Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR upgrades the
minimatch
package from version 3 to 9, ensuring continued support for Node v16 while keeping the project up to date with the latest dependency improvements.Key changes
minimatch
to version 9 across relevant packages (build-utils
,cli
,client
,fs-detectors
).minimatch
v9 removes the default export.How the upgrade was done
The only breaking change that applied to
vercel/vercel
codebase was the change of default import to named import for minimatch. The change was applied using the followingast-grep
codemod:Also runnable through codemod registry: https://codemod.com/registry/minimatch-to-named-imports
Purpose of the upgrade
The current
minimatch
version did not have any known CVE reports and was secure as is. The upgrade is solely to stay on top of the latest updates and enhancements for this dependency, aligning the project with modern JavaScript practices.Node.js compatibility
Testing and verification