Skip to content

build(deps): bump glob and npm-registry-fetch - #27

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-82d9e23504
Open

build(deps): bump glob and npm-registry-fetch#27
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-82d9e23504

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown

Bumps glob to 13.0.6 and updates ancestor dependency npm-registry-fetch. These dependencies need to be updated together.

Updates glob from 10.4.5 to 13.0.6

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for glob since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates npm-registry-fetch from 18.0.2 to 20.0.1

Release notes

Sourced from npm-registry-fetch's releases.

v20.0.1

20.0.1 (2026-06-02)

Bug Fixes

v20.0.0

20.0.0 (2026-05-22)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • template-oss-apply

Features

Dependencies

Chores

v19.1.1

19.1.1 (2025-11-13)

Dependencies

Chores

v19.1.0

19.1.0 (2025-10-28)

Features

v19.0.0

19.0.0 (2025-07-24)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Dependencies

... (truncated)

Changelog

Sourced from npm-registry-fetch's changelog.

20.0.1 (2026-06-02)

Bug Fixes

20.0.0 (2026-05-22)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • template-oss-apply

Features

Dependencies

Chores

19.1.1 (2025-11-13)

Dependencies

Chores

19.1.0 (2025-10-28)

Features

19.0.0 (2025-07-24)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Dependencies

Chores

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for npm-registry-fetch since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 25, 2026
Bumps [glob](https://github.com/isaacs/node-glob) to 13.0.6 and updates ancestor dependency [npm-registry-fetch](https://github.com/npm/npm-registry-fetch). These dependencies need to be updated together.


Updates `glob` from 10.4.5 to 13.0.6
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.4.5...v13.0.6)

Updates `npm-registry-fetch` from 18.0.2 to 20.0.1
- [Release notes](https://github.com/npm/npm-registry-fetch/releases)
- [Changelog](https://github.com/npm/npm-registry-fetch/blob/main/CHANGELOG.md)
- [Commits](npm/npm-registry-fetch@v18.0.2...v20.0.1)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: indirect
- dependency-name: npm-registry-fetch
  dependency-version: 20.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-82d9e23504 branch from c257659 to 4f9f46f Compare August 25, 2026 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants