Skip to content

Commit 47ee2bb

Browse files
X-GuardianSimon Heather
andauthored
chore(deps): bump glob to 13.0.6 (#307)
### Description Bumps the direct `glob` dependency from `10.5.0` to `13.0.6` in the three packages that declare it: | Package | Before | After | | -------------------------- | -------- | -------- | | `@cdktn/hcl2cdk` | `10.5.0` | `13.0.6` | | `@cdktn/provider-generator`| `10.5.0` | `13.0.6` | | `cdktn-cli` | `10.5.0` | `13.0.6` | **Why:** `glob@10.5.0` is deprecated on npm. Installing it prints: > Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. The whole v9–v12 range carries this same deprecation notice; only v13 (the current major) is supported. Moving to `13.0.6` clears the warning and puts us on the maintained line. **No code changes required.** Every call site uses the synchronous, string-returning form — `glob.sync(pattern, { cwd })` → `string[]` — which is unchanged from v10 through v13. **Node compatibility:** glob 13 requires `node: 18 || 20 || >=22`. The repo targets Node 22 (`.nvmrc` → `22.22.3`), so this is satisfied. ### Checklist - [ ] I have updated the PR title to match [CDKTN's style guide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1) - [ ] I have run the linter on my code locally - [ ] I have performed a self-review of my code - [ ] I have commented my code, particularly in hard-to-understand areas - [ ] I have made corresponding changes to the [documentation](https://github.com/open-constructs/cdk-terrain-docs/tree/main/content) if applicable - [ ] My changes generate no new warnings - [ ] I have added tests that prove my fix is effective or that my feature works if applicable - [ ] New and existing unit tests pass locally with my changes Co-authored-by: Simon Heather <simon.heather@yulife.com>
1 parent a960c5c commit 47ee2bb

4 files changed

Lines changed: 29 additions & 35 deletions

File tree

packages/@cdktn/hcl2cdk/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@
4545
"cdktn": "workspace:*",
4646
"codemaker": "1.128.0",
4747
"deep-equal": "2.2.3",
48-
"glob": "10.5.0",
48+
"glob": "13.0.6",
4949
"graphology": "0.26.0",
5050
"graphology-types": "0.24.7",
5151
"jsii-rosetta": "~5.9.0",

packages/@cdktn/provider-generator/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@
4343
"codemaker": "1.128.0",
4444
"constructs": "10.6.0",
4545
"fs-extra": "8.1.0",
46-
"glob": "10.5.0",
46+
"glob": "13.0.6",
4747
"jsii": "~5.9.0",
4848
"jsii-pacmak": "1.128.0"
4949
},

packages/cdktn-cli/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@
8181
"execa": "5.1.1",
8282
"extract-zip": "2.0.1",
8383
"fs-extra": "8.1.0",
84-
"glob": "10.5.0",
84+
"glob": "13.0.6",
8585
"nock": "13.5.6",
8686
"open": "7.4.2",
8787
"pidtree": "0.6.0",

pnpm-lock.yaml

Lines changed: 26 additions & 32 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)