Title: Bump glob from 13.0.6 to 14.0.3 in /pr-checks by dependabot[bot] · Pull Request #4287 · github/codeql-action · GitHub
Open Graph Title: Bump glob from 13.0.6 to 14.0.3 in /pr-checks by dependabot[bot] · Pull Request #4287 · github/codeql-action
X Title: Bump glob from 13.0.6 to 14.0.3 in /pr-checks by dependabot[bot] · Pull Request #4287 · github/codeql-action
Description: Bumps glob from 13.0.6 to 14.0.3.
Changelog
Sourced from glob's changelog.
changeglob
14
Use minimatch 11. Each portion of a pattern with magic is now
matched with a Matcher from @isaacs/nonrecursive-glob-match
in place of a RegExp, so patterns can no longer cause ReDoS.
Matching follows the minimatch 11 changes, which are closer to
Bash in some edge cases.
Pattern#pattern() returns a Matcher for a portion with
magic. The MMPattern type is now minimatch's
ParseReturnFiltered, and the new MMMatcher type is the
Matcher part of it.
Rename Pattern#isRegExp() to isMatcher(), and
Processor#testRegExp() to testMatcher().
Remove the debug option, which minimatch no longer has.
Add the normalize option, to normalize unicode in the pattern
and in the file names that it is matched against.
GlobWalker#walk() and walkSync() return arrays in place of
sets, and MatchRecord#entries() is removed.
ignore patterns that start with / now start at the same
place as other patterns that start with /: the root option
if set, or else the root of the cwd, such as C:\ on
Windows.
ignore patterns follow the windowsPathsNoEscape option,
the same as other patterns.
On Windows, patterns that start with a long UNC root like
//?/UNC/host/share/ walk that share, the same as
//host/share/.
Faster ignore patterns (about 1.2 to 3 times faster), and
less work for each entry in a walk (about 10% faster sync, and
15% to 30% faster async, for large trees).
Allow const string[] or readonly string[] as ignore
option or pattern argument.
When the signal aborts an async walk, the walk stops. Before,
it rejected, but continued to read directories.
13
Move the CLI program out to a separate package, glob-bin.
Install that if you'd like to continue using glob from the
command line.
12
Remove the unsafe --shell option. The --shell option is now
ONLY supported on known shells where the behavior can be
implemented safely.
11.1
... (truncated)
Commits
fc93fd5 14.0.3
cfdf76a update deps
54bbe8b fix windows test
18a539f ci: update node versions
93957bf 14.0.2
4682e8c fix: do not continue walking after signal abort
668a669 14.0.1
6ff2314 allow const/readonly string[] for ignore, patterns
bbe1e5d 14.0.0
d9586ad use actual published deps, not symlinks
Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show
Open Graph Description: Bumps glob from 13.0.6 to 14.0.3. Changelog Sourced from glob's changelog. changeglob 14 Use minimatch 11. Each portion of a pattern with magic is now matched with a Matcher from @isaacs/non...
X Description: Bumps glob from 13.0.6 to 14.0.3. Changelog Sourced from glob's changelog. changeglob 14 Use minimatch 11. Each portion of a pattern with magic is now matched with a Matcher from @isaacs...
Opengraph URL: https://github.com/github/codeql-action/pull/4287
X: @github
Domain: github.com
| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:1e268a84-691b-6395-69f7-93a7dff60c4c |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 9A2E:E530F:C6CAC3:108549C:6AED3D98 |
| html-safe-nonce | 6af8b88d1e3ee75f8fb4d04793a88ee1e943da1ad80d59b515be851d566153ec |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5QTJFOkU1MzBGOkM2Q0FDMzoxMDg1NDlDOjZBRUQzRDk4IiwidmlzaXRvcl9pZCI6Ijg3NDU0NzcwNDkxNjY5Mzc0OTYiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 0a03d24fdd2fac1d469cc568d6db1a5f2387c85ca3bc4696ef6f0ea38170fb22 |
| hovercard-subject-tag | pull_request:5135624403 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/4287/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps glob from 13.0.6 to 14.0.3. Changelog Sourced from glob's changelog. changeglob 14 Use minimatch 11. Each portion of a pattern with magic is now matched with a Matcher from @isaacs/non... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 26c92a9388ddfad3fa88d132b5d5f0b4747030233dcc4e5efb05f1cbae152184 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/github/codeql-action git https://github.com/github/codeql-action.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 259445878 |
| octolytics-dimension-repository_nwo | github/codeql-action |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 259445878 |
| octolytics-dimension-repository_network_root_nwo | github/codeql-action |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | c629ad99c254d306375fc8354d04321c2c362236 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width