Skip to content

Bump glob and @fastify/static in /engine - #42

Merged
cu1ch3n merged 1 commit into
mainfrom
dependabot/npm_and_yarn/engine/multi-47d28ef4f8
Nov 4, 2026
Merged

cu1ch3n merged 1 commit into
mainfrom
dependabot/npm_and_yarn/engine/multi-47d28ef4f8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps glob to 14.0.3 and updates ancestor dependency @fastify/static. These dependencies need to be updated together.

Updates glob from 13.0.6 to 14.0.3

Changelog

Sourced from glob's changelog.

changeglob

14

  • Use minimatch 11. Each portion of a pattern with magic is now matched with a Matcher from @isaacs/nonrecursive-glob-match in place of a RegExp, so patterns can no longer cause ReDoS. Matching follows the minimatch 11 changes, which are closer to Bash in some edge cases.
  • Pattern#pattern() returns a Matcher for a portion with magic. The MMPattern type is now minimatch's ParseReturnFiltered, and the new MMMatcher type is the Matcher part of it.
  • Rename Pattern#isRegExp() to isMatcher(), and Processor#testRegExp() to testMatcher().
  • Remove the debug option, which minimatch no longer has.
  • Add the normalize option, to normalize unicode in the pattern and in the file names that it is matched against.
  • GlobWalker#walk() and walkSync() return arrays in place of sets, and MatchRecord#entries() is removed.
  • ignore patterns that start with / now start at the same place as other patterns that start with /: the root option if set, or else the root of the cwd, such as C:\ on Windows.
  • ignore patterns follow the windowsPathsNoEscape option, the same as other patterns.
  • On Windows, patterns that start with a long UNC root like //?/UNC/host/share/ walk that share, the same as //host/share/.
  • Faster ignore patterns (about 1.2 to 3 times faster), and less work for each entry in a walk (about 10% faster sync, and 15% to 30% faster async, for large trees).
  • Allow const string[] or readonly string[] as ignore option or pattern argument.
  • When the signal aborts an async walk, the walk stops. Before, it rejected, but continued to read directories.

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

... (truncated)

Commits

Updates @fastify/static from 10.1.7 to 10.1.9

Release notes

Sourced from @​fastify/static's releases.

v10.1.9

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v10.1.8...v10.1.9

v10.1.8

What's Changed

Full Changelog: fastify/fastify-static@v10.1.7...v10.1.8

Commits
  • d4e7392 Bumped v10.1.9
  • 44b5a14 fix: try every encoding in a root before falling back to the next root (#629)
  • 55c7bc9 fix: return callNotFound for directories without index file (#626)
  • 2d0c537 build(deps): bump glob from ^13.0.0 to ^14.0.0
  • 8f2bf52 chore: bump fastify/workflows/.github/workflows/reusable-release.yml
  • 4e0e7e3 Bumped v10.1.8
  • b2974e0 chore: lower min-release-age to 6 days to unblock 10.1.8 release
  • 5b382cd docs: document the dotfiles option and its default
  • 71e2519 Merge commit from fork
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 4, 2026
@cu1ch3n

cu1ch3n commented Nov 4, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [glob](https://github.com/isaacs/node-glob) to 14.0.3 and updates ancestor dependency [@fastify/static](https://github.com/fastify/fastify-static). These dependencies need to be updated together.


Updates `glob` from 13.0.6 to 14.0.3
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v13.0.6...v14.0.3)

Updates `@fastify/static` from 10.1.7 to 10.1.9
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.7...v10.1.9)

---
updated-dependencies:
- dependency-name: "@fastify/static"
  dependency-version: 10.1.9
  dependency-type: direct:production
- dependency-name: glob
  dependency-version: 14.0.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/engine/multi-47d28ef4f8 branch from acdf72a to 14ea5aa Compare November 4, 2026 13:35
@cu1ch3n
cu1ch3n merged commit fd0a5b0 into main Nov 4, 2026
8 checks passed
@cu1ch3n
cu1ch3n deleted the dependabot/npm_and_yarn/engine/multi-47d28ef4f8 branch November 4, 2026 13:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant