Skip to content

deps(npm): bump glob from 7.2.3 to 13.0.6 - #76

Merged
Indhumathy-Loganathan merged 7 commits into
mainfrom
dependabot/npm_and_yarn/glob-13.0.6
Sep 22, 2026
Merged

deps(npm): bump glob from 7.2.3 to 13.0.6#76
Indhumathy-Loganathan merged 7 commits into
mainfrom
dependabot/npm_and_yarn/glob-13.0.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps glob from 7.2.3 to 13.0.6.

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for glob since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@PrinceOliver

PrinceOliver commented Sep 22, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
deps(npm): bump glob from 7.2.3 to 13.0.6
72a2cae 
Bumps [glob](https://github.com/isaacs/node-glob) from 7.2.3 to 13.0.6.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v7.2.3...v13.0.6)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/glob-13.0.6 branch from e57454f to 72a2cae Compare September 22, 2026 06:29
PrinceOliver and others added 4 commits September 22, 2026 12:45
@PrinceOliver
Refactor SCSS processing in gulpfile.js
abc63d0
@PrinceOliver
Refactor gulp task execution in project file
fa0a737 
Updated the RunGulpOnceBeforeBuild target to use 'npx' for gulp execution and modified the message text.
@PrinceOliver
Updated package-lock.json
d834564
@PrinceOliver
updated gulpfile.js
db9d7fc
@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown

CI Summary

Job Status
bUnit (.NET 8 / 9 / 10) ✅ Passed
Playwright ✅ Passed
NuGet vulnerability scan ✅ Passed
ESLint security ✅ Passed
XSS / unsafe markup scan ✅ Passed

Overall: ✅ All checks passed

PrinceOliver
PrinceOliver previously approved these changes Sep 22, 2026
View reviewed changes
@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown

CI Summary

Job Status
bUnit (.NET 8 / 9 / 10) ✅ Passed
Playwright ✅ Passed
NuGet vulnerability scan ✅ Passed
ESLint security ✅ Passed
XSS / unsafe markup scan ✅ Passed

Overall: ✅ All checks passed

@Indhumathy-Loganathan
Indhumathy-Loganathan merged commit 025c2b3 into main Sep 22, 2026
18 of 20 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/glob-13.0.6 branch September 22, 2026 09:39
Indhumathy-Loganathan added a commit that referenced this pull request Sep 24, 2026
@JafarAli3783 @dependabot
@Indhumathy-Loganathan @PrinceOliver
Updated demo samples and highcontrast theme changes for Blazor Toolkit (
67971ad 
#85)

* 1047327: Temp commit for highcontrast theme

* deps(npm): bump braces and gulp (#52)

* deps(npm): bump braces and gulp

Bumps [braces](https://github.com/micromatch/braces) to 3.0.3 and updates ancestor dependency [gulp](https://github.com/gulpjs/gulp). These dependencies need to be updated together.


Updates `braces` from 2.3.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/commits/3.0.3)

Updates `gulp` from 4.0.2 to 5.0.1
- [Release notes](https://github.com/gulpjs/gulp/releases)
- [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md)
- [Commits](gulpjs/gulp@v4.0.2...v5.0.1)

---
updated-dependencies:
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
- dependency-name: gulp
  dependency-version: 5.0.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* Resolved the issues in the ESLint security job.

* fix(npm): regenerate package-lock.json for gulp 5.0.1

* fix(npm): add glob as direct dep for gulpfile (gulp 5)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Indhumathy-Loganathan <indhumathy.loganathan@syncfusion.com>
Co-authored-by: Indhumathy-Loganathan <58062424+Indhumathy-Loganathan@users.noreply.github.com>
Co-authored-by: Prince Oliver <31838171+PrinceOliver@users.noreply.github.com>

* deps(npm): bump sass from 1.104.0 to 1.104.1 (#75)

Bumps [sass](https://github.com/sass/dart-sass) from 1.104.0 to 1.104.1.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.104.0...1.104.1)

---
updated-dependencies:
- dependency-name: sass
  dependency-version: 1.104.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(npm): bump glob from 7.2.3 to 13.0.6 (#76)

* deps(npm): bump glob from 7.2.3 to 13.0.6

Bumps [glob](https://github.com/isaacs/node-glob) from 7.2.3 to 13.0.6.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v7.2.3...v13.0.6)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Refactor SCSS processing in gulpfile.js

* Refactor gulp task execution in project file

Updated the RunGulpOnceBeforeBuild target to use 'npx' for gulp execution and modified the message text.

* Updated package-lock.json

* updated gulpfile.js

* updated codeql.yml

* updated working directory in codeql.yml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Prince Oliver <31838171+PrinceOliver@users.noreply.github.com>
Co-authored-by: PrinceOliver <prince.rajarathinam@syncfusion.com>

* 1047327: Reverted temp commit for highcontrast theme.

* 1055862: Migrating samples folder and gulpfile changes from master to forked main branch.

* 1055862: Migrating source and styles folder changes from master to forked main branch.

* 1055862: Migrating the fixes resolved in master branch to github main branch.

* 1055862: Migrating the missed fixes in previous commit from master branch to github main branch.

* 1055862: Migrated dialog component related fixes and button component changes from master to github main branch.

* 1055862: Migrated numerictextbox and removed release notes changes from master to github main branch.

* 1055862: Migrated removing the release notes file from master to github main branch.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Indhumathy-Loganathan <indhumathy.loganathan@syncfusion.com>
Co-authored-by: Indhumathy-Loganathan <58062424+Indhumathy-Loganathan@users.noreply.github.com>
Co-authored-by: Prince Oliver <31838171+PrinceOliver@users.noreply.github.com>
Co-authored-by: PrinceOliver <prince.rajarathinam@syncfusion.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Indhumathy-Loganathan Indhumathy-Loganathan Indhumathy-Loganathan approved these changes
@PrinceOliver PrinceOliver PrinceOliver left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@PrinceOliver @Indhumathy-Loganathan