Repository navigation
Update dependency brace-expansion@>=2.0.0 <2.1.7 to v5 - #763
renovate[bot] wants to merge 1 commit into
Conversation
|
| minimatch@9.0.9: | ||
| dependencies: | ||
| brace-expansion: 2.1.7 | ||
| brace-expansion: 5.0.12 |
There was a problem hiding this comment.
🟡 Glob tools fail on supported Node releases
On Node 20.0–20.18 or 22.0–22.11, minimatch@9.0.9 cannot require the ESM-only brace-expansion v5. Glob and import-sort tooling fail with ERR_REQUIRE_ESM.
Learn more
The lockfile installs brace-expansion v5 as the dependency of minimatch@9. Minimatch 9's CommonJS entry point loads brace-expansion with require(), while brace-expansion v5 is an ES module. Older Node 20 and 22 releases cannot load it through require(). Both glob and the import-sort plugin depend on minimatch 9, so their CommonJS usage fails before matching begins.
Example: On Node 20.18, a tool imports glob@10.5.0; glob loads minimatch, whose CommonJS entry requires brace-expansion v5 and raises ERR_REQUIRE_ESM.
Recommended fix: Keep minimatch 9 on patched brace-expansion 2.1.7, or upgrade its consumers to minimatch versions that load brace-expansion v5 correctly. Test on the earliest Node 20 and 22 versions the project supports.
Was this helpful? React with 👍 or 👎 to provide feedback.
This PR contains the following updates:
^2.1.7→^5.0.0](https://renovatebot.com/diffs/npm/brace-expansion@>=2.0.0 <2.1.7/2.1.7/5.0.12)Release Notes
juliangruber/brace-expansion (brace-expansion@>=2.0.0 <2.1.7)
v5.0.12Compare Source
v5.0.11Compare Source
v5.0.10Compare Source
v5.0.9Compare Source
v5.0.8Compare Source
v5.0.7Compare Source
v5.0.6Compare Source
v5.0.5Compare Source
v5.0.4Compare Source
v5.0.3Compare Source
v5.0.2Compare Source
v4.0.1Compare Source
5a5cc170b6a978v4.0.0Compare Source
278132bdd72a59tea.yaml70e4c1bAs a precaution to not risk breaking anything with
278132b, this is a new semver major releasev3.0.9Compare Source
v3.0.8Compare Source
v3.0.7Compare Source
v3.0.6Compare Source
v3.0.5Compare Source
v3.0.4Compare Source
v3.0.3Compare Source
v3.0.2Compare Source
v3.0.1Compare Source
3059c078229e6f15f9b3cv3.0.0Compare Source
c0360e868c0e379e781e93494c4ddd5a4cb6dad209teste3dd8aed23ede91eb3fa41e7c9cd252053761a94f1dc741cf8ee56265c8756a05978a7Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.