrog Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No new issues found.

TL;DR — Lockfile-only upgrade that consolidates transitive minimatch resolutions onto 10.2.5 and drops two now-unused @isaacs/* packages.

Key changes

  • Consolidate minimatch to 10.2.5 — both 10.1.2 and 10.2.4 resolutions collapse onto a single 10.2.5 entry across @eslint/config-array, @typescript-eslint/typescript-estree, and the ESLint snapshots.
  • Drop @isaacs/balanced-match and @isaacs/brace-expansionminimatch@10.2.5 depends on the standard brace-expansion@5.0.5 already present in the tree, removing the @isaacs/* fork variants.

Summary | 1 file | 1 commit | base: masterup-minimatch-2026-05-10

Before: lockfile carried three minimatch resolutions (10.1.2, 10.2.4, plus the consolidated form) and the @isaacs/* brace-expansion fork.
After: single minimatch@10.2.5 entry across all consumers, with brace-expansion@5.0.5 as its sole dependency.

Patch-level bump of a transitive dep; engines remain 18 || 20 || >=22, which is compatible with this repo's Node matrix. No package.json change.

pnpm-lock.yaml

Pullfrog  | View workflow run | Using Claude Opus𝕏

@coveralls-official
Copy link
Copy Markdown

Coverage Status

coverage: 100.0%. remained the same — up-minimatch-2026-05-10 into master

@RobinTail RobinTail merged commit b9516d6 into master May 10, 2026
14 checks passed
@RobinTail RobinTail deleted the up-minimatch-2026-05-10 branch May 10, 2026 17:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant