Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: vercel/serve-handler
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 6.1.6
Choose a base ref
...
head repository: vercel/serve-handler
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 6.1.7
Choose a head ref
  • 4 commits
  • 2 files changed
  • 3 contributors

Commits on Mar 3, 2026

  1. chore(deps): upgrade minimatch to v10.2.4 (#226)

    @dargmuesli
    dargmuesli authored Mar 3, 2026
    Configuration menu
    Copy the full SHA
    8df54ef View commit details
    Browse the repository at this point in the history

  2. Revert "chore(deps): upgrade minimatch to v10.2.4 (#226)" 

    This reverts commit 8df54ef.
    @AndyBitz
    AndyBitz committed Mar 3, 2026
    Configuration menu
    Copy the full SHA
    8b357fa View commit details
    Browse the repository at this point in the history

  3. fix: update minimatch to 3.1.5 to resolve security vulnerabilities (#228 

    )

* fix: update minimatch to 3.1.5 to resolve security vulnerabilities

Bumps minimatch from 3.1.2 to 3.1.5, the latest patch in the 3.x line.
This resolves the following CVEs:
- GHSA-3ppc-4f35-3m26 (ReDoS via repeated wildcards, high severity)
- GHSA-7r86-cg39-jmmj (ReDoS via multiple non-adjacent GLOBSTAR segments, high severity)
- GHSA-23c5-xmqv-rm74 (ReDoS via nested *() extglobs, high severity)

Fixes #206

* chore: update yarn.lock for minimatch 3.1.5
    @ParakhJaggi @AndyBitz
    ParakhJaggi authored and AndyBitz committed Mar 3, 2026
    Configuration menu
    Copy the full SHA
    754d1dc View commit details
    Browse the repository at this point in the history

  4. 6.1.7

    @AndyBitz
    AndyBitz committed Mar 3, 2026
    Configuration menu
    Copy the full SHA
    5158ae7 View commit details
    Browse the repository at this point in the history
Loading