diff --git a/package.json b/package.json index f986ae4aaa58..5c0a27914c74 100644 --- a/package.json +++ b/package.json @@ -90,6 +90,8 @@ "minimatch@<3.1.5": "3.1.5", "minimatch@>=9.0.0 < 9.0.7": "9.0.9", "minimatch@>=10.0.0 < 10.2.4": "10.2.4", + "picomatch@>=2.0.0 <2.3.2": "2.3.2", + "picomatch@>=4.0.0 <4.0.4": "4.0.4", "serialize-javascript@<=7.0.2": "7.0.4", "flatted@<3.4.0": "^3.4.0", "undici@<7.24.0": "^7.24.0", diff --git a/packages/sbom/package.json b/packages/sbom/package.json index 8be50b63aea9..bb4ec23a98b8 100644 --- a/packages/sbom/package.json +++ b/packages/sbom/package.json @@ -12,6 +12,7 @@ "body-parser@>=2.2.0 <2.2.1": ">=2.2.1", "jws@=4.0.0": ">=4.0.1", "minimatch@>=10.0.0 <10.2.3": "^10.2.4", + "picomatch@>=4.0.0 <4.0.4": "4.0.4", "qs": ">=6.14.1", "tar@<=7.5.9": "^7.5.10", "undici@<7.24.0": "^7.24.0" diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index efbd862e394f..aec5627cc900 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -187,6 +187,8 @@ overrides: minimatch@<3.1.5: 3.1.5 minimatch@>=9.0.0 < 9.0.7: 9.0.9 minimatch@>=10.0.0 < 10.2.4: 10.2.4 + picomatch@>=2.0.0 <2.3.2: 2.3.2 + picomatch@>=4.0.0 <4.0.4: 4.0.4 serialize-javascript@<=7.0.2: 7.0.4 flatted@<3.4.0: ^3.4.0 undici@<7.24.0: ^7.24.0 @@ -10931,7 +10933,7 @@ packages: resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==} engines: {node: '>=12.0.0'} peerDependencies: - picomatch: ^3 || ^4 + picomatch: 4.0.4 peerDependenciesMeta: picomatch: optional: true @@ -11387,16 +11389,16 @@ packages: glob@5.0.15: resolution: {integrity: sha512-c9IPMazfRITpmAAKi22dK1VKxGDX9ehhqfABDriL/lzO92xcUKEJPQHrVA/2YHSNFB4iFlykVmWvwo48nr3OxA==} - deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me + deprecated: Glob versions prior to v9 are no longer supported glob@7.2.3: resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==} - deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me + deprecated: Glob versions prior to v9 are no longer supported glob@8.1.0: resolution: {integrity: sha512-r8hpEjiQEYlF2QU0df3dS+nxxSIreXQS1qRhMJM0Q5NDdR386C7jb7Hwwod8Fgiuex+k0GFjgft18yvxm5XoCQ==} engines: {node: '>=12'} - deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me + deprecated: Glob versions prior to v9 are no longer supported global-modules@1.0.0: resolution: {integrity: sha512-sKzpEkf11GpOFuw0Zzjzmt4B4UZwjOcG757PPvrfhxcLFbq0wpsgpOqxpxtxFiCG4DtG93M6XRVbF2oGdev7bg==} @@ -15010,16 +15012,12 @@ packages: picocolors@1.1.1: resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==} - picomatch@2.3.1: - resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==} + picomatch@2.3.2: + resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==} engines: {node: '>=8.6'} - picomatch@4.0.2: - resolution: {integrity: sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg==} - engines: {node: '>=12'} - - picomatch@4.0.3: - resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==} + picomatch@4.0.4: + resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==} engines: {node: '>=12'} pidtree@0.5.0: @@ -15402,7 +15400,7 @@ packages: puppeteer@23.6.1: resolution: {integrity: sha512-8+ALGQgwXd3P/tGcuSsxTPGDaOQIjcDIm04I5hpWZv/PiN5q8bQNHRUyfYrifT+flnM9aTWCP7tLEzuB6SlIgA==} engines: {node: '>=18'} - deprecated: < 24.15.0 is no longer supported + deprecated: < 24.10.2 is no longer supported hasBin: true pure-rand@6.1.0: @@ -19032,7 +19030,7 @@ snapshots: mini-css-extract-plugin: 2.9.2(webpack@5.98.0(@swc/core@1.15.3)(esbuild@0.25.4)) open: 10.1.0 ora: 5.4.1 - picomatch: 4.0.2 + picomatch: 4.0.4 piscina: 4.8.0 postcss: 8.5.2 postcss-loader: 8.1.1(postcss@8.5.2)(typescript@5.5.4)(webpack@5.98.0(@swc/core@1.15.3)(esbuild@0.25.4)) @@ -19121,7 +19119,7 @@ snapshots: mini-css-extract-plugin: 2.9.2(webpack@5.98.0(@swc/core@1.15.3)(esbuild@0.25.4)) open: 10.1.0 ora: 5.4.1 - picomatch: 4.0.2 + picomatch: 4.0.4 piscina: 4.8.0 postcss: 8.5.2 postcss-loader: 8.1.1(postcss@8.5.2)(typescript@5.8.3)(webpack@5.98.0(@swc/core@1.15.3)(esbuild@0.25.4)) @@ -19208,7 +19206,7 @@ snapshots: mini-css-extract-plugin: 2.9.4(webpack@5.105.0(@swc/core@1.15.3)(esbuild@0.27.2)) open: 11.0.0 ora: 9.0.0 - picomatch: 4.0.3 + picomatch: 4.0.4 piscina: 5.1.4 postcss: 8.5.6 postcss-loader: 8.2.0(postcss@8.5.6)(typescript@5.9.3)(webpack@5.105.0(@swc/core@1.15.3)(esbuild@0.27.2)) @@ -19282,7 +19280,7 @@ snapshots: ajv: 8.12.0 ajv-formats: 2.1.1(ajv@8.12.0) jsonc-parser: 3.2.0 - picomatch: 2.3.1 + picomatch: 2.3.2 rxjs: 7.8.1 source-map: 0.7.4 @@ -19291,7 +19289,7 @@ snapshots: ajv: 8.17.1 ajv-formats: 3.0.1(ajv@8.17.1) jsonc-parser: 3.3.1 - picomatch: 4.0.2 + picomatch: 4.0.4 rxjs: 7.8.1 source-map: 0.7.4 optionalDependencies: @@ -19302,7 +19300,7 @@ snapshots: ajv: 8.18.0 ajv-formats: 3.0.1(ajv@8.18.0) jsonc-parser: 3.3.1 - picomatch: 4.0.3 + picomatch: 4.0.4 rxjs: 7.8.2 source-map: 0.7.6 optionalDependencies: @@ -19365,7 +19363,7 @@ snapshots: magic-string: 0.30.17 mrmime: 2.0.1 parse5-html-rewriting-stream: 7.0.0 - picomatch: 4.0.2 + picomatch: 4.0.4 piscina: 4.8.0 rollup: 4.59.0 sass: 1.85.0 @@ -19416,7 +19414,7 @@ snapshots: magic-string: 0.30.17 mrmime: 2.0.1 parse5-html-rewriting-stream: 7.0.0 - picomatch: 4.0.2 + picomatch: 4.0.4 piscina: 4.8.0 rollup: 4.59.0 sass: 1.85.0 @@ -19467,7 +19465,7 @@ snapshots: magic-string: 0.30.17 mrmime: 2.0.1 parse5-html-rewriting-stream: 7.0.0 - picomatch: 4.0.2 + picomatch: 4.0.4 piscina: 4.8.0 rollup: 4.59.0 sass: 1.85.0 @@ -19518,7 +19516,7 @@ snapshots: magic-string: 0.30.21 mrmime: 2.0.1 parse5-html-rewriting-stream: 8.0.0 - picomatch: 4.0.3 + picomatch: 4.0.4 piscina: 5.1.4 rolldown: 1.0.0-beta.58 sass: 1.97.1 @@ -24431,7 +24429,7 @@ snapshots: jsonc-parser: 3.2.0 npm-run-path: 4.0.1 picocolors: 1.1.1 - picomatch: 4.0.2 + picomatch: 4.0.4 semver: 7.7.4 source-map-support: 0.5.19 tinyglobby: 0.2.15 @@ -24481,7 +24479,7 @@ snapshots: chalk: 4.1.2 enquirer: 2.3.6 nx: 22.4.5(@swc/core@1.15.3) - picomatch: 4.0.2 + picomatch: 4.0.4 semver: 7.7.4 tslib: 2.6.3 yargs-parser: 21.1.1 @@ -25377,14 +25375,14 @@ snapshots: dependencies: '@types/estree': 0.0.39 estree-walker: 1.0.1 - picomatch: 2.3.1 + picomatch: 2.3.2 rollup: 4.59.0 '@rollup/pluginutils@5.1.3(rollup@4.59.0)': dependencies: '@types/estree': 1.0.8 estree-walker: 2.0.2 - picomatch: 4.0.3 + picomatch: 4.0.4 optionalDependencies: rollup: 4.59.0 @@ -25767,7 +25765,7 @@ snapshots: eslint-visitor-keys: 4.2.1 espree: 10.4.0 estraverse: 5.3.0 - picomatch: 4.0.3 + picomatch: 4.0.4 '@swc/core-darwin-arm64@1.15.3': optional: true @@ -27083,7 +27081,7 @@ snapshots: alien-signals: 2.0.7 muggle-string: 0.4.1 path-browserify: 1.0.1 - picomatch: 4.0.3 + picomatch: 4.0.4 optionalDependencies: typescript: 5.9.3 @@ -27576,7 +27574,7 @@ snapshots: anymatch@3.1.3: dependencies: normalize-path: 3.0.0 - picomatch: 2.3.1 + picomatch: 2.3.2 app-module-path@2.2.0: {} @@ -32140,9 +32138,9 @@ snapshots: dependencies: pend: 1.2.0 - fdir@6.5.0(picomatch@4.0.3): + fdir@6.5.0(picomatch@4.0.4): optionalDependencies: - picomatch: 4.0.3 + picomatch: 4.0.4 fecha@4.2.3: {} @@ -35581,7 +35579,7 @@ snapshots: chalk: 4.1.2 ci-info: 3.9.0 graceful-fs: 4.2.11 - picomatch: 2.3.1 + picomatch: 2.3.2 jest-util@30.2.0: dependencies: @@ -35590,7 +35588,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.3.0 graceful-fs: 4.2.11 - picomatch: 4.0.3 + picomatch: 4.0.4 jest-validate@29.7.0: dependencies: @@ -36959,12 +36957,12 @@ snapshots: micromatch@4.0.5: dependencies: braces: 3.0.3 - picomatch: 2.3.1 + picomatch: 2.3.2 micromatch@4.0.8: dependencies: braces: 3.0.3 - picomatch: 2.3.1 + picomatch: 2.3.2 miller-rabin@4.0.1: dependencies: @@ -38290,11 +38288,9 @@ snapshots: picocolors@1.1.1: {} - picomatch@2.3.1: {} - - picomatch@4.0.2: {} + picomatch@2.3.2: {} - picomatch@4.0.3: {} + picomatch@4.0.4: {} pidtree@0.5.0: {} @@ -39020,7 +39016,7 @@ snapshots: readdirp@3.6.0: dependencies: - picomatch: 2.3.1 + picomatch: 2.3.2 readdirp@4.0.2: {} @@ -41627,8 +41623,8 @@ snapshots: tinyglobby@0.2.15: dependencies: - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 tinyrainbow@2.0.0: {} @@ -41755,7 +41751,7 @@ snapshots: ts-declaration-location@1.0.7(typescript@4.9.5): dependencies: - picomatch: 4.0.3 + picomatch: 4.0.4 typescript: 4.9.5 ts-dedent@2.2.0: {} @@ -42449,7 +42445,7 @@ snapshots: dependencies: '@jridgewell/remapping': 2.3.5 acorn: 8.16.0 - picomatch: 4.0.3 + picomatch: 4.0.4 webpack-virtual-modules: 0.6.2 unquote@1.1.1: {} @@ -42772,8 +42768,8 @@ snapshots: vite@6.4.1(@types/node@20.11.17)(jiti@2.6.1)(less@4.2.2)(lightningcss@1.30.2)(sass-embedded@1.97.1)(sass@1.85.0)(terser@5.39.0)(yaml@2.8.3): dependencies: esbuild: 0.25.0 - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 postcss: 8.5.6 rollup: 4.59.0 tinyglobby: 0.2.15 @@ -42791,8 +42787,8 @@ snapshots: vite@6.4.1(@types/node@25.5.0)(jiti@2.6.1)(less@4.2.2)(lightningcss@1.30.2)(sass-embedded@1.97.1)(sass@1.85.0)(terser@5.39.0)(yaml@2.8.3): dependencies: esbuild: 0.25.0 - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 postcss: 8.5.6 rollup: 4.59.0 tinyglobby: 0.2.15 @@ -42810,8 +42806,8 @@ snapshots: vite@6.4.1(@types/node@25.5.0)(jiti@2.6.1)(less@4.4.2)(lightningcss@1.30.2)(sass-embedded@1.97.1)(sass@1.85.0)(terser@5.46.0)(yaml@2.8.3): dependencies: esbuild: 0.25.0 - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 postcss: 8.5.6 rollup: 4.59.0 tinyglobby: 0.2.15 @@ -42830,8 +42826,8 @@ snapshots: vite@6.4.1(@types/node@25.5.0)(jiti@2.6.1)(less@4.4.2)(lightningcss@1.30.2)(sass-embedded@1.97.1)(sass@1.97.1)(terser@5.46.0)(yaml@2.8.3): dependencies: esbuild: 0.25.0 - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 postcss: 8.5.6 rollup: 4.59.0 tinyglobby: 0.2.15 @@ -42849,8 +42845,8 @@ snapshots: vite@7.3.0(@types/node@20.12.8)(jiti@2.6.1)(less@4.4.2)(lightningcss@1.30.2)(sass-embedded@1.97.1)(sass@1.97.1)(terser@5.44.1)(yaml@2.8.3): dependencies: esbuild: 0.27.2 - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 postcss: 8.5.8 rollup: 4.59.0 tinyglobby: 0.2.15