From 2a6286e5ed88b1d4fa43e60aa405eee54c3e9a82 Mon Sep 17 00:00:00 2001 From: hrao Date: Mon, 30 Mar 2026 17:07:39 +0530 Subject: [PATCH 1/3] deps: [UIE-10553] - Update minimatch to resolve dependabot --- package.json | 4 +++- pnpm-lock.yaml | 38 ++++++++++++++++++++------------------ 2 files changed, 23 insertions(+), 19 deletions(-) diff --git a/package.json b/package.json index 7ea7b9bd378..5b2b4bcf866 100644 --- a/package.json +++ b/package.json @@ -74,7 +74,9 @@ "yaml": "^2.3.0", "form-data": "^4.0.4", "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12", - "brace-expansion@>=2.0.0 <=2.0.1": ">=2.0.2" + "brace-expansion@>=2.0.0 <=2.0.1": ">=2.0.2", + "minimatch@>=3.0.0 <=3.1.3": "3.1.4", + "minimatch@>=9.0.0 <9.0.7": "9.0.9" }, "version": "0.0.0", "volta": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 2f4ec71b5ea..43c2345cb1b 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -10,6 +10,8 @@ overrides: form-data: ^4.0.4 brace-expansion@>=1.0.0 <=1.1.11: '>=1.1.12' brace-expansion@>=2.0.0 <=2.0.1: '>=2.0.2' + minimatch@>=3.0.0 <=3.1.3: 3.1.4 + minimatch@>=9.0.0 <9.0.7: 9.0.9 importers: @@ -5397,15 +5399,15 @@ packages: resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==} engines: {node: '>=4'} - minimatch@3.1.2: - resolution: {integrity: sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==} + minimatch@3.1.4: + resolution: {integrity: sha512-twmL+S8+7yIsE9wsqgzU3E8/LumN3M3QELrBZ20OdmQ9jB2JvW5oZtBEmft84k/Gs5CG9mqtWc6Y9vW+JEzGxw==} minimatch@5.1.9: resolution: {integrity: sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==} engines: {node: '>=10'} - minimatch@9.0.5: - resolution: {integrity: sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==} + minimatch@9.0.9: + resolution: {integrity: sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==} engines: {node: '>=16 || 14 >=14.17'} minimist@1.2.8: @@ -7730,7 +7732,7 @@ snapshots: dependencies: '@eslint/object-schema': 2.1.6 debug: 4.4.3(supports-color@8.1.1) - minimatch: 3.1.2 + minimatch: 3.1.4 transitivePeerDependencies: - supports-color @@ -7749,7 +7751,7 @@ snapshots: ignore: 5.3.2 import-fresh: 3.3.0 js-yaml: 4.1.0 - minimatch: 3.1.2 + minimatch: 3.1.4 strip-json-comments: 3.1.1 transitivePeerDependencies: - supports-color @@ -9277,7 +9279,7 @@ snapshots: debug: 4.4.3(supports-color@8.1.1) fast-glob: 3.3.2 is-glob: 4.0.3 - minimatch: 9.0.5 + minimatch: 9.0.9 semver: 7.7.3 ts-api-utils: 2.1.0(typescript@5.7.3) typescript: 5.7.3 @@ -9293,7 +9295,7 @@ snapshots: debug: 4.4.3(supports-color@8.1.1) fast-glob: 3.3.2 is-glob: 4.0.3 - minimatch: 9.0.5 + minimatch: 9.0.9 semver: 7.7.3 ts-api-utils: 2.1.0(typescript@5.7.3) typescript: 5.7.3 @@ -10615,7 +10617,7 @@ snapshots: hasown: 2.0.2 jsx-ast-utils: 3.3.5 language-tags: 1.0.9 - minimatch: 3.1.2 + minimatch: 3.1.4 object.fromentries: 2.0.8 safe-regex-test: 1.1.0 string.prototype.includes: 2.0.1 @@ -10660,7 +10662,7 @@ snapshots: estraverse: 5.3.0 hasown: 2.0.2 jsx-ast-utils: 3.3.5 - minimatch: 3.1.2 + minimatch: 3.1.4 object.entries: 1.1.8 object.fromentries: 2.0.8 object.values: 1.2.1 @@ -10678,7 +10680,7 @@ snapshots: eslint: 9.31.0(jiti@2.4.2) functional-red-black-tree: 1.0.1 jsx-ast-utils: 3.3.5 - minimatch: 9.0.5 + minimatch: 9.0.9 scslre: 0.3.0 semver: 7.6.3 typescript: 5.7.3 @@ -10741,7 +10743,7 @@ snapshots: is-glob: 4.0.3 json-stable-stringify-without-jsonify: 1.0.1 lodash.merge: 4.6.2 - minimatch: 3.1.2 + minimatch: 3.1.4 natural-compare: 1.4.0 optionator: 0.9.4 optionalDependencies: @@ -11069,7 +11071,7 @@ snapshots: dependencies: foreground-child: 3.3.1 jackspeak: 3.4.3 - minimatch: 9.0.5 + minimatch: 9.0.9 minipass: 7.1.2 package-json-from-dist: 1.0.1 path-scurry: 1.11.1 @@ -11079,7 +11081,7 @@ snapshots: fs.realpath: 1.0.0 inflight: 1.0.6 inherits: 2.0.4 - minimatch: 3.1.2 + minimatch: 3.1.4 once: 1.4.0 path-is-absolute: 1.0.1 @@ -11857,15 +11859,15 @@ snapshots: min-indent@1.0.1: {} - minimatch@3.1.2: + minimatch@3.1.4: dependencies: - brace-expansion: 2.0.2 + brace-expansion: 5.0.4 minimatch@5.1.9: dependencies: brace-expansion: 5.0.4 - minimatch@9.0.5: + minimatch@9.0.9: dependencies: brace-expansion: 2.0.2 @@ -13099,7 +13101,7 @@ snapshots: dependencies: '@istanbuljs/schema': 0.1.3 glob: 10.5.0 - minimatch: 9.0.5 + minimatch: 9.0.9 text-segmentation@1.0.3: dependencies: From 7d961de4f691a76b2b784876d5f7c12a270145c0 Mon Sep 17 00:00:00 2001 From: hrao Date: Mon, 30 Mar 2026 17:09:11 +0530 Subject: [PATCH 2/3] Added changeset: Add dependency resolution for `minimatch` --- .../.changeset/pr-13544-tech-stories-1774870751757.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 packages/manager/.changeset/pr-13544-tech-stories-1774870751757.md diff --git a/packages/manager/.changeset/pr-13544-tech-stories-1774870751757.md b/packages/manager/.changeset/pr-13544-tech-stories-1774870751757.md new file mode 100644 index 00000000000..ff02fa06abd --- /dev/null +++ b/packages/manager/.changeset/pr-13544-tech-stories-1774870751757.md @@ -0,0 +1,5 @@ +--- +"@linode/manager": Tech Stories +--- + +Add dependency resolution for `minimatch` ([#13544](https://github.com/linode/manager/pull/13544)) From 290d307e4a03a21bba995eeff2f8acf48956fd76 Mon Sep 17 00:00:00 2001 From: hrao Date: Mon, 30 Mar 2026 17:40:40 +0530 Subject: [PATCH 3/3] set brace expansion to a fixed version --- package.json | 4 ++-- pnpm-lock.yaml | 36 +++++++++++++++++++++--------------- 2 files changed, 23 insertions(+), 17 deletions(-) diff --git a/package.json b/package.json index 5b2b4bcf866..48fcee378ab 100644 --- a/package.json +++ b/package.json @@ -73,8 +73,8 @@ "semver": "^7.5.2", "yaml": "^2.3.0", "form-data": "^4.0.4", - "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12", - "brace-expansion@>=2.0.0 <=2.0.1": ">=2.0.2", + "brace-expansion@>=1.0.0 <=1.1.11": "1.1.13", + "brace-expansion@>=2.0.0 <=2.0.1": "2.0.3", "minimatch@>=3.0.0 <=3.1.3": "3.1.4", "minimatch@>=9.0.0 <9.0.7": "9.0.9" }, diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 43c2345cb1b..b72482b4379 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -8,8 +8,8 @@ overrides: semver: ^7.5.2 yaml: ^2.3.0 form-data: ^4.0.4 - brace-expansion@>=1.0.0 <=1.1.11: '>=1.1.12' - brace-expansion@>=2.0.0 <=2.0.1: '>=2.0.2' + brace-expansion@>=1.0.0 <=1.1.11: 1.1.13 + brace-expansion@>=2.0.0 <=2.0.1: 2.0.3 minimatch@>=3.0.0 <=3.1.3: 3.1.4 minimatch@>=9.0.0 <9.0.7: 9.0.9 @@ -3529,10 +3529,6 @@ packages: balanced-match@1.0.2: resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==} - balanced-match@4.0.4: - resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==} - engines: {node: 18 || 20 || >=22} - base64-arraybuffer@1.0.2: resolution: {integrity: sha512-I3yl4r9QB5ZRY3XuJVEPfc2XhZO6YweFPI+UovAzn+8/hb3oJ6lnysaFcjVpkCPfVWFUDvoZ8kmVDP7WyRtYtQ==} engines: {node: '>= 0.6.0'} @@ -3557,12 +3553,14 @@ packages: bluebird@3.7.2: resolution: {integrity: sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==} + brace-expansion@1.1.13: + resolution: {integrity: sha512-9ZLprWS6EENmhEOpjCYW2c8VkmOvckIJZfkr7rBW6dObmfgJ/L1GpSYW5Hpo9lDz4D1+n0Ckz8rU7FwHDQiG/w==} + brace-expansion@2.0.2: resolution: {integrity: sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==} - brace-expansion@5.0.4: - resolution: {integrity: sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==} - engines: {node: 18 || 20 || >=22} + brace-expansion@2.0.3: + resolution: {integrity: sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==} braces@3.0.3: resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==} @@ -3820,6 +3818,9 @@ packages: resolution: {integrity: sha512-gk/Z852D2Wtb//0I+kRFNKKE9dIIVirjoqPoA1wJU+XePVXZfGeBpk45+A1rKO4Q43prqWBNY/MiIeRLbPWUaA==} engines: {node: '>=4.0.0'} + concat-map@0.0.1: + resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==} + concurrently@9.1.0: resolution: {integrity: sha512-VxkzwMAn4LP7WyMnJNbHN5mKV9L2IbyDjpzemKr99sXNR3GqRNMMHdm7prV1ws9wg7ETj6WUkNOigZVsptwbgg==} engines: {node: '>=18'} @@ -9726,8 +9727,6 @@ snapshots: balanced-match@1.0.2: {} - balanced-match@4.0.4: {} - base64-arraybuffer@1.0.2: optional: true @@ -9747,13 +9746,18 @@ snapshots: bluebird@3.7.2: {} + brace-expansion@1.1.13: + dependencies: + balanced-match: 1.0.2 + concat-map: 0.0.1 + brace-expansion@2.0.2: dependencies: balanced-match: 1.0.2 - brace-expansion@5.0.4: + brace-expansion@2.0.3: dependencies: - balanced-match: 4.0.4 + balanced-match: 1.0.2 braces@3.0.3: dependencies: @@ -10017,6 +10021,8 @@ snapshots: common-tags@1.8.2: {} + concat-map@0.0.1: {} + concurrently@9.1.0: dependencies: chalk: 4.1.2 @@ -11861,11 +11867,11 @@ snapshots: minimatch@3.1.4: dependencies: - brace-expansion: 5.0.4 + brace-expansion: 1.1.13 minimatch@5.1.9: dependencies: - brace-expansion: 5.0.4 + brace-expansion: 2.0.3 minimatch@9.0.9: dependencies: