Bump micromatch from 4.0.5 to 4.0.7 #7712
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [micromatch](https://github.com/micromatch/micromatch) from 4.0.5 to 4.0.7. - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.7) --- updated-dependencies: - dependency-name: micromatch dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
|
This one is important. see micromatch/braces#37 (comment) and micromatch/micromatch@ |
|
@Mouvedia Thanks. I'll dig into them. |
|
I think this update is not a problem because $ npm ls braces
stylelint@16.6.0 /Users/masafumi.koba/git/stylelint/stylelint
├─┬ lint-staged@15.2.2
│ └─┬ micromatch@4.0.5
│ └── braces@3.0.3 deduped
├─┬ micromatch@4.0.7
│ └── braces@3.0.3
└─┬ remark-cli@12.0.1
└─┬ unified-args@11.0.0
└─┬ chokidar@3.5.3
└── braces@3.0.3 deduped |
|
Actually, there is only a change to update a dependency $ npm diff --diff-name-only --diff micromatch@4.0.5 --diff micromatch@4.0.7
package.json
README.md@Mouvedia If you still have concerns, feel free to comment. |
Bumps micromatch from 4.0.5 to 4.0.7.
Commits
07b8870Release 4.0.7.9cc27ccPrepare for 4.0.7 with picomatch v290dc0cdUpdate README.md2c56a86Add sponsor to readmeMaintainer changes
This version was pushed to npm by paulmillr, a new releaser for micromatch since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)