From fa8b8ae03483a4c8ade61f3248ed389a140857f9 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 4 Nov 2026 00:52:34 +0000 Subject: [PATCH] chore(deps): update dependency minimatch@>=10.0.0 <10.2.3 to v11 [security] --- pnpm-lock.yaml | 28 +++++++++++++++++++++++++--- pnpm-workspace.yaml | 4 +++- 2 files changed, 28 insertions(+), 4 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index d08949904..33a72266a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -164,7 +164,7 @@ settings: overrides: tar@>=7.0.0 <7.5.8: 7.5.22 - minimatch@>=10.0.0 <10.2.3: 10.2.6 + minimatch@>=10.0.0 <10.2.3: 11.0.1 effect@>=3.0.0 <3.20.0: 3.22.4 defu@<6.1.5: 6.1.7 brace-expansion@>=1.0.0 <1.1.13: 1.1.18 @@ -691,6 +691,9 @@ packages: resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==} engines: {node: '>=18.0.0'} + '@isaacs/nonrecursive-glob-match@1.0.3': + resolution: {integrity: sha512-SI7kyKHq4XXDRozw+r9GlRZkia1ZkFrpLW98r2IC2Bpr8YkFGE3fvjzmxCG0x78A++69HmDNrDvSMYBZmHGpKA==} + '@jridgewell/gen-mapping@0.3.13': resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==} @@ -1731,6 +1734,10 @@ packages: brace-expansion@1.1.18: resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==} + brace-expansion@5.0.12: + resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==} + engines: {node: 20 || >=22} + brace-expansion@5.0.8: resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==} engines: {node: 20 || >=22} @@ -2445,6 +2452,10 @@ packages: resolution: {integrity: sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==} engines: {node: 18 || 20 || >=22} + minimatch@11.0.1: + resolution: {integrity: sha512-t+Vn6DX4wPCxS23y03C0uhF7S1jpi1GfqPrnlEipCJaA2ykiNbMkVlDutZtmvLfRcUN6R8AYVlzTsQrT4RZoLQ==} + engines: {node: 18 || 20 || >=22} + minimatch@3.1.5: resolution: {integrity: sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==} @@ -3451,6 +3462,8 @@ snapshots: dependencies: minipass: 7.1.3 + '@isaacs/nonrecursive-glob-match@1.0.3': {} + '@jridgewell/gen-mapping@0.3.13': dependencies: '@jridgewell/sourcemap-codec': 1.5.5 @@ -4105,7 +4118,7 @@ snapshots: '@typescript-eslint/types': 8.72.1 '@typescript-eslint/visitor-keys': 8.72.1 debug: 4.4.3(supports-color@7.2.0) - minimatch: 10.2.6 + minimatch: 11.0.1 semver: 7.8.5 tinyglobby: 0.2.17 ts-api-utils: 2.5.0(typescript@6.0.3) @@ -4332,6 +4345,10 @@ snapshots: balanced-match: 1.0.2 concat-map: 0.0.1 + brace-expansion@5.0.12: + dependencies: + balanced-match: 4.0.4 + brace-expansion@5.0.8: dependencies: balanced-match: 4.0.4 @@ -4712,7 +4729,7 @@ snapshots: glob@13.0.6: dependencies: - minimatch: 10.2.6 + minimatch: 11.0.1 minipass: 7.1.3 path-scurry: 2.0.2 @@ -5042,6 +5059,11 @@ snapshots: dependencies: brace-expansion: 5.0.8 + minimatch@11.0.1: + dependencies: + '@isaacs/nonrecursive-glob-match': 1.0.3 + brace-expansion: 5.0.12 + minimatch@3.1.5: dependencies: brace-expansion: 1.1.18 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index f66a124fe..2f093e851 100755 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -31,6 +31,8 @@ minimumReleaseAgeExclude: # Vercel: To use in a CI/CD environment - vercel - '@vercel/*' + # Renovate security update: minimatch@11.0.1 + - minimatch@11.0.1 # Prevent transitive dependencies from Git/Tarball sources (enhanced security) blockExoticSubdeps: true @@ -44,7 +46,7 @@ audit: overrides: # high 'tar@>=7.0.0 <7.5.8': '7.5.22' - 'minimatch@>=10.0.0 <10.2.3': '10.2.6' + 'minimatch@>=10.0.0 <10.2.3': '11.0.1' 'effect@>=3.0.0 <3.20.0': '3.22.4' 'defu@<6.1.5': '6.1.7' # moderate