Skip to content

chore(deps-dev): bump glob from 11.0.3 to 13.0.6#110

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/glob-13.0.6
Open

chore(deps-dev): bump glob from 11.0.3 to 13.0.6#110
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/glob-13.0.6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps glob from 11.0.3 to 13.0.6.

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for glob since your current version.


@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Mar 26, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
claude-code-plugins Ready Ready Preview, Comment Apr 10, 2026 2:40am

Request Review

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.
Architecture diagram
sequenceDiagram
    participant CI as Developer / CI Environment
    participant Node as Node.js Runtime
    participant Vitest as Vitest (via vitest-config)
    participant Glob as glob @13.0.6
    participant FS as File System

    Note over CI,FS: Runtime Flow: Test Execution & File Discovery

    CI->>Node: Start test execution
    Note over Node: NEW: Minimum Node.js version 18+ required
    
    Node->>Vitest: Load configuration
    Vitest->>Glob: globSync(patterns) / glob()
    
    Glob->>FS: Read directory/file metadata
    FS-->>Glob: File entries
    
    alt Match is Current Working Directory
        Glob-->>Vitest: CHANGED: returns '.' (previously returned '')
    else Standard Pattern Match
        Glob-->>Vitest: Return matching file paths
    end

    Vitest-->>CI: Execute tests on discovered files

    opt Legacy CLI Usage
        CI->>Glob: Execute "glob" command
        Note over CI,Glob: CHANGED: CLI entry point removed
        Glob-->>CI: ERROR: Command not found
        Note right of Glob: NEW: Must install 'glob-bin' for CLI access
    end
Loading

Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.3 to 13.0.6.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.3...v13.0.6)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants