Skip to content

Commit 7b6325a

Browse files
authored
deps(minimatch): Upgrade patch version to use new brace-expansion peer-dep (#20198)
`brace-expansion` package causes zero-step sequence causes process hang and memory exhaustion (range: >=4.0.0 <5.0.5). Updating the patch version of minimatch uses the newer version. Related GHSA: GHSA-f886-m6hf-6m8v Related issue (comment): #19447 (comment)
1 parent 124dfeb commit 7b6325a

2 files changed

Lines changed: 7 additions & 14 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -156,7 +156,7 @@
156156
"we need to resolve them to the CommonJS versions."
157157
],
158158
"resolutions": {
159-
"**/nx/minimatch": "10.2.4",
159+
"**/nx/minimatch": "10.2.5",
160160
"**/ng-packagr/postcss-url/minimatch": "3.1.5",
161161
"**/@angular-devkit/build-angular/minimatch": "5.1.9",
162162
"gauge/strip-ansi": "6.0.1",

yarn.lock

Lines changed: 6 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -12419,7 +12419,7 @@ brace-expansion@^2.0.1, brace-expansion@^2.0.2:
1241912419
dependencies:
1242012420
balanced-match "^1.0.0"
1242112421

12422-
brace-expansion@^5.0.2, brace-expansion@^5.0.5:
12422+
brace-expansion@^5.0.5:
1242312423
version "5.0.5"
1242412424
resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.5.tgz#dcc3a37116b79f3e1b46db994ced5d570e930fdb"
1242512425
integrity sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==
@@ -22162,12 +22162,12 @@ minimalistic-assert@^1.0.0:
2216222162
resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz#2e194de044626d4a10e7f7fbc00ce73e83e4d5c7"
2216322163
integrity sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==
2216422164

22165-
minimatch@10.2.4:
22166-
version "10.2.4"
22167-
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-10.2.4.tgz#465b3accbd0218b8281f5301e27cedc697f96fde"
22168-
integrity sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==
22165+
minimatch@10.2.4, minimatch@10.2.5, minimatch@^10.2.2, minimatch@^10.2.4:
22166+
version "10.2.5"
22167+
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-10.2.5.tgz#bd48687a0be38ed2961399105600f832095861d1"
22168+
integrity sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==
2216922169
dependencies:
22170-
brace-expansion "^5.0.2"
22170+
brace-expansion "^5.0.5"
2217122171

2217222172
"minimatch@2 || 3", minimatch@3.1.5, minimatch@^3.0.0, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2, minimatch@~3.0.4:
2217322173
version "3.1.5"
@@ -22183,13 +22183,6 @@ minimatch@5.1.0, minimatch@5.1.9, minimatch@^5.0.1, minimatch@^5.1.0:
2218322183
dependencies:
2218422184
brace-expansion "^2.0.1"
2218522185

22186-
minimatch@^10.2.2, minimatch@^10.2.4:
22187-
version "10.2.5"
22188-
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-10.2.5.tgz#bd48687a0be38ed2961399105600f832095861d1"
22189-
integrity sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==
22190-
dependencies:
22191-
brace-expansion "^5.0.5"
22192-
2219322186
minimatch@^7.4.1, minimatch@~7.4.9:
2219422187
version "7.4.9"
2219522188
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-7.4.9.tgz#ef35412b1b36261b78ef1b2f0db29b759bbcaf5d"

0 commit comments

Comments
 (0)