Skip to content

fix(deps): vuln patch: minimatch, shell-quote [tests/integration] - #832

Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/npm/integration/0-1781533727
Jun 16, 2026
Merged

fix(deps): vuln patch: minimatch, shell-quote [tests/integration]#832
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/npm/integration/0-1781533727

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: Critical-severity security update — 2 packages upgraded (patch changes only)

Manifests changed:

  • tests/integration (yarn)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

PackageFromToTypeDep TypeVulnerabilities Fixed
shell-quote1.8.31.8.4patchTransitive1 CRITICAL
minimatch3.1.33.1.5patchTransitive2 HIGH

Security Details

🚨 Critical & High Severity (3 fixed)
PackageCVESeveritySummaryUnsafe VersionFixed In
shell-quoteGHSA-w7jw-789q-3m8pCRITICALshell-quote quote() does not escape newlines in object .op values1.8.31.8.4
minimatchGHSA-23c5-xmqv-rm74HIGHminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions3.1.310.2.3
minimatchCVE-2026-27904HIGHminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions3.1.3-

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@dd-prapprover

dd-prapproverBot commented Jun 16, 2026

Copy link
Copy Markdown

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

  • ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-06-16T12:25:35Z
  • ✅ CI tests passed - 2026-06-16T12:25:39Z
  • ✅ Approved (commit: 99cc453) - 2026-06-16T12:25:42Z
  • ✅ Merge Started
  • ⬜ Merged

➡️ Current phase: merge in progress...

@dd-prapproverdd-prapproverBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR has been automatically approved by the DD PR Approver bot.

@dd-prapprover

Copy link
Copy Markdown

/merge

@gh-worker-devflow-routing-ef8351

gh-worker-devflow-routing-ef8351Bot commented Jun 16, 2026

Copy link
Copy Markdown

View all feedbacks in Devflow UI.

2026-06-16 12:25:54 UTC ℹ️ Start processing command /merge


2026-06-16 12:25:59 UTC ℹ️ MergeQueue: pull request added to the queue

The expected merge time in main is approximately 0s (p90).


2026-06-16 13:59:00 UTC ℹ️ MergeQueue: This merge request was merged

@gh-worker-dd-mergequeue-cf854d
gh-worker-dd-mergequeue-cf854dBot merged commit 3bf5778 into mainJun 16, 2026
105 checks passed
@gh-worker-dd-mergequeue-cf854d
gh-worker-dd-mergequeue-cf854dBot deleted the engraver-auto-version-upgrade/minorpatch/npm/integration/0-1781533727 branch June 16, 2026 13:58
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants