From 75ac84abc9403e7944d7584e71f321ab2aba5e84 Mon Sep 17 00:00:00 2001 From: SatoshiQaziMuhammed Date: Wed, 11 Nov 2026 14:50:09 +0400 Subject: [PATCH] build(deps): resolve typescript-estree's minimatch to 11.0.1 (#58) minimatch 9.0.9 (GHSA-g3hv-75wg-m249, fixed in 11.0.1) is a dev dependency of @typescript-eslint/typescript-estree and of nothing else. It calls only minimatch(filePath, pattern, { dot: true }) for allowDefaultProject; minimatch 11 keeps that function and drops makeRe, the regexp property, AST and debug. An override keeps the release on the next install. 11.0.1 and @isaacs/nonrecursive-glob-match 1.0.1 are the newest releases at least 14 days old. --- package-lock.json | 54 +++++++++++++++++++++++++++++++---------------- package.json | 5 ++++- 2 files changed, 40 insertions(+), 19 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5c46ddf..11a919d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3894,16 +3894,6 @@ "integrity": "sha512-EAcmnPkxpntVL+DS7bO1zhcZNvCkxqtkd0ZY53h06GNQ3DEkkGZ/gKgmDv6DdZQGj9BgfSPKtJJ7Dp1GPP8f7w==", "license": "MIT" }, - "node_modules/brace-expansion": { - "version": "2.1.7", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.7.tgz", - "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==", - "dev": true, - "license": "MIT", - "dependencies": { - "balanced-match": "^1.0.0" - } - }, "node_modules/brorand": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/brorand/-/brorand-1.1.0.tgz", @@ -7561,19 +7551,47 @@ "license": "MIT" }, "node_modules/minimatch": { - "version": "9.0.9", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", - "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", + "version": "11.0.1", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-11.0.1.tgz", + "integrity": "sha512-t+Vn6DX4wPCxS23y03C0uhF7S1jpi1GfqPrnlEipCJaA2ykiNbMkVlDutZtmvLfRcUN6R8AYVlzTsQrT4RZoLQ==", "dev": true, - "license": "ISC", + "license": "BlueOak-1.0.0", "dependencies": { - "brace-expansion": "^2.0.2" + "@isaacs/nonrecursive-glob-match": "^1.0.1", + "brace-expansion": "^5.0.12" }, "engines": { - "node": ">=16 || 14 >=14.17" + "node": "18 || 20 || >=22" + } + }, + "node_modules/minimatch/node_modules/@isaacs/nonrecursive-glob-match": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/@isaacs/nonrecursive-glob-match/-/nonrecursive-glob-match-1.0.1.tgz", + "integrity": "sha512-rNKPuTXBacPpn5+CP+S3/UI6uq/0jHZjPpaBLaRE3blpgX+E+ZUIrGfViPvUjUnQG6W1+3OTFUiVRCjTffs2+Q==", + "dev": true, + "license": "BlueOak-1.0.0" + }, + "node_modules/minimatch/node_modules/brace-expansion": { + "version": "5.0.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz", + "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "balanced-match": "^4.0.2" }, - "funding": { - "url": "https://github.com/sponsors/isaacs" + "engines": { + "node": "20 || >=22" + } + }, + "node_modules/minimatch/node_modules/brace-expansion/node_modules/balanced-match": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", + "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", + "dev": true, + "license": "MIT", + "engines": { + "node": "18 || 20 || >=22" } }, "node_modules/mock-socket": { diff --git a/package.json b/package.json index e09bf50..6a0fe5e 100644 --- a/package.json +++ b/package.json @@ -90,6 +90,9 @@ "axios": "^1.20.0", "ws": "^8.21.0", "postcss-selector-parser": "^7.1.6", - "braces": "npm:@pezkuwi/braces@^3.0.4" + "braces": "npm:@pezkuwi/braces@^3.0.4", + "@typescript-eslint/typescript-estree": { + "minimatch": "11.0.1" + } } }