@actions/glob - Outdated minimatch dependency

[ncalteen]

Describe the bug

The current version of minimatch used by @actions/glob is severely outdated. As of this issue, it is pinned a 3.0.4 while the latest release is 10.0.1.

When transpiling ESM actions using tools like rollup, this results in invalid require statements that cause unresolvable errors on Windows runners.

Additional details can be found here: graalvm/setup-graalvm#138

To Reproduce
Steps to reproduce the behavior:

1. Create a fork of https://github.com/actions/typescript-action
2. Install the @actions/glob module
3. Transpile the action (npm run package)
4. Attempt to run the action on a Windows runner

Expected behavior

The action runs as expected, and the @actions/glob functionality does not raise an error.

Additional context

• Related: Uncaught ReferenceError: require is not defined rollup/rollup#3434
• Related: "require is not defined" after moving to ESM and rollup typescript-action#1017

[fniephaus]

Any chance we can get this fixed soon-ish?