Skip to content

chore(deps): bump picomatch from 2.3.1 to 2.3.2#2109

Open
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/picomatch-2.3.2
Open

chore(deps): bump picomatch from 2.3.1 to 2.3.2#2109
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/picomatch-2.3.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps picomatch from 2.3.1 to 2.3.2.

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/picomatch-2.3.2 branch from 1e16488 to e6dad08 Compare March 31, 2026 01:34
trillium
trillium approved these changes Apr 28, 2026
View reviewed changes

@trillium trillium left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency patch/minor bump — safe to merge per security review.

@trillium

trillium commented Apr 28, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/picomatch-2.3.2 branch from e6dad08 to fb10bbe Compare April 28, 2026 08:33
@trillium

trillium commented Apr 28, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
chore(deps): bump picomatch from 2.3.1 to 2.3.2
5b185e7 
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/picomatch-2.3.2 branch from fb10bbe to 5b185e7 Compare April 28, 2026 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@trillium trillium trillium approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@trillium