Skip to content

chore(frontend): pin minimatch to 10.2.3#2238

Merged
topher-lo merged 1 commit intomainfrom
codex/pin-minimatch-dependency-to-10.2.3
Mar 3, 2026
Merged

chore(frontend): pin minimatch to 10.2.3#2238
topher-lo merged 1 commit intomainfrom
codex/pin-minimatch-dependency-to-10.2.3

Conversation

@topher-lo
Copy link
Contributor

@topher-lo topher-lo commented Mar 3, 2026

Motivation

  • Ensure the frontend dependency graph resolves minimatch to the exact patched version 10.2.3 so all consumers and transitive references use the intended release.

Description

  • Updated frontend/package.json pnpm overrides to set minimatch => 10.2.3.
  • Regenerated frontend/pnpm-lock.yaml so all lockfile entries and resolved packages now reference minimatch@10.2.3 (integrity and package entries updated).

Testing

  • Ran cd frontend && pnpm install --lockfile-only which completed successfully.
  • Ran cd frontend && pnpm install which completed successfully and updated node_modules per lockfile.
  • Ran cd frontend && pnpm check (Biomé checks) which completed successfully with no fixes required.

Codex Task


Summary by cubic

Pin minimatch to 10.2.3 in the frontend to enforce the patched version across all direct and transitive dependencies. Updated the lockfile to ensure consistent installs.

  • Dependencies
    • Set pnpm override: minimatch → 10.2.3 in frontend/package.json
    • Regenerated pnpm-lock.yaml so all resolutions point to minimatch@10.2.3

Written for commit c26feb6. Summary will update on new commits.

@topher-lo topher-lo merged commit 1e9a9d1 into main Mar 3, 2026
10 checks passed
@topher-lo topher-lo deleted the codex/pin-minimatch-dependency-to-10.2.3 branch March 3, 2026 04:49
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant