Skip to content

Bump the npm_and_yarn group across 1 directory with 2 updates#314

Merged
xuhdev merged 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-c548022d36
Mar 30, 2026
Merged

Bump the npm_and_yarn group across 1 directory with 2 updates#314
xuhdev merged 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-c548022d36

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 27, 2026

Bumps the npm_and_yarn group with 2 updates in the / directory: minimatch and flatted.

Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates flatted from 3.3.2 to 3.4.2

Commits
  • 3bf0909 3.4.2
  • 885ddcc fix CWE-1321
  • 0bdba70 added flatted-view to the benchmark
  • 2a02dce 3.4.1
  • fba4e8f Merge pull request #89 from WebReflection/python-fix
  • 5fe8648 added "when in Rome" also a test for PHP
  • 53517ad some minor improvement
  • b3e2a0c Fixing recursion issue in Python too
  • c4b46db Add SECURITY.md for security policy and reporting
  • f86d071 Create dependabot.yml for version updates
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 27, 2026
@dependabot dependabot bot requested a review from xuhdev as a code owner March 27, 2026 05:00
@dependabot dependabot bot added the javascript Pull requests that update javascript code label Mar 27, 2026
Bumps the npm_and_yarn group with 2 updates in the / directory: [minimatch](https://github.com/isaacs/minimatch) and [flatted](https://github.com/WebReflection/flatted).


Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `flatted` from 3.3.2 to 3.4.2
- [Commits](WebReflection/flatted@v3.3.2...v3.4.2)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c548022d36 branch from a82b047 to f5c5f5c Compare March 30, 2026 06:58
@xuhdev xuhdev merged commit 0908106 into master Mar 30, 2026
11 checks passed
@xuhdev xuhdev deleted the dependabot/npm_and_yarn/npm_and_yarn-c548022d36 branch March 30, 2026 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant