Repository navigation
Bump globby from 14.1.0 to 16.2.4 - #194
Conversation
Bumps [globby](https://github.com/sindresorhus/globby) from 14.1.0 to 16.2.4. - [Release notes](https://github.com/sindresorhus/globby/releases) - [Commits](sindresorhus/globby@v14.1.0...v16.2.4) --- updated-dependencies: - dependency-name: globby dependency-version: 16.2.4 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
ajaynes-godaddy
left a comment
ajaynes-godaddy
left a comment
There was a problem hiding this comment.
Dependency: globby 14.1.0 → 16.2.4 (two major version bumps)
Usage in this repo: Used in tasks/decaffeinate.js (one-time CoffeeScript migration helper) and tasks/lint.js (resolving glob patterns for ESLint), both via dynamic import() inside task functions.
CI validation: The test workflow runs on Node 24 and passed. However, the only test touching these files is a smoke test confirming tasks/*.js modules import without crashing — it never calls decaffeinateTask or runESLint, so CI doesn't exercise globby's actual glob-resolution behavior.
Manual verification: Since CI didn't exercise the real usage, I manually tested globby 16.2.4 with both plain and negative (!pattern) glob patterns — matching exactly how lint.js and decaffeinate.js call it. Both resolved correctly.
Breaking changes checked:
- v15 requires Node ≥20 — repo's
package.jsonengines.nodesays>=18(pre-existing drift, not introduced by this PR; CI itself runs Node 24, so no actual failure). Worth a follow-up to updateengines.node, but not a blocker. - v16 changes
.gitignoreresolution to walk up to the repo root — not applicable, since neither usage in this repo passes agitignoreoption.
Result: Verified safe.
Reviewed by Claude Code assisting @ajaynes-godaddy
Bumps globby from 14.1.0 to 16.2.4.
Release notes
Sourced from globby's releases.
... (truncated)
Commits
46cf13f16.2.419e1fceFixignoreoption disabling thegitignoreoption4f95a1416.2.35775ffbFix backslash-escaped.gitignorerules6807768Meta tweaks14f4f4716.2.28bf8f54Fix: Do not enumerate ignored directories withgitignoreoption47e7f6516.2.1e7bd988Fixgitignoreignoring an entire checkout under an anchored ancestor path (...60e816716.2.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)