dependabot[bot] opened a new pull request, #4070: URL: https://github.com/apache/incubator-kie-tools/pull/4070
Bumps [minimatch](https://github.com/isaacs/minimatch) from 10.2.1 to 11.0.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/isaacs/minimatch/blob/main/changelog.md";>minimatch's changelog</a>.</em></p> <blockquote> <h1>change log</h1> <h2>11.0</h2> <ul> <li>Match each path portion with <code>Matcher</code> from <code>@isaacs/nonrecursive-glob-match</code>, in place of a <code>RegExp</code>. Items in <code>Minimatch.set</code> are now strings, <code>Matcher</code> objects, or <code>GLOBSTAR</code>.</li> <li>Remove <code>makeRe()</code>, <code>Minimatch#regexp</code>, and the <code>MMRegExp</code> type.</li> <li>Remove the <code>AST</code> class.</li> <li>Remove the <code>maxExtglobRecursion</code> option.</li> <li>An empty path portion, such as the last one in <code>a/b/</code>, only matches an empty pattern portion. So <code>a/b/</code> no longer matches <code>a/b/?(x)</code> or <code>a/b/*(x)</code>, the same as <code>a/b/*</code>.</li> <li>Add the <code>normalize</code> option, to normalize unicode in the pattern and in each portion of the tested path.</li> <li>Remove the <code>debug</code> option and the <code>debug()</code> method.</li> <li>Remove the <code>matchOne()</code>, <code>slashSplit()</code>, and <code>levelTwoFileOptimize()</code> methods. They are internal now.</li> <li>Fix patterns with more than one <code>**</code> and sections of different lengths between them, such as <code>**/a/b/c/**/d/**</code>, which failed to match some paths since 10.2.3.</li> <li>Fix <code>partial</code> matching of patterns with <code>**</code>, which since 10.2.3 matched some paths under a dot portion that <code>**</code> can not walk, and did not match some paths that end in the pattern's last portion.</li> <li><code>partial</code> matching of patterns with many <code>**</code> no longer takes exponential time.</li> <li>On Windows, a <code>..</code> no longer removes the drive letter, or the host and share of a UNC path, at the start of a pattern or (at optimization level 2) a path. So <code>C:/a/../../x</code> no longer matches <code>x</code> or <code>/x</code>.</li> <li>On Windows, compare the host and share of UNC paths like <code>//host/share/...</code> case-insensitively, the same as drive letters.</li> <li>On Windows, long UNC paths like <code>//?/UNC/host/share/...</code> match <code>//host/share/...</code> and vice versa, the same as <code>//?/c:/...</code> and <code>c:/...</code>.</li> <li>At optimization level 2, stop splitting <code>**/..</code> portions once there are <code>braceExpandMax</code> patterns, and do not dedupe sets of more than 1000 patterns. Before, a short pattern could take minutes to compile.</li> <li><code>minimatch()</code> keeps the 256 <code>Minimatch</code> objects that it used most recently, so it does not compile the same pattern again.</li> <li>Faster to compile brace patterns that make rows that are merged, such as <code>**/*.{png,jpg,gif}</code>, because the <code>Matcher</code>s for the rows that are merged are not made.</li> </ul> <h2>10.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/minimatch/commit/f24eba95d759c794f9f2529a650b6f9418544228";><code>f24eba9</code></a> 11.0.4</li> <li><a href="https://github.com/isaacs/minimatch/commit/a0b94044d8f458ebe2ab936f7958301993dbda8e";><code>a0b9404</code></a> drop support for node 18, wasn't installable anyway</li> <li><a href="https://github.com/isaacs/minimatch/commit/b0c2aa83161cb6aaa19fa2e612f0b64edffd18ee";><code>b0c2aa8</code></a> 11.0.3</li> <li><a href="https://github.com/isaacs/minimatch/commit/293267a27c25c5a91116028d16bb624133f8d8b0";><code>293267a</code></a> perf: cache matchers more aggressively by postponing creation</li> <li><a href="https://github.com/isaacs/minimatch/commit/52d2aecceb71dae7f1b19675e74e044eb472c1e6";><code>52d2aec</code></a> cache 256 patterns</li> <li><a href="https://github.com/isaacs/minimatch/commit/43804554971ee0c526723fc5f7c898ce954c390e";><code>4380455</code></a> 11.0.2</li> <li><a href="https://github.com/isaacs/minimatch/commit/322feb18b3f69fa9e2c20c5f4bd3af54e91a3d35";><code>322feb1</code></a> update <code>@​isaacs/nonrecursive-glob-match</code></li> <li><a href="https://github.com/isaacs/minimatch/commit/96cad78b5a9b2774baade374bd44bd7803425a3e";><code>96cad78</code></a> ci: exclude windows from testing node 22 and 24</li> <li><a href="https://github.com/isaacs/minimatch/commit/47afe882784638ccdee8d30e0b7516aed2b589a9";><code>47afe88</code></a> 11.0.1</li> <li><a href="https://github.com/isaacs/minimatch/commit/77a0f5c4b80bdc641c3c930a1d9edf5ad2db57f8";><code>77a0f5c</code></a> limit **/.. optimization pass to avoid quadratic explosion</li> <li>Additional commits viewable in <a href="https://github.com/isaacs/minimatch/compare/v10.2.1...v11.0.4";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/incubator-kie-tools/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
