dependabot[bot] opened a new pull request, #467:
URL: https://github.com/apache/daffodil-vscode/pull/467

   Bumps [glob](https://github.com/isaacs/node-glob) from 8.0.3 to 9.0.2.
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/isaacs/node-glob/blob/main/changelog.md";>glob's 
changelog</a>.</em></p>
   <blockquote>
   <h2>9.0</h2>
   <p>This is a full rewrite, with significant API and algorithm
   changes.</p>
   <h3>High-Level Feature and API Surface Changes</h3>
   <ul>
   <li>Only support node 16 and higher.</li>
   <li>Promise API instead of callbacks.</li>
   <li>Accept pattern as string or array of strings.</li>
   <li>Hybrid module distribution.</li>
   <li>Full TypeScript support.</li>
   <li>Exported <code>Glob</code> class is no longer an event emitter.</li>
   <li>Exported <code>Glob</code> class has <code>walk()</code>, 
<code>walkSync()</code>, <code>stream()</code>,
   <code>streamSync()</code>, <code>iterate()</code>, 
<code>iterateSync()</code> methods, and is
   both an async and sync Generator.</li>
   <li>First class support for UNC paths and drive letters on Windows.
   Note that <em>glob patterns</em> must still use <code>/</code> as a path
   separator, unless the <code>windowsPathsNoEscape</code> option is set, in
   which case glob patterns cannot be escaped with <code>\</code>.</li>
   <li>Paths are returned in the canonical formatting for the platform
   in question.</li>
   <li>The <code>hasMagic</code> method will return false for patterns that only
   contain brace expansion, but no other &quot;magic&quot; glob characters.</li>
   <li>Patterns ending in <code>/</code> will still be restricted to matching
   directories, but will not have a <code>/</code> appended in the results.
   In general, results will be in their default relative or
   absolute forms, without any extraneous <code>/</code> and <code>.</code> 
characters,
   unlike shell matches. (The <code>mark</code> option may still be used to
   <em>always</em> mark directory matches with a trailing <code>/</code> or 
<code>\</code>.)</li>
   <li>An options argument is required for the <code>Glob</code> class
   constructor. <code>{}</code> may be provided to accept all default
   options.</li>
   </ul>
   <h3>Options Changes</h3>
   <ul>
   <li>Removed <code>root</code> option and mounting behavior.</li>
   <li>Removed <code>stat</code> option. It's slow and pointless. (Could bring
   back easily if there's demand, but items are already statted in
   cases where it's relevant, such as <code>nodir:true</code> or
   <code>mark:true</code>.)</li>
   <li>Simplified <code>cwd</code> behavior so it is far less magical, and 
relies
   less on platform-specific absolute path representations.</li>
   <li><code>cwd</code> can be a File URL or a string path.</li>
   <li>More efficient handling for absolute patterns. (That is,
   patterns that start with <code>/</code> on any platform, or start with a
   drive letter or UNC path on Windows.)</li>
   <li>Removed <code>silent</code> and <code>strict</code> options. Any readdir 
errors are
   simply treated as &quot;the directory could not be read&quot;, and it is
   treated as a normal file entry instead, like shells do.</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/281e91edb5176c3594c60f6e28655ce29e421044";><code>281e91e</code></a>
 9.0.2</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/9a97c528028ae1e6828ea145f015b5da9761e648";><code>9a97c52</code></a>
 add top-level types field to package.json</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/bedc98cfbb12f68e588c5f774d8bab5380fb6552";><code>bedc98c</code></a>
 9.0.1</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/03b9bcaa3b42b28f02139c27e15d1610ff9da4f0";><code>03b9bca</code></a>
 allow v14 higher than 14.17</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/a68703e61894ef260323dcc9f95b21f17197d951";><code>a68703e</code></a>
 9.0.0</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/58159ca6767e7f8925e9301b9c0ac11211bde50b";><code>58159ca</code></a>
 test: cwd can be a url</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/a547a9c3e9c3a9e734204435871d6339d2d62e55";><code>a547a9c</code></a>
 more docs</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/42a3ac7ec172bb1b502a048e1bb3f14cf299f117";><code>42a3ac7</code></a>
 link to bash manual for Pattern Matching</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/474172d5e87a5eda64c0dffb10ead57c2826c805";><code>474172d</code></a>
 update readme with cwd URL support</li>
   <li><a 
href="https://github.com/isaacs/node-glob/commit/ad3904d7f143e814896c0114731acf462d075cc3";><code>ad3904d</code></a>
 update readme with posix class support</li>
   <li>Additional commits viewable in <a 
href="https://github.com/isaacs/node-glob/compare/v8.0.3...v9.0.2";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=glob&package-manager=npm_and_yarn&previous-version=8.0.3&new-version=9.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to