Skip to content

chore(deps): bump minimatch and mocha#479

Merged
cameri merged 2 commits intomainfrom
dependabot/npm_and_yarn/multi-4afa144cf6
Apr 18, 2026
Merged

chore(deps): bump minimatch and mocha#479
cameri merged 2 commits intomainfrom
dependabot/npm_and_yarn/multi-4afa144cf6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 18, 2026

Bumps minimatch to 9.0.9 and updates ancestor dependency mocha. These dependencies need to be updated together.

Updates minimatch from 9.0.3 to 9.0.9

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates mocha from 9.2.2 to 11.7.5

Release notes

Sourced from mocha's releases.

v11.7.5

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

v11.7.4

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

v11.7.3

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

... (truncated)

Changelog

Sourced from mocha's changelog.

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 18, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 18, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedmocha@​9.2.2 ⏵ 11.7.596 +110095 +194100

View full report

Bumps [minimatch](https://github.com/isaacs/minimatch) to 9.0.9 and updates ancestor dependency [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together.


Updates `minimatch` from 9.0.3 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v9.0.3...v9.0.9)

Updates `mocha` from 9.2.2 to 11.7.5
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md)
- [Commits](mochajs/mocha@v9.2.2...v11.7.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
- dependency-name: mocha
  dependency-version: 11.7.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4afa144cf6 branch from 011d42d to 699c116 Compare April 18, 2026 10:36
@coveralls
Copy link
Copy Markdown
Collaborator

Coverage Report for CI Build 24604591168

Coverage remained the same at 54.528%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 2938
Covered Lines: 1653
Line Coverage: 56.26%
Relevant Branches: 1203
Covered Branches: 605
Branch Coverage: 50.29%
Branches in Coverage %: Yes
Coverage Strength: 9.12 hits per line

💛 - Coveralls

@cameri cameri merged commit 66631ca into main Apr 18, 2026
10 checks passed
@cameri cameri deleted the dependabot/npm_and_yarn/multi-4afa144cf6 branch April 18, 2026 12:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants