Skip to content

build(deps): bump minimatch, eslint-plugin-sonarjs and serve - #82

Merged
MrAntix merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-7f6772e349
Sep 14, 2026
Merged

MrAntix merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-7f6772e349

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps minimatch to 3.1.5 and updates ancestor dependencies minimatch, eslint-plugin-sonarjs and serve. These dependencies need to be updated together.

Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates minimatch from 9.0.5 to 9.0.9

Commits

Updates eslint-plugin-sonarjs from 3.0.5 to 3.0.7

Commits

Updates serve from 14.2.5 to 14.2.6

Release notes

Sourced from serve's releases.

v14.2.6

Patch Changes

  • 7fcb924: Bump ajv to 8.18.0
  • b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities
Changelog

Sourced from serve's changelog.

14.2.6

Patch Changes

  • 7fcb924: Bump ajv to 8.18.0
  • b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
@MrAntix

MrAntix commented Sep 14, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.1.5 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch), [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) and [serve](https://github.com/vercel/serve). These dependencies need to be updated together.


Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `eslint-plugin-sonarjs` from 3.0.5 to 3.0.7
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `serve` from 14.2.5 to 14.2.6
- [Release notes](https://github.com/vercel/serve/releases)
- [Changelog](https://github.com/vercel/serve/blob/main/CHANGELOG.md)
- [Commits](vercel/serve@v14.2.5...v14.2.6)

---
updated-dependencies:
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 3.0.7
  dependency-type: direct:development
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
- dependency-name: serve
  dependency-version: 14.2.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7f6772e349 branch from 47878ad to 7d06e71 Compare September 14, 2026 15:40
@MrAntix
MrAntix merged commit a8f4d3f into master Sep 14, 2026
2 checks passed
@MrAntix
MrAntix deleted the dependabot/npm_and_yarn/multi-7f6772e349 branch September 14, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant