Skip to content

chore(deps): dependabot wave 4 — minimatch 10.0.3 → 10.2.3 - #39

Merged
deepagent-ai merged 1 commit into
devfrom
chore/dependabot-wave4-minimatch
Jul 9, 2026
Merged

deepagent-ai merged 1 commit into
devfrom
chore/dependabot-wave4-minimatch

Conversation

@deepagent-ai

Copy link
Copy Markdown
Contributor

Clears both high-severity minimatch alerts on packages/deepagent-code (GHSA ranges >=10.0.0 <10.2.1 and <10.2.3). Same-major patch, no breaking changes. packages/core was already on 10.2.5 (unaffected).

Verified: deepagent-code resolves minimatch 10.2.3; glob match/nomatch behavior intact; 10.0.3 gone from bun.lock. No source changes.

Issue for this PR

Closes #

Type of change

  • Bug fix
  • New feature
  • Refactor / code improvement
  • Documentation

What does this PR do?

Please provide a description of the issue, the changes you made to fix it, and why they work. It is expected that you understand why your changes work and if you do not understand why at least say as much so a maintainer knows how much to value the PR.

If you paste a large clearly AI generated description here your PR may be IGNORED or CLOSED!

How did you verify your code works?

Screenshots / recordings

If this is a UI change, please include a screenshot or recording.

Checklist

  • I have tested my changes locally
  • I have not included unrelated changes in this PR

If you do not follow this template your PR will be automatically rejected.

Clears both high-severity minimatch alerts on packages/deepagent-code
(GHSA ranges >=10.0.0 <10.2.1 and <10.2.3). Same-major patch, no breaking
changes. packages/core was already on 10.2.5 (unaffected).

Verified: deepagent-code resolves minimatch 10.2.3; glob match/nomatch
behavior intact; 10.0.3 gone from bun.lock. No source changes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@deepagent-ai
deepagent-ai merged commit 9c9ca42 into dev Jul 9, 2026
4 of 11 checks passed
@deepagent-ai
deepagent-ai deleted the chore/dependabot-wave4-minimatch branch July 9, 2026 12:56
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

  1. Open an issue describing the bug/feature (if one doesn't exist)
  2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

This PR doesn't fully meet our contributing guidelines and PR template.

What needs to be fixed:

  • No "Type of change" checkbox is checked. Please select at least one.
  • No issue referenced. Please add Closes #<number> linking to the relevant issue.
  • "How did you verify your code works?" section is empty. Please explain how you tested.
  • Not all checklist items are checked. Please confirm you have tested locally and have not included unrelated changes.

Please edit this PR description to address the above within 2 hours, or it will be automatically closed.

If you believe this was flagged incorrectly, please let a maintainer know.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant