Skip to content

build(deps): bump picomatch from 2.3.1 to 2.3.2 in /addons#1266

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/addons/picomatch-2.3.2
Closed

build(deps): bump picomatch from 2.3.1 to 2.3.2 in /addons#1266
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/addons/picomatch-2.3.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 25, 2026

Bumps picomatch from 2.3.1 to 2.3.2.

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 25, 2026
@meta-cla meta-cla bot added the CLA Signed label Mar 25, 2026
@meta-codesync
Copy link
Copy Markdown

meta-codesync bot commented Mar 25, 2026

@facebook-github-bot has imported this pull request. If you are a Meta employee, you can view this in D98216634. (Because this pull request was imported automatically, there will not be any future comments.)

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/picomatch-2.3.2 branch from 3d572dc to e8b3f73 Compare March 30, 2026 15:49
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/picomatch-2.3.2 branch from e8b3f73 to a4ea064 Compare March 30, 2026 19:22
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/picomatch-2.3.2 branch from a4ea064 to 5edd4f4 Compare April 2, 2026 17:44
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/picomatch-2.3.2 branch from 5edd4f4 to b810fc9 Compare April 2, 2026 19:37
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 3, 2026

Looks like picomatch is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Apr 3, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/addons/picomatch-2.3.2 branch April 3, 2026 04:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants