Skip to content

chore: Resolve minimatch dependabot alert#623

Merged
liamhughes merged 1 commit intomainfrom
lh/resolve-minimatch-dependabot-alert
Mar 12, 2026
Merged

chore: Resolve minimatch dependabot alert#623
liamhughes merged 1 commit intomainfrom
lh/resolve-minimatch-dependabot-alert

Conversation

@liamhughes
Copy link
Contributor

Background

https://github.com/OctopusDeploy/install-octopus-cli-action/security/dependabot/31

> npm ls minimatch
install-octopus-cli-action@4.0.0
├─┬ @eslint/eslintrc@3.3.5
│ └── minimatch@3.1.5
├─┬ @typescript-eslint/parser@8.57.0
│ └─┬ @typescript-eslint/typescript-estree@8.57.0
│   └── minimatch@10.2.4
├─┬ eslint-plugin-github@6.0.0
│ ├─┬ eslint-plugin-import@2.32.0
│ │ └── minimatch@3.1.5 deduped
│ ├─┬ eslint-plugin-jsx-a11y@6.10.2
│ │ └── minimatch@3.1.5 deduped
│ └─┬ typescript-eslint@8.49.0
│   └─┬ @typescript-eslint/typescript-estree@8.49.0
│     └── minimatch@9.0.5
├─┬ eslint@9.39.4
│ ├─┬ @eslint/config-array@0.21.2
│ │ └── minimatch@3.1.5 deduped
│ └── minimatch@3.1.5 deduped
├─┬ jest-circus@29.7.0
│ └─┬ jest-runtime@29.7.0
│   └─┬ glob@7.2.3
│     └── minimatch@3.1.5 deduped
└─┬ ts-jest@29.4.6
  └─┬ @jest/transform@29.7.0
    └─┬ babel-plugin-istanbul@6.1.1
      └─┬ test-exclude@6.0.0
        └── minimatch@3.1.5 deduped

Changes

  • Ran npm audit fix
> npm ls minimatch           
install-octopus-cli-action@4.0.0
├─┬ @eslint/eslintrc@3.3.5
│ └── minimatch@3.1.5
├─┬ @typescript-eslint/parser@8.57.0
│ └─┬ @typescript-eslint/typescript-estree@8.57.0
│   └── minimatch@10.2.4
├─┬ eslint-plugin-github@6.0.0
│ ├─┬ eslint-plugin-import@2.32.0
│ │ └── minimatch@3.1.5 deduped
│ ├─┬ eslint-plugin-jsx-a11y@6.10.2
│ │ └── minimatch@3.1.5 deduped
│ └─┬ typescript-eslint@8.49.0
│   └─┬ @typescript-eslint/typescript-estree@8.49.0
│     └── minimatch@9.0.9
├─┬ eslint@9.39.4
│ ├─┬ @eslint/config-array@0.21.2
│ │ └── minimatch@3.1.5 deduped
│ └── minimatch@3.1.5 deduped
├─┬ jest-circus@29.7.0
│ └─┬ jest-runtime@29.7.0
│   └─┬ glob@7.2.3
│     └── minimatch@3.1.5 deduped
└─┬ ts-jest@29.4.6
  └─┬ @jest/transform@29.7.0
    └─┬ babel-plugin-istanbul@6.1.1
      └─┬ test-exclude@6.0.0
        └── minimatch@3.1.5 deduped

@liamhughes liamhughes requested a review from a team as a code owner March 12, 2026 00:44
@liamhughes liamhughes enabled auto-merge (squash) March 12, 2026 00:46
@liamhughes liamhughes merged commit 921ed0f into main Mar 12, 2026
14 checks passed
@liamhughes liamhughes deleted the lh/resolve-minimatch-dependabot-alert branch March 12, 2026 01:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants