Skip to content

deps: [UIE-10553] - Update minimatch to resolve dependabot#13544

Merged
harsh-akamai merged 3 commits intolinode:developfrom
harsh-akamai:UIE-10553-dependent-bot-alert
Mar 31, 2026
Merged

deps: [UIE-10553] - Update minimatch to resolve dependabot#13544
harsh-akamai merged 3 commits intolinode:developfrom
harsh-akamai:UIE-10553-dependent-bot-alert

Conversation

@harsh-akamai
Copy link
Copy Markdown
Contributor

@harsh-akamai harsh-akamai commented Mar 30, 2026

Description 📝

How to test 🧪

  • Verify CI passes
  • Verify our repo no longer requires a vulnerable minimatch versions
  • Verify that running pnpm audit doesn't reveal any minimatch vulnerabilities
Author Checklists

As an Author, to speed up the review process, I considered 🤔

👀 Doing a self review
❔ Our contribution guidelines
🤏 Splitting feature into small PRs
➕ Adding a changeset
🧪 Providing/improving test coverage
🔐 Removing all sensitive information from the code and PR description
🚩 Using a feature flag to protect the release
👣 Providing comprehensive reproduction steps
📑 Providing or updating our documentation
🕛 Scheduling a pair reviewing session
📱 Providing mobile support
♿ Providing accessibility support


  • I have read and considered all applicable items listed above.

As an Author, before moving this PR from Draft to Open, I confirmed ✅

  • All tests and CI checks are passing
  • TypeScript compilation succeeded without errors
  • Code passes all linting rules

@harsh-akamai harsh-akamai self-assigned this Mar 30, 2026
@harsh-akamai harsh-akamai added the Dependencies Pull requests that update a dependency file label Mar 30, 2026
@harsh-akamai harsh-akamai force-pushed the UIE-10553-dependent-bot-alert branch from b5fb4ed to 0cbf912 Compare March 30, 2026 11:04
@harsh-akamai harsh-akamai force-pushed the UIE-10553-dependent-bot-alert branch from 0cbf912 to 2a6286e Compare March 30, 2026 11:38
@harsh-akamai harsh-akamai marked this pull request as ready for review March 30, 2026 11:44
@harsh-akamai harsh-akamai requested a review from a team as a code owner March 30, 2026 11:44
Comment thread package.json
Comment on lines +76 to +77
"brace-expansion@>=1.0.0 <=1.1.11": "1.1.13",
"brace-expansion@>=2.0.0 <=2.0.1": "2.0.3",
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Setting the brace-expansion package to a fixed version without an upper bound (e.g., >x.y.z) resulted in the installation of incompatible versions (in this case, v5.0.4).

@linode-gh-bot
Copy link
Copy Markdown

Cloud Manager UI test results

🎉 888 passing tests on test run #7 ↗︎

❌ Failing✅ Passing↪️ Skipped🕐 Duration
0 Failing888 Passing11 Skipped38m 55s

@github-project-automation github-project-automation Bot moved this from Review to Approved in Cloud Manager Mar 30, 2026
@harsh-akamai harsh-akamai merged commit a6ce8ea into linode:develop Mar 31, 2026
35 checks passed
@github-project-automation github-project-automation Bot moved this from Approved to Merged in Cloud Manager Mar 31, 2026
@harsh-akamai harsh-akamai deleted the UIE-10553-dependent-bot-alert branch March 31, 2026 04:09
grevanak-akamai pushed a commit that referenced this pull request Apr 23, 2026
* deps: [UIE-10553] - Update minimatch to resolve dependabot

* Added changeset: Add dependency resolution for `minimatch`

* set brace expansion to a fixed version
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

4 participants