Skip to content

Conversation

@sjbur
Copy link

@sjbur sjbur commented Dec 9, 2025

No description provided.

@sjbur sjbur self-assigned this Dec 9, 2025
Copilot AI review requested due to automatic review settings December 9, 2025 18:37
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR performs a security-focused dependency update, primarily upgrading the glob package from version 7.2.3 to 10.5.0 and making associated changes to the dependency tree structure.

  • Updates glob to version 10.5.0 with an override in package.json
  • Updates js-yaml from 3.14.1 to 3.14.2 (patch version for grunt's nested dependency)
  • Removes deprecated packages (fs.realpath and inflight) from the dependency tree
  • Consolidates nested dependency versions by hoisting glob v10.5.0 and its dependencies to the top level

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Adds glob version override (^10.5.0) to force newer version across dependency tree
package-lock.json Updates glob to 10.5.0, removes deprecated dependencies, restructures dependency tree with consolidated versions, adjusts peer dependency flags, and updates js-yaml to 3.14.2

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@sjbur sjbur requested a review from a team December 10, 2025 09:13
@sjbur sjbur merged commit 75f64f0 into DevExpress:master Dec 10, 2025
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants