Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #46808 minimatch: bump to the latest supported versions
    Infos
    #46808
    Nicolas Terray (nterray)
    2026-03-02 15:50
    2026-02-23 11:54
    48533
    Details
    minimatch: bump to the latest supported versions

    https://github.com/isaacs/minimatch/compare/v3.1.2...v10.2.2

    CVE-2026-26996 / https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26
    CVE-2026-27903 / https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj CVE-2026-27904 / https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74

    No security impact for Tuleap, ReDoS at dev/build steps, we only work on trusted content.

    Dependencies
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Nicolas Terray (nterray)
    Closed
    2026-03-02
    Attachments
    Empty
    References
    Referencing request #46808

    Git commit

    tuleap/tuleap/stable

    chore: request #46808: minimatch: 3.1.2 -> 10.2.2 6fdf524dec
    User avatar Nicolas Terray (nterray) , 2026-02-23 11:55
    Merge commit 'refs/changes/45/36945/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD master e3d7e03677
    User avatar Marie Ange Garnier (marieange) , 2026-02-23 15:01
    Revert "chore: request #46808: minimatch: 3.1.2 -> 10.2.2" 437cc82b53
    User avatar Nicolas Terray (nterray) , 2026-02-23 17:14
    Merge 'gerrit #36954' into stable/master master 32df85de27
    User avatar Thomas Gerbet (tgerbet) , 2026-02-24 08:16
    chore: Minimatch: 3.x -> 3.1.3 8007e0edad
    User avatar Thomas Gerbet (tgerbet) , 2026-02-24 15:45
    chore: Minimatch: 7.4.6 -> 7.4.8 ed9e6b86df
    User avatar Thomas Gerbet (tgerbet) , 2026-02-25 08:35
    chore: Minimatch: 9.0.4/9.0.5 -> 9.0.7 713d3e49d1
    User avatar Thomas Gerbet (tgerbet) , 2026-02-25 08:41
    chore: Minimatch: 5.1.6 -> 5.1.8 768f779bfd
    User avatar Thomas Gerbet (tgerbet) , 2026-02-25 10:16
    chore: Minimatch: 9.0.1|10.x -> 9.0.7 5453a62746
    User avatar Thomas Gerbet (tgerbet) , 2026-02-25 15:02
    chore: Minimatch: 3.x -> 3.1.4 db5768c7fd
    User avatar Thomas Gerbet (tgerbet) , 2026-02-25 17:33
    Revert "chore: Minimatch: 3.x -> 3.1.4" 2a9c8c2b23
    User avatar Kevin Traini (ktraini) , 2026-02-27 11:48
    chore: Minimatch: 3.x -> 3.1.4 af66eca807
    User avatar Kevin Traini (ktraini) , 2026-03-02 10:08
    Minimatch: 9.0.1 -> 9.0.7 d151ff31aa
    User avatar Marie Ange Garnier (marieange) , 2026-03-04 14:02
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2026-02-25 15:06
    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    User avatar
    Thomas Gerbet (tgerbet)2026-02-24 15:41
    • Summary
      -minimatch: 3.1.2 -> 10.2.2 
      +minimatch: bump to the latest supported versions 
    • Connected artifacts cleared
    User avatar
    Thomas Gerbet (tgerbet)2026-02-23 12:08
    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    User avatar
    Nicolas Terray (nterray)2026-02-23 11:58

    See gerrit #36945

    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes