Skip to content

Update minimatch dependency to v10#1247

Merged
rzhao271 merged 2 commits intomicrosoft:mainfrom
AndrewTwydell:andrewtwydell-update-minimatch
Apr 20, 2026
Merged

Update minimatch dependency to v10#1247
rzhao271 merged 2 commits intomicrosoft:mainfrom
AndrewTwydell:andrewtwydell-update-minimatch

Conversation

@AndrewTwydell
Copy link
Copy Markdown
Contributor

@AndrewTwydell AndrewTwydell commented Feb 23, 2026

Including the @vscode/vsce dependency caused audit failures because of the outdated minimatch dependency. This PR updates the version used to a non-vulnerable version. This includes API changes between V3 and V10.

Relates to the depandabot PR #1245

Signed-off-by: Andrew Twydell <andrew.twydell@ibm.com>
@AndrewTwydell
Copy link
Copy Markdown
Contributor Author

@microsoft-github-policy-service agree

rzhao271
rzhao271 previously approved these changes Apr 6, 2026
@rzhao271
Copy link
Copy Markdown
Collaborator

rzhao271 commented Apr 6, 2026

Merge conflicts

@rzhao271 rzhao271 enabled auto-merge (squash) April 20, 2026 16:15
@rzhao271 rzhao271 merged commit 54bea44 into microsoft:main Apr 20, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants