From d0f3465c44794e2118230ef173fb0097b77b4fde Mon Sep 17 00:00:00 2001 From: Arjen Korevaar Date: Fri, 27 Feb 2026 13:45:56 +0100 Subject: [PATCH 1/2] Updated minimatch --- node/package-lock.json | 100 +++++++++++++++-------------------------- node/package.json | 4 +- 2 files changed, 39 insertions(+), 65 deletions(-) diff --git a/node/package-lock.json b/node/package-lock.json index 55e0409b1..818828155 100644 --- a/node/package-lock.json +++ b/node/package-lock.json @@ -6,11 +6,11 @@ "packages": { "": { "name": "azure-pipelines-task-lib", - "version": "5.2.3", + "version": "5.2.6", "license": "MIT", "dependencies": { "adm-zip": "^0.5.10", - "minimatch": "3.0.5", + "minimatch": "10.2.4", "nodejs-file-downloader": "^4.11.1", "q": "^1.5.1", "semver": "^5.7.2", @@ -18,7 +18,7 @@ "uuid": "^3.0.1" }, "devDependencies": { - "@types/minimatch": "3.0.3", + "@types/minimatch": "6.0.0", "@types/mocha": "^10.0.10", "@types/node": "^16.11.39", "@types/q": "^1.5.4", @@ -28,29 +28,6 @@ "typescript": "^4.9.5" } }, - "node_modules/@isaacs/balanced-match": { - "version": "4.0.1", - "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/@isaacs/balanced-match/-/balanced-match-4.0.1.tgz", - "integrity": "sha1-MIHa28NGBmG3UedZHX+upd853Sk=", - "dev": true, - "license": "MIT", - "engines": { - "node": "20 || >=22" - } - }, - "node_modules/@isaacs/brace-expansion": { - "version": "5.0.0", - "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/@isaacs/brace-expansion/-/brace-expansion-5.0.0.tgz", - "integrity": "sha1-Sz2rq32OdaQpQUqWvWe/TB0T4PM=", - "dev": true, - "license": "MIT", - "dependencies": { - "@isaacs/balanced-match": "^4.0.1" - }, - "engines": { - "node": "20 || >=22" - } - }, "node_modules/@isaacs/cliui": { "version": "8.0.2", "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/@isaacs/cliui/-/cliui-8.0.2.tgz", @@ -116,11 +93,15 @@ } }, "node_modules/@types/minimatch": { - "version": "3.0.3", - "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/@types/minimatch/-/minimatch-3.0.3.tgz", - "integrity": "sha1-PcoOPzOyAPx9ETnAzZbBJoyt/Z0=", + "version": "6.0.0", + "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/@types/minimatch/-/minimatch-6.0.0.tgz", + "integrity": "sha1-TSB7HMlBNnvc0ZWjp4Gn5Pw7HgM=", + "deprecated": "This is a stub types definition. minimatch provides its own type definitions, so you do not need this installed.", "dev": true, - "license": "MIT" + "license": "MIT", + "dependencies": { + "minimatch": "*" + } }, "node_modules/@types/mocha": { "version": "10.0.10", @@ -222,16 +203,28 @@ "version": "1.0.2", "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/balanced-match/-/balanced-match-1.0.2.tgz", "integrity": "sha1-6D46fj8wCzTLnYf2FfoMvzV2kO4=", + "dev": true, "license": "MIT" }, "node_modules/brace-expansion": { - "version": "1.1.11", - "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/brace-expansion/-/brace-expansion-1.1.11.tgz", - "integrity": "sha1-PH/L9SnYcibz0vUrlm/1Jx60Qd0=", + "version": "5.0.3", + "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/brace-expansion/-/brace-expansion-5.0.3.tgz", + "integrity": "sha1-apxsJo+FtTlZ7FJ66v4PcwAlju8=", "license": "MIT", "dependencies": { - "balanced-match": "^1.0.0", - "concat-map": "0.0.1" + "balanced-match": "^4.0.2" + }, + "engines": { + "node": "18 || 20 || >=22" + } + }, + "node_modules/brace-expansion/node_modules/balanced-match": { + "version": "4.0.4", + "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/balanced-match/-/balanced-match-4.0.4.tgz", + "integrity": "sha1-v7EGYv7tgZaixi58aOF3IMJ0F5o=", + "license": "MIT", + "engines": { + "node": "18 || 20 || >=22" } }, "node_modules/braces": { @@ -410,12 +403,6 @@ "dev": true, "license": "MIT" }, - "node_modules/concat-map": { - "version": "0.0.1", - "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/concat-map/-/concat-map-0.0.1.tgz", - "integrity": "sha1-2Klr13/Wjfd5OnMDajug1UBdR3s=", - "license": "MIT" - }, "node_modules/cross-spawn": { "version": "7.0.6", "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/cross-spawn/-/cross-spawn-7.0.6.tgz", @@ -695,22 +682,6 @@ "node": ">= 6" } }, - "node_modules/glob/node_modules/minimatch": { - "version": "10.1.1", - "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/minimatch/-/minimatch-10.1.1.tgz", - "integrity": "sha1-5uYbmwwdyrEWtafRRY6LaunnOlU=", - "dev": true, - "license": "BlueOak-1.0.0", - "dependencies": { - "@isaacs/brace-expansion": "^5.0.0" - }, - "engines": { - "node": "20 || >=22" - }, - "funding": { - "url": "https://github.com/sponsors/isaacs" - } - }, "node_modules/has-flag": { "version": "4.0.0", "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/has-flag/-/has-flag-4.0.0.tgz", @@ -975,15 +946,18 @@ } }, "node_modules/minimatch": { - "version": "3.0.5", - "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/minimatch/-/minimatch-3.0.5.tgz", - "integrity": "sha1-TajxKQ7g8PjoPWDKafjxNAaGBKM=", - "license": "ISC", + "version": "10.2.4", + "resolved": "https://pkgs.dev.azure.com/mseng/PipelineTools/_packaging/PipelineTools_PublicPackages/npm/registry/minimatch/-/minimatch-10.2.4.tgz", + "integrity": "sha1-Rls6zL0CGLgoH1MB4nztxpf5b94=", + "license": "BlueOak-1.0.0", "dependencies": { - "brace-expansion": "^1.1.7" + "brace-expansion": "^5.0.2" }, "engines": { - "node": "*" + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" } }, "node_modules/minipass": { diff --git a/node/package.json b/node/package.json index e8ff495d5..1119c06f1 100644 --- a/node/package.json +++ b/node/package.json @@ -28,7 +28,7 @@ "homepage": "https://github.com/Microsoft/azure-pipelines-task-lib", "dependencies": { "adm-zip": "^0.5.10", - "minimatch": "3.0.5", + "minimatch": "10.2.4", "nodejs-file-downloader": "^4.11.1", "q": "^1.5.1", "semver": "^5.7.2", @@ -36,7 +36,7 @@ "uuid": "^3.0.1" }, "devDependencies": { - "@types/minimatch": "3.0.3", + "@types/minimatch": "6.0.0", "@types/mocha": "^10.0.10", "@types/node": "^16.11.39", "@types/q": "^1.5.4", From f16266f0758b41fb0f0dece4624a8798e885ff5d Mon Sep 17 00:00:00 2001 From: Arjen Korevaar Date: Fri, 27 Feb 2026 14:17:35 +0100 Subject: [PATCH 2/2] Bump version from 5.2.6 to 5.2.7 --- node/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/node/package.json b/node/package.json index 1119c06f1..b44e2558c 100644 --- a/node/package.json +++ b/node/package.json @@ -1,6 +1,6 @@ { "name": "azure-pipelines-task-lib", - "version": "5.2.6", + "version": "5.2.7", "description": "Azure Pipelines Task SDK", "main": "./task.js", "typings": "./task.d.ts",