Skip to content

build(deps): Bump glob from 11.0.3 to 13.0.0#206

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/glob-13.0.0
Closed

build(deps): Bump glob from 11.0.3 to 13.0.0#206
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/glob-13.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Nov 24, 2025

Bumps glob from 11.0.3 to 13.0.0.

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.3 to 13.0.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.3...v13.0.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 24, 2025
@joelteply joelteply closed this Nov 25, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Nov 25, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/glob-13.0.0 branch November 25, 2025 14:49
joelteply added a commit that referenced this pull request Jun 7, 2026
#1545)

Iteration 1 of the inference-latency campaign (#195). Sprinkles
probes at the load-bearing seams the substrate's RTOS debugger
manual marked unchecked. With #196's on_close fix already on
canary, `time_sync!` / `time_probe!` spans now persist to the
JSONL sink — the timing data this commit produces is captureable
end-to-end for the first time.

## What's instrumented

**`inference/llamacpp_adapter.rs::generate_text`** — the dominant
cost on LCD tier (95%+ wall-clock per 2026-06-06 baseline). The
function was effectively a black box from the operator's POV: the
existing `runtime::logger("llamacpp")` lines describe shape but
not duration, and `tok_per_sec` was kept in a private
`RwLock<f64>` (last-throughput-only). Probes added:

- `inference.generate.enter` — request fingerprint at entry
  (model, persona_id, msg_count, max_tokens, has_system_prompt,
  parts_image, parts_audio). Pairs with `.exit` via span ancestry.
- `time_sync!("inference.render_chat", ...)` — chat-template
  rendering. Synchronous + small, but cumulative across many
  turns. Bracketing it lets the operator subtract it from
  `forward.*` cleanly.
- `time_probe!("inference.forward.text", ...)` — pure-text
  scheduler-managed path. The actual LLM decode.
- `time_probe!("inference.forward.multimodal", ...)` — mtmd path
  (image / audio). Distinct seam because it bypasses the
  scheduler and runs single-flight.
- `inference.generate.exit` — pairs with `.enter`. Carries the
  campaign's headline metric `tok_per_sec` plus duration_ms,
  tokens_out, text_len, model. A `jq` filter on
  `class == "inference.generate.exit"` is the latency dashboard
  in JSONL form.

**`persona/prompt_assembly.rs::assemble`** — the leading
indicator for "why is prefill slow." When engrams / social
signals / matched-angle grow unbounded, `system_message_len`
shadows tok/s in the timing breakdown. Probe at the function
tail carries the composition shape: system_message_len,
message_count, estimated_tokens, matched_angle_present,
engrams_count, social_signals_present, voice_mode,
multi_party_strategy.

## Doctrine alignment

Per [[jtag-probes-are-rtos-debugger]] (Joel 2026-06-06): every
probe site names the surrounding vars the way a breakpoint
inspector would show locals. Easy one-liners; the macros do the
plumbing. `class` strings follow the canonical taxonomy in
`docs/architecture/RTOS-DEBUGGER-PROBES.md` (updated in this
commit per the "When you add a probe, update this manual" rule).

Per [[no-rust-gates-around-cognition]]: probes observe, they
DO NOT decide. None of these emit changes control flow. The
existing `runtime::logger` and `last_throughput_tok_s` paths
remain untouched — probes are additive.

Per [[init-once-handle-then-lease-zero-copy-refs]]: the macros
expand to `tracing::event!` / `tracing::info_span!` calls that
inherit `tracing`'s `release_max_level_*` compile-time gates.
Zero cost when off; auditable per task #198 if a hot loop
later needs the visitor allocation reviewed.

## Manual update

`docs/architecture/RTOS-DEBUGGER-PROBES.md`:
- Added the new classes to the taxonomy (`persona.prompt.assemble`
  with full field list; `inference.generate.{enter,exit}`; the
  three new `timing` seams).
- Marked the prompt-assembly checklist item DONE.
- Marked the llamacpp-adapter checklist item DONE with the
  specific call-site list and the campaign cross-reference.

## Validation

- `cargo check --features metal,accelerate` — clean
- `cargo test --lib persona::prompt_assembly` — 12/12 pass
- `cargo test --lib inference::llamacpp` — 12/12 pass
- 24/24 green across the two affected modules

## Next iteration

Iteration 2 (separate slice): run a real continuum boot with
CONTINUUM_PROBE_FILE set, exercise the persona service loop
against the multi-persona stress fixture (#1518's baseline),
`jq` the JSONL to identify the dominant bottleneck. Optimize
THAT. Iterate. Until tok_per_sec on the LCD tier hits the
M5-class target.

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size: M

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant