Skip to content

chore: upgrade deps for minimatch vuln. - #107

Merged
knightedcodemonkey merged 1 commit into
mainfrom
bananas
Mar 7, 2026
Merged

chore: upgrade deps for minimatch vuln.#107
knightedcodemonkey merged 1 commit into
mainfrom
bananas

Conversation

@knightedcodemonkey

Copy link
Copy Markdown
Owner

No description provided.

Copilot AI review requested due to automatic review settings March 7, 2026 17:13

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates transitive dependencies to address a reported minimatch vulnerability, refreshes related tooling versions, and improves error chaining by attaching underlying errors as cause.

Changes:

  • Bump package version to 4.0.1 and update dev tooling (ESLint 10, c8 11, vite 7.3.1).
  • Update lockfile to pull in minimatch@10.x (and related dependency tree updates).
  • Add cause to a couple of thrown Errors for better debugging context.

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated no comments.

Show a summary per file
File Description
src/util.js Attaches JSON parse error as cause when --exports-config is invalid.
src/init.js Minor initialization cleanup (let parsed, let stats, let pkg).
src/duel.js Attaches filesystem error as cause when dual build output is missing.
package.json Version bump + devDependency upgrades (ESLint/c8/vite) aligned with vuln remediation.
package-lock.json Lockfile refresh pulling in patched minimatch and updated toolchain dependency graph.
eslint.config.js Removes explicit n/no-unsupported-features/node-builtins overrides (config simplification).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@codecov

codecov Bot commented Mar 7, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 70.00000% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 93.54%. Comparing base (ffafd84) to head (4746eb9).
⚠️ Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
src/duel.js 0.00% 3 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #107      +/-   ##
==========================================
- Coverage   93.62%   93.54%   -0.08%     
==========================================
  Files           4        4              
  Lines        2195     2199       +4     
==========================================
+ Hits         2055     2057       +2     
- Misses        140      142       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@knightedcodemonkey
knightedcodemonkey merged commit de5c34a into main Mar 7, 2026
10 checks passed
@knightedcodemonkey
knightedcodemonkey deleted the bananas branch March 7, 2026 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants