Skip to content

chore(deps): bump minimatch from 10.2.3 to 11.0.1 - #2287

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minimatch-11.0.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minimatch-11.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps minimatch from 10.2.3 to 11.0.1.

Changelog

Sourced from minimatch's changelog.

change log

11.0

  • Match each path portion with Matcher from @isaacs/nonrecursive-glob-match, in place of a RegExp. Items in Minimatch.set are now strings, Matcher objects, or GLOBSTAR.
  • Remove makeRe(), Minimatch#regexp, and the MMRegExp type.
  • Remove the AST class.
  • Remove the maxExtglobRecursion option.
  • An empty path portion, such as the last one in a/b/, only matches an empty pattern portion. So a/b/ no longer matches a/b/?(x) or a/b/*(x), the same as a/b/*.
  • Add the normalize option, to normalize unicode in the pattern and in each portion of the tested path.
  • Remove the debug option and the debug() method.
  • Remove the matchOne(), slashSplit(), and levelTwoFileOptimize() methods. They are internal now.
  • Fix patterns with more than one ** and sections of different lengths between them, such as **/a/b/c/**/d/**, which failed to match some paths since 10.2.3.
  • Fix partial matching of patterns with **, which since 10.2.3 matched some paths under a dot portion that ** can not walk, and did not match some paths that end in the pattern's last portion.
  • partial matching of patterns with many ** no longer takes exponential time.
  • On Windows, a .. no longer removes the drive letter, or the host and share of a UNC path, at the start of a pattern or (at optimization level 2) a path. So C:/a/../../x no longer matches x or /x.
  • On Windows, compare the host and share of UNC paths like //host/share/... case-insensitively, the same as drive letters.
  • On Windows, long UNC paths like //?/UNC/host/share/... match //host/share/... and vice versa, the same as //?/c:/... and c:/....
  • At optimization level 2, stop splitting **/.. portions once there are braceExpandMax patterns, and do not dedupe sets of more than 1000 patterns. Before, a short pattern could take minutes to compile.
  • minimatch() keeps the 256 Minimatch objects that it used most recently, so it does not compile the same pattern again.
  • Faster to compile brace patterns that make rows that are merged, such as **/*.{png,jpg,gif}, because the Matchers for the rows that are merged are not made.

10.2

... (truncated)

Commits
  • 47afe88 11.0.1
  • 77a0f5c limit **/.. optimization pass to avoid quadratic explosion
  • 6f9f131 11.0.0
  • 02dcbe4 update oxlint
  • 47b5d1a handle //?/UNC/host/share long UNC forms
  • 05bce27 do not optimize out the windows root
  • ba01806 document that a / takes priority over extglob sections
  • e5c04b4 correct 'partial' mode matching of multiple-** patterns
  • cff11d8 compare UNC host/share case-insensitively
  • c86670e benchmark scripts
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 4, 2026
@dependabot
dependabot Bot temporarily deployed to test-trigger-is November 4, 2026 15:49 Inactive
@rugpanov

rugpanov commented Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

🤖 Integration tests ✅ passed for 2e1b06ee.
View run

Bumps [minimatch](https://github.com/isaacs/minimatch) from 10.2.3 to 11.0.1.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.3...v11.0.1)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 11.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minimatch-11.0.1 branch from 2e1b06e to af86ef0 Compare November 5, 2026 12:05
@dependabot
dependabot Bot deployed to test-trigger-is November 5, 2026 12:05 Active
@github-actions

github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/vscode

Inputs:

  • PR number: 2287
  • Commit SHA: af86ef07e17134a859bb866092d24918a4a0a8ed

Checks will be approved automatically on success.

This branch was successfully deployed

1 active deployment
test-trigger-is — af86ef07 Deployed Nov 5, 2026 by dependabot[bot] via Check secrets access #2489
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant