Bump minimatch, glob and jake

[dependabot]

Bumps minimatch to 10.2.2 and updates ancestor dependencies minimatch, glob and jake. These dependencies need to be updated together.

Updates minimatch from 3.0.4 to 10.2.2

Changelog

Sourced from minimatch's changelog.

change log

10.2

• Add braceExpandMax option

10.1

• Add magicalBraces option for escape
• Fix makeRe when partial: true is set.
• Fix makeRe when pattern ends in a final ** path part.

10.0

• Require node 20 or 22 and higher

9.0

• No default export, only named exports.

8.0

• Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
• Bump required Node.js version

7.4

• Add escape() method
• Add unescape() method
• Add Minimatch.hasMagic() method

7.3

• Add support for posix character classes in a unicode-aware way.

7.2

• Add windowsNoMagicRoot option

7.1

• Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

... (truncated)

Commits

• f42b239 10.2.2
• fa2133b update deps
• b9d0153 ci: update action workflows
• 35d9ee9 expand engines to include node 18
• 6d7ac34 10.2.1
• 2e111f3 coalesce consecutive non-globstar * characters
• 1a62a2a 10.2.0
• 758b5a3 changelog 10.2
• 903e50b add braceExpandMax option, format
• a50a110 10.1.3
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates glob from 7.1.3 to 13.0.6

Changelog

Sourced from glob's changelog.

changeglob

13

• Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

• Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
• Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
• Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

• e80cb38 13.0.6
• 9cdbbff revert tsgo, not ready for test coverage correctness yet
• 89c99ba use tsgo compiler
• b7275d5 update deps, expand engines to include node 18
• 942e360 update workflows, pull taprc out of package.json
• 4a0d53c update tap for mockImport bugfix
• ef94ad2 update tap
• 180c2d4 update docs
• 37993c8 remove stray console.error in test
• 03ae4c2 13.0.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for glob since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates jake from 8.0.19 to 10.9.4

Changelog

Sourced from jake's changelog.

v10

• Support for generic exported functions as tasks
• Experimental series function for composing tasks
• Added task timing, begin/end task output

• Next-tick kickoff/completion of tasks
• Support both sync and async tasks in experimental series
• Polling to ensure 100% sequential execution
• Begin updating to ESNext syntax

v8

• Concurrent task execution
• Allow prereqs for PackageTask + PublishTask
• LiveScript support
• Custom publish function, not just string command

• Change to whole-number versioning
• Change to ESLint for linting
• Support newer Nodes, dropped support for older
• Fixes for WatchTask
• Numerous community fixes

v0.7

• Updated API for include/exclude in PublishTask
• beforeEach/afterEach for TaskTask
• Custom publishing command for PublishTask
• Tests for PublishTask
• Throttling for WatchTask

• FileList fixes for Windows
• Fixed output for stdout/stderr when piped
• Numerous fixes for TestTask
• NpmPublish task renamed to simply PublishTask
• Chalk for color output (compat with strict mode)

v0.6

• Rule, for generating file-tasks on the fly
• WatchTask, for running tasks on file/directory changes
• Return values for tasks
• Promise-based async task completion
• Multiple Git branches for NpmPublishTask
• Linting codebase with JSHint
• Filled out top-level API methods for creating other task-types

• Better API for including/excluding files from NpmPublishTask

v0.5

• Interactive exec
• Node v0.10 compatibility (fixed their broken PPI)
• Docs for async management with manual invocation
• More lifecycle events emitted

• Better Windows support for FileList pathnames
• Faster FileTask execution

... (truncated)

Commits

• 28a9960 Version 10.9.4
• 674e639 Version 10.9.3
• 4a9aea8 Removed lock file
• 8da5b86 Merge pull request #435 from Fuzzyma/update-deps
• a372ae7 chore(deps): Update deps to newest versions
• ce65fa5 Merge pull request #434 from Fuzzyma/replace-chalk-with-picocolors
• 1661dd9 chore(deps): Replace chalk with picocolors
• 9788d89 Updated deps
• 3566823 Version 10.9.2
• 7b8c31d Added cjs ext
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.