Skip to content

chore(deps): minimatch vulnerability #185

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
KeylaMunnoz wants to merge 3 commits into
base: main
Choose a base branch
from
Open

chore(deps): minimatch vulnerability #185

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
cc9bd2e
chore(deps): bump minimatch within compatible ranges via yarn up -R
KeylaMunnoz Oct 14, 2026
f619036
chore(deps): pin eslint-plugin-sonarjs 3.0.7 and force minimatch ^10.2.3
KeylaMunnoz Oct 14, 2026
fee2b82
Merge branch 'main' into chore/minimatch-vulnerability
KeylaMunnoz Oct 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@
"examples/*"
],
"resolutions": {
"eslint-plugin-sonarjs/minimatch": "^10.2.3",
"socks": "^2.8.3",
"tar": "7.5.22"
},
Expand Down Expand Up @@ -45,7 +46,7 @@
"eslint-plugin-jsdoc": "^61.2.1",
"eslint-plugin-perfectionist": "^4.15.1",
"eslint-plugin-react": "^7.37.5",
"eslint-plugin-sonarjs": "^3.0.5",
"eslint-plugin-sonarjs": "3.0.7",
"globals": "^16.5.0",
"react-native-safe-area-context": "^5.5.2",
"rimraf": "^6.1.2",
Expand Down
86 changes: 18 additions & 68 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1372,14 +1372,7 @@ __metadata:
languageName: node
linkType: hard

"@eslint-community/regexpp@npm:4.12.1":
version: 4.12.1
resolution: "@eslint-community/regexpp@npm:4.12.1"
checksum: 10/c08f1dd7dd18fbb60bdd0d85820656d1374dd898af9be7f82cb00451313402a22d5e30569c150315b4385907cdbca78c22389b2a72ab78883b3173be317620cc
languageName: node
linkType: hard

"@eslint-community/regexpp@npm:^4.10.0, @eslint-community/regexpp@npm:^4.12.1, @eslint-community/regexpp@npm:^4.12.2, @eslint-community/regexpp@npm:^4.8.0":
"@eslint-community/regexpp@npm:4.12.2, @eslint-community/regexpp@npm:^4.10.0, @eslint-community/regexpp@npm:^4.12.1, @eslint-community/regexpp@npm:^4.12.2, @eslint-community/regexpp@npm:^4.8.0":
version: 4.12.2
resolution: "@eslint-community/regexpp@npm:4.12.2"
checksum: 10/049b280fddf71dd325514e0a520024969431dc3a8b02fa77476e6820e9122f28ab4c9168c11821f91a27982d2453bcd7a66193356ea84e84fb7c8d793be1ba0c
Expand Down Expand Up @@ -1543,22 +1536,6 @@ __metadata:
languageName: node
linkType: hard

"@isaacs/balanced-match@npm:^4.0.1":
version: 4.0.1
resolution: "@isaacs/balanced-match@npm:4.0.1"
checksum: 10/102fbc6d2c0d5edf8f6dbf2b3feb21695a21bc850f11bc47c4f06aa83bd8884fde3fe9d6d797d619901d96865fdcb4569ac2a54c937992c48885c5e3d9967fe8
languageName: node
linkType: hard

"@isaacs/brace-expansion@npm:^5.0.0":
version: 5.0.0
resolution: "@isaacs/brace-expansion@npm:5.0.0"
dependencies:
"@isaacs/balanced-match": "npm:^4.0.1"
checksum: 10/cf3b7f206aff12128214a1df764ac8cdbc517c110db85249b945282407e3dfc5c6e66286383a7c9391a059fc8e6e6a8ca82262fc9d2590bd615376141fbebd2d
languageName: node
linkType: hard

"@isaacs/cliui@npm:^8.0.2":
version: 8.0.2
resolution: "@isaacs/cliui@npm:8.0.2"
Expand Down Expand Up @@ -4608,7 +4585,7 @@ __metadata:
eslint-plugin-jsdoc: "npm:^61.2.1"
eslint-plugin-perfectionist: "npm:^4.15.1"
eslint-plugin-react: "npm:^7.37.5"
eslint-plugin-sonarjs: "npm:^3.0.5"
eslint-plugin-sonarjs: "npm:3.0.7"
globals: "npm:^16.5.0"
react-native-safe-area-context: "npm:^5.5.2"
rimraf: "npm:^6.1.2"
Expand Down Expand Up @@ -7061,23 +7038,23 @@ __metadata:
languageName: node
linkType: hard

"eslint-plugin-sonarjs@npm:^3.0.5":
version: 3.0.5
resolution: "eslint-plugin-sonarjs@npm:3.0.5"
"eslint-plugin-sonarjs@npm:3.0.7":
version: 3.0.7
resolution: "eslint-plugin-sonarjs@npm:3.0.7"
dependencies:
"@eslint-community/regexpp": "npm:4.12.1"
"@eslint-community/regexpp": "npm:4.12.2"
builtin-modules: "npm:3.3.0"
bytes: "npm:3.1.2"
functional-red-black-tree: "npm:1.0.1"
jsx-ast-utils-x: "npm:0.1.0"
lodash.merge: "npm:4.6.2"
minimatch: "npm:9.0.5"
minimatch: "npm:10.1.2"
scslre: "npm:0.3.0"
semver: "npm:7.7.2"
semver: "npm:7.7.4"
typescript: "npm:>=5"
peerDependencies:
eslint: ^8.0.0 || ^9.0.0
checksum: 10/82351630ab8c4fa1331edce96bd3bbe3afbc4a40ae92aa4474d45ef68c6a99990c4a6634e79d8d81d938edad7152b099ff18fe71f12e06362007c5f80856057d
checksum: 10/1e457c16fe200f36361595f96ef46681b1c7797c81471093edccb944a29d96434650d3800de9962707579a9f357586d090e56694e72060024a2bd80d56b537a9
languageName: node
linkType: hard

Expand Down Expand Up @@ -11111,25 +11088,7 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:9.0.5, minimatch@npm:^9.0.4":
version: 9.0.5
resolution: "minimatch@npm:9.0.5"
dependencies:
brace-expansion: "npm:^2.0.1"
checksum: 10/dd6a8927b063aca6d910b119e1f2df6d2ce7d36eab91de83167dd136bb85e1ebff97b0d3de1cb08bd1f7e018ca170b4962479fefab5b2a69e2ae12cb2edc8348
languageName: node
linkType: hard

"minimatch@npm:^10.1.1":
version: 10.1.1
resolution: "minimatch@npm:10.1.1"
dependencies:
"@isaacs/brace-expansion": "npm:^5.0.0"
checksum: 10/110f38921ea527022e90f7a5f43721838ac740d0a0c26881c03b57c261354fb9a0430e40b2c56dfcea2ef3c773768f27210d1106f1f2be19cde3eea93f26f45e
languageName: node
linkType: hard

"minimatch@npm:^10.2.2":
"minimatch@npm:^10.1.1, minimatch@npm:^10.2.2, minimatch@npm:^10.2.3":
version: 10.2.6
resolution: "minimatch@npm:10.2.6"
dependencies:
Expand All @@ -11139,11 +11098,11 @@ __metadata:
linkType: hard

"minimatch@npm:^3.0.4, minimatch@npm:^3.1.1, minimatch@npm:^3.1.2":
version: 3.1.2
resolution: "minimatch@npm:3.1.2"
version: 3.1.5
resolution: "minimatch@npm:3.1.5"
dependencies:
brace-expansion: "npm:^1.1.7"
checksum: 10/e0b25b04cd4ec6732830344e5739b13f8690f8a012d73445a4a19fbc623f5dd481ef7a5827fde25954cd6026fede7574cc54dc4643c99d6c6b653d6203f94634
checksum: 10/b11a7ee5773cd34c1a0c8436cdbe910901018fb4b6cb47aa508a18d567f6efd2148507959e35fba798389b161b8604a2d704ccef751ea36bd4582f9852b7d63f
languageName: node
linkType: hard

Expand All @@ -11156,16 +11115,7 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^9.0.0, minimatch@npm:^9.0.1, minimatch@npm:^9.0.3":
version: 9.0.3
resolution: "minimatch@npm:9.0.3"
dependencies:
brace-expansion: "npm:^2.0.1"
checksum: 10/c81b47d28153e77521877649f4bab48348d10938df9e8147a58111fe00ef89559a2938de9f6632910c4f7bf7bb5cd81191a546167e58d357f0cfb1e18cecc1c5
languageName: node
linkType: hard

"minimatch@npm:^9.0.5, minimatch@npm:^9.0.9":
"minimatch@npm:^9.0.0, minimatch@npm:^9.0.1, minimatch@npm:^9.0.3, minimatch@npm:^9.0.4, minimatch@npm:^9.0.5, minimatch@npm:^9.0.9":
version: 9.0.9
resolution: "minimatch@npm:9.0.9"
dependencies:
Expand Down Expand Up @@ -13833,12 +13783,12 @@ __metadata:
languageName: node
linkType: hard

"semver@npm:7.7.2":
version: 7.7.2
resolution: "semver@npm:7.7.2"
"semver@npm:7.7.4":
version: 7.7.4
resolution: "semver@npm:7.7.4"
bin:
semver: bin/semver.js
checksum: 10/7a24cffcaa13f53c09ce55e05efe25cd41328730b2308678624f8b9f5fc3093fc4d189f47950f0b811ff8f3c3039c24a2c36717ba7961615c682045bf03e1dda
checksum: 10/26bdc6d58b29528f4142d29afb8526bc335f4fc04c4a10f2b98b217f277a031c66736bf82d3d3bb354a2f6a3ae50f18fd62b053c4ac3f294a3d10a61f5075b75
languageName: node
linkType: hard

Expand Down
Loading