Skip to content

Comments

Chore(deps): Bump minimatch and @microsoft/api-extractor#1974

Merged
github-actions[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-09b0b0f09e
Feb 25, 2026
Merged

Chore(deps): Bump minimatch and @microsoft/api-extractor#1974
github-actions[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-09b0b0f09e

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 25, 2026

Bumps minimatch and @microsoft/api-extractor. These dependencies needed to be updated together.
Updates minimatch from 9.0.5 to 9.0.7

Commits
  • 2de496f 9.0.7
  • 0d4616d limit nested extglob recursion, flatten extglobs
  • 7117ef3 9.0.6
  • 2418458 update deps, do not checkin dist
  • 1d1f531 update deps
  • 03b1778 update CI matrix and actions
  • f1aaffe update test expectations for coalesced consecutive stars
  • 5012655 coalesce consecutive non-globstar * characters
  • 3515d1e [meta] add publishConfig.tag legacy-v9
  • See full diff in compare view

Updates minimatch from 3.1.2 to 3.1.4

Commits
  • 2de496f 9.0.7
  • 0d4616d limit nested extglob recursion, flatten extglobs
  • 7117ef3 9.0.6
  • 2418458 update deps, do not checkin dist
  • 1d1f531 update deps
  • 03b1778 update CI matrix and actions
  • f1aaffe update test expectations for coalesced consecutive stars
  • 5012655 coalesce consecutive non-globstar * characters
  • 3515d1e [meta] add publishConfig.tag legacy-v9
  • See full diff in compare view

Updates @microsoft/api-extractor from 7.52.11 to 7.57.5

Changelog

Sourced from @​microsoft/api-extractor's changelog.

7.57.5

Wed, 25 Feb 2026 00:34:29 GMT

Version update only

7.57.4

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

7.57.3

Mon, 23 Feb 2026 00:42:21 GMT

Patches

  • Add missing "./extends/*.json" to the package.json "exports" field so that "@​microsoft/api-extractor/extends/tsdoc-base.json" is importable.

7.57.2

Fri, 20 Feb 2026 16:14:49 GMT

Patches

  • Bump minimatch from 10.1.2 to 10.2.1

7.57.1

Fri, 20 Feb 2026 00:15:03 GMT

Patches

  • Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes microsoft/rushstack#5644.

7.57.0

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes

  • Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

7.56.3

Sat, 07 Feb 2026 01:13:26 GMT

Patches

  • Upgrade lodash dependency from ~4.17.15 to ~4.17.23.

7.56.2

Wed, 04 Feb 2026 20:42:47 GMT

Patches

... (truncated)

Commits
  • 75ba91c Bump versions [skip ci]
  • c1bb843 Update changelogs [skip ci]
  • 2eda68f Bump versions [skip ci]
  • 015a507 Update changelogs [skip ci]
  • 5b457b7 Bump versions [skip ci]
  • a95df6d Update changelogs [skip ci]
  • f98df0d Publish api artifact from npm publish pipelines (#5663)
  • 9a55130 Add missing exports for JSON config files in api-extractor and heft-jest-plug...
  • b06e297 Bump versions [skip ci]
  • 2a59a81 Update changelogs [skip ci]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [minimatch](https://github.com/isaacs/minimatch) and [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor). These dependencies needed to be updated together.

Updates `minimatch` from 9.0.5 to 9.0.7
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v9.0.5...v9.0.7)

Updates `minimatch` from 3.1.2 to 3.1.4
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v9.0.5...v9.0.7)

Updates `@microsoft/api-extractor` from 7.52.11 to 7.57.5
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/api-extractor_v7.57.5/apps/api-extractor)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 9.0.7
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 3.1.4
  dependency-type: indirect
- dependency-name: "@microsoft/api-extractor"
  dependency-version: 7.57.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added 3. to review dependencies Pull requests that update a dependency file labels Feb 25, 2026
@github-actions github-actions bot enabled auto-merge February 25, 2026 03:54
@github-actions github-actions bot merged commit 94a925f into master Feb 25, 2026
44 checks passed
@github-actions github-actions bot deleted the dependabot/npm_and_yarn/multi-09b0b0f09e branch February 25, 2026 03:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants