Skip to content

build(deps): bump minimatch from 3.1.2 to 3.1.5#480

Merged
crazy-max merged 2 commits intomasterfrom
dependabot/npm_and_yarn/minimatch-3.1.3
Mar 3, 2026
Merged

build(deps): bump minimatch from 3.1.2 to 3.1.5#480
crazy-max merged 2 commits intomasterfrom
dependabot/npm_and_yarn/minimatch-3.1.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2026

Bumps minimatch from 3.1.2 to 3.1.3.

Commits
  • 00c323b 3.1.3
  • 30486b2 update CI matrix and actions
  • 9c31b2d update test expectations for coalesced consecutive stars
  • 46fe687 coalesce consecutive non-globstar * characters
  • 5a9ccbd [meta] update publishConfig.tag to legacy-v3
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 27, 2026

A newer version of minimatch exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@crazy-max
Copy link
Member

@dependabot recreate

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.3.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.3)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/minimatch-3.1.3 branch from 5177855 to 64bf327 Compare March 3, 2026 12:52
@crazy-max crazy-max changed the title build(deps): bump minimatch from 3.1.2 to 3.1.3 build(deps): bump minimatch from 3.1.2 to 3.1.5 Mar 3, 2026
crazy-max
crazy-max previously approved these changes Mar 3, 2026
@crazy-max crazy-max merged commit 483f484 into master Mar 3, 2026
48 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/minimatch-3.1.3 branch March 3, 2026 12:55
umati-bot added a commit to umati/Sample-Server that referenced this pull request Mar 6, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | major | `v3.12.0` → `v4.0.0` |

---

### Release Notes

<details>
<summary>docker/setup-buildx-action (docker/setup-buildx-action)</summary>

### [`v4.0.0`](https://github.com/docker/setup-buildx-action/releases/tag/v4.0.0)

[Compare Source](docker/setup-buildx-action@v3.12.0...v4.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;483](docker/setup-buildx-action#483)
- Remove deprecated inputs/outputs by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;464](docker/setup-buildx-action#464)
- Switch to ESM and update config/test wiring by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;481](docker/setup-buildx-action#481)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#&#8203;475](docker/setup-buildx-action#475)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.63.0 to 0.79.0 in [#&#8203;482](docker/setup-buildx-action#482) [#&#8203;485](docker/setup-buildx-action#485)
- Bump js-yaml from 4.1.0 to 4.1.1 in [#&#8203;452](docker/setup-buildx-action#452)
- Bump lodash from 4.17.21 to 4.17.23 in [#&#8203;472](docker/setup-buildx-action#472)
- Bump minimatch from 3.1.2 to 3.1.5 in [#&#8203;480](docker/setup-buildx-action#480)

**Full Changelog**: <docker/setup-buildx-action@v3.12.0...v4.0.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40Ni42IiwidXBkYXRlZEluVmVyIjoiNDMuNDYuNiIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: https://codeberg.org/umati/Sample-Server/pulls/1658
Co-authored-by: umati-bot <git-bot@umati.org>
Co-committed-by: umati-bot <git-bot@umati.org>
mergify bot added a commit to robfrank/linklift that referenced this pull request Mar 10, 2026
…ip ci]

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.0.0.
Release notes

*Sourced from [docker/setup-buildx-action's releases](https://github.com/docker/setup-buildx-action/releases).*

> v4.0.0
> ------
>
> * Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [`@​crazy-max`](https://github.com/crazy-max) in [docker/setup-buildx-action#483](https://redirect.github.com/docker/setup-buildx-action/pull/483)
> * Remove deprecated inputs/outputs by [`@​crazy-max`](https://github.com/crazy-max) in [docker/setup-buildx-action#464](https://redirect.github.com/docker/setup-buildx-action/pull/464)
> * Switch to ESM and update config/test wiring by [`@​crazy-max`](https://github.com/crazy-max) in [docker/setup-buildx-action#481](https://redirect.github.com/docker/setup-buildx-action/pull/481)
> * Bump `@​actions/core` from 1.11.1 to 3.0.0 in [docker/setup-buildx-action#475](https://redirect.github.com/docker/setup-buildx-action/pull/475)
> * Bump `@​docker/actions-toolkit` from 0.63.0 to 0.79.0 in [docker/setup-buildx-action#482](https://redirect.github.com/docker/setup-buildx-action/pull/482) [docker/setup-buildx-action#485](https://redirect.github.com/docker/setup-buildx-action/pull/485)
> * Bump js-yaml from 4.1.0 to 4.1.1 in [docker/setup-buildx-action#452](https://redirect.github.com/docker/setup-buildx-action/pull/452)
> * Bump lodash from 4.17.21 to 4.17.23 in [docker/setup-buildx-action#472](https://redirect.github.com/docker/setup-buildx-action/pull/472)
> * Bump minimatch from 3.1.2 to 3.1.5 in [docker/setup-buildx-action#480](https://redirect.github.com/docker/setup-buildx-action/pull/480)
>
> **Full Changelog**: <docker/setup-buildx-action@v3.12.0...v4.0.0>


Commits

* [`4d04d5d`](docker/setup-buildx-action@4d04d5d) Merge pull request [#485](https://redirect.github.com/docker/setup-buildx-action/issues/485) from docker/dependabot/npm\_and\_yarn/docker/actions-to...
* [`cd74e05`](docker/setup-buildx-action@cd74e05) chore: update generated content
* [`eee38ec`](docker/setup-buildx-action@eee38ec) build(deps): bump `@​docker/actions-toolkit` from 0.77.0 to 0.79.0
* [`7a83f65`](docker/setup-buildx-action@7a83f65) Merge pull request [#484](https://redirect.github.com/docker/setup-buildx-action/issues/484) from docker/dependabot/github\_actions/docker/setup-qe...
* [`a5aa967`](docker/setup-buildx-action@a5aa967) Merge pull request [#464](https://redirect.github.com/docker/setup-buildx-action/issues/464) from crazy-max/rm-deprecated
* [`e73d53f`](docker/setup-buildx-action@e73d53f) build(deps): bump docker/setup-qemu-action from 3 to 4
* [`28a438e`](docker/setup-buildx-action@28a438e) Merge pull request [#483](https://redirect.github.com/docker/setup-buildx-action/issues/483) from crazy-max/node24
* [`034e9d3`](docker/setup-buildx-action@034e9d3) chore: update generated content
* [`b4664d8`](docker/setup-buildx-action@b4664d8) remove deprecated inputs/outputs
* [`a8257de`](docker/setup-buildx-action@a8257de) node 24 as default runtime
* Additional commits viewable in [compare view](docker/setup-buildx-action@8d2750c...4d04d5d)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=docker/setup-buildx-action&package-manager=github\_actions&previous-version=3.12.0&new-version=4.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant