Skip to content

fix(deps): update vulnerable npm packages in package-lock.json - #2

Open
markscott-ms wants to merge 2 commits into
mainfrom
claude/pr-3603-glob-minimatch-57x3vf
Open

markscott-ms wants to merge 2 commits into
mainfrom
claude/pr-3603-glob-minimatch-57x3vf

Conversation

@markscott-ms

Copy link
Copy Markdown
Owner

No description provided.

@github-actions github-actions Bot added the config label Nov 2, 2026
Override glob to ^14.0.2 and minimatch@^10 to ^11.0.1 to fix
GHSA-3g3m-2fjr-6pw4 and GHSA-g3hv-75wg-m249. Suppress the copies that
cannot move, with matching VEX statements: minimatch 3.1.5 (no
optimizationLevel code) and the glob and minimatch copies bundled in npm
for the CLI release job.
@markscott-ms
markscott-ms force-pushed the claude/pr-3603-glob-minimatch-57x3vf branch from 192195d to 305ccfe Compare November 2, 2026 11:18

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant