deps: bump glob from 11.1.0 to 13.0.6 in /scripts#3
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Bumps [glob](https://github.com/isaacs/node-glob) from 11.1.0 to 13.0.6. - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.1.0...v13.0.6) --- updated-dependencies: - dependency-name: glob dependency-version: 13.0.6 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
b93168d to
c9d7da8
Compare
|
Looks like glob is up-to-date now, so this is no longer needed. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
) Bumps three lockfiles to drop the vulnerable transitive versions: samples/angular/login-pkce/yarn.lock samples/angular/token-refresh/yarn.lock ip-address 10.1.0 → 10.2.0 (closes alerts #2, #3 — XSS in Address6 HTML-emitting methods). The vulnerable 10.1.0 was pinned exactly by express-rate-limit@8.5.0 deep in the tree via @modelcontextprotocol/sdk. Bumping express-rate-limit recursively to 8.5.2 — which now uses ^10.2.0 — drops the bad pin transitively. samples/react-native/login-pkce/yarn.lock fast-xml-builder 1.1.5 → 1.2.0 (closes alerts #9, #10 — Comment Value regex bypass + attribute value quote bypass). Bumped recursively via yarn up -R. All changes are lockfile-only (no package.json edits). All bumped packages are build/dev tooling, not runtime — the apps' shipped code is unchanged. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Bumps glob from 11.1.0 to 13.0.6.
Changelog
Sourced from glob's changelog.
... (truncated)
Commits
e80cb3813.0.69cdbbffrevert tsgo, not ready for test coverage correctness yet89c99bause tsgo compilerb7275d5update deps, expand engines to include node 18942e360update workflows, pull taprc out of package.json4a0d53cupdate tap for mockImport bugfixef94ad2update tap180c2d4update docs37993c8remove stray console.error in test03ae4c213.0.5Maintainer changes
This version was pushed to npm by isaacs, a new releaser for glob since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.