Repository navigation
chore(deps): Upgrade glob to 10.5.0 - #30
Conversation
sheplu
left a comment
sheplu
left a comment
There was a problem hiding this comment.
LGTM - I was forcing the change on CDKTF and it was working. so should this update
|
i want to merge, but i want to optimise CI/CD first.. it will kick off 4 hours of jobs and publish the pre-release… so I will hold on this for a bit more @sheplu lets focus on the CI/CD fixes |
|
Makes sense! I noticed there was a first release (https://github.com/open-constructs/cdk-terrain/releases/tag/v0.22.0), will test that on our project as well. |
### feat - feat(gha): publish Maven artifacts to Maven Central [\#64](#64) - feat: restore NuGet.org publishing [\#50](#50) - feat(provider-generator): don't emit property params [\#43](#43) ### fix - fix(cli): Pin init template to TypesScript 5.x [\#74](#74) - fix(gha): fix Go releases and update git identity [\#65](#65) - fix(provider-generator): handle inline comments with brackets in variable type parsing [\#61](#61) - fix: DEP0044 in TerraformOutput [\#2](#2) ### chore - chore: Upgrade dependencies for all [\#69](#69) - chore(gha): Adding base14 Scout CI/CD observability workflow to instrument all the github actions. [\#52](#52) - chore(deps): Upgrade minimatch to 5.1.8 [\#49](#49) - chore: add cdktn keyword to all packages [\#46](#46) - chore: update links to point to cdktn.io [\#45](#45) - chore: update more references to cdktf [\#44](#44) - chore: fix typo in CONTRIBUTING.md [\#42](#42) - chore(deps): Upgrade validator to 13.15.22 [\#38](#38) - chore(deps): Upgrade glob to 10.5.0 [\#30](#30) - chore: Upgrade dependencies for all [\#22](#22) - chore: Upgrade dependencies for lib [\#18](#18) - chore(deps): bump the github-actions-backward-compatible group with 4 updates [\#15](#15) - chore(deps): bump the github-actions-breaking group with 11 updates [\#14](#14) ### refactor - refactor(hcl2cdk): global setup/teardown along with parallel tests to speed the b… [\#41](#41)
|
I'm going to lock this pull request because it has been closed for 30 days. This helps our maintainers find and focus on the active issues. If you've found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further. |
Related issue
https://nvd.nist.gov/vuln/detail/CVE-2025-64756
(I haven't been able to test this, but looking at the changelog it should be fine: isaacs/node-glob@v10.4.5...v10.5.0, looking at how it's used in this repo)