Skip to content

Upgraded Minimatch annd glob version - #1767

Closed
Shubh137 wants to merge 2 commits into
gruntjs:mainfrom
Shubh137:audit_vuln_remidiation_1
Closed

Shubh137 wants to merge 2 commits into
gruntjs:mainfrom
Shubh137:audit_vuln_remidiation_1

Conversation

@Shubh137

Copy link
Copy Markdown

Hello, Npm Audit is flagging minimatch version < 3.0.4. This PR has the upgraded dependency.

@mdeweeseCanaryLabs

Copy link
Copy Markdown

@vladikoff

Hello are these sorts of changes a priority for this project?

@Krinkle

Krinkle commented Apr 7, 2026

Copy link
Copy Markdown
Member
  • The glob update seems unneeded because glob 7.1.6 depends on "minimatch": "^3.0.4", which naturally allows for any latest minimatch 3.x release to be used by npm install.
  • Minimatch 9 indeed is not compatible with Minimatch 3 and should not be updated in this way.

I'm closing this in favor of #1796.

@Krinkle Krinkle closed this Apr 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants