Skip to content

Bump picomatch (via audit fix) in /frontend#15

Merged
BlueManCZ merged 2 commits into
mainfrom
dependabot/npm_and_yarn/frontend/multi-bf05dc1ecf
May 18, 2026
Merged

Bump picomatch (via audit fix) in /frontend#15
BlueManCZ merged 2 commits into
mainfrom
dependabot/npm_and_yarn/frontend/multi-bf05dc1ecf

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps and picomatch. These dependencies needed to be updated together.
Updates picomatch from 4.0.3 to 4.0.4

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/multi-bf05dc1ecf branch from bd3c0a7 to 8d120e3 Compare May 18, 2026 15:36
Bumps  and [picomatch](https://github.com/micromatch/picomatch). These dependencies needed to be updated together.

Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump picomatch in /frontend Bump picomatch (via audit fix) in /frontend May 18, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/multi-bf05dc1ecf branch from 8d120e3 to 32461e9 Compare May 18, 2026 15:54
@BlueManCZ
Copy link
Copy Markdown
Owner

@copilot Can you fix the failing CI?

Agent-Logs-Url: https://github.com/BlueManCZ/contwatch/sessions/4e161542-c51b-4d1b-aafc-76bab217c65e

Co-authored-by: BlueManCZ <17854950+BlueManCZ@users.noreply.github.com>
Copy link
Copy Markdown

Copilot AI commented May 18, 2026

@copilot Can you fix the failing CI?

Fixed in 372c003 — I added the missing pnpm override config to frontend/package.json so pnpm install --frozen-lockfile matches the lockfile again. I also re-ran the frontend checks locally (pnpm install --frozen-lockfile, pnpm lint, pnpm typecheck, pnpm build). The previous CI failure is addressed; the latest GitHub run is currently action_required, not the original install failure.

Copilot AI requested a review from BlueManCZ May 18, 2026 16:10
@BlueManCZ BlueManCZ merged commit 59d4bd8 into main May 18, 2026
3 checks passed
@BlueManCZ BlueManCZ deleted the dependabot/npm_and_yarn/frontend/multi-bf05dc1ecf branch May 18, 2026 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants