Skip to content

chore(deps): move rimraf to glob 14 and readdir-glob to minimatch 11 - #2720

Merged
josephfusco merged 1 commit into
canaryfrom
fix/deps-glob-minimatch-deepmerge
Nov 3, 2026
Merged

josephfusco merged 1 commit into
canaryfrom
fix/deps-glob-minimatch-deepmerge

Conversation

@josephfusco

Copy link
Copy Markdown
Member

Root overrides only change this repo's lockfile, so people installing `@faustwp/cli` still get minimatch 10 through `archiver` → `readdir-glob` until readdir-glob updates. The nested `readdir-glob/node_modules/{minimatch,brace-expansion,balanced-match}` lock entries were added by hand because npm won't place them for an override on an already-hoisted package; their integrity hashes match the registry.

Use of AI Tools

AI assistance: Yes
Tool(s): Claude Code
Model(s): Claude Opus 5.5
Used for: Assisting with tracing the vulnerable glob/minimatch versions and updating the overrides and lockfile.

@josephfusco josephfusco added [Area] Infrastructure Issues for the repository infrastructure [Type] Task Maintenance, upkeep, and other non-functional work labels Nov 3, 2026
@josephfusco
josephfusco marked this pull request as ready for review November 3, 2026 15:53
@josephfusco
josephfusco requested review from a team and colinmurphy as code owners November 3, 2026 15:53
@josephfusco
josephfusco merged commit 8fe41ab into canary Nov 3, 2026
12 checks passed
@josephfusco
josephfusco deleted the fix/deps-glob-minimatch-deepmerge branch November 3, 2026 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

[Area] Infrastructure Issues for the repository infrastructure [Type] Task Maintenance, upkeep, and other non-functional work

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant