[Snyk] Upgrade minimatch from 3.0.4 to 3.1.2

[jackromo888]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade minimatch from 3.0.4 to 3.1.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.
• The recommended version was released 10 months ago, on 2022-02-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: minimatch

• 3.1.2 - 2022-02-15
• 3.1.1 - 2022-02-13
  

  3.1.1

• 3.1.0 - 2022-02-13
  

  3.1.0

• 3.0.8 - 2022-02-15
• 3.0.7 - 2022-02-13
  

  3.0.7

• 3.0.6 - 2022-02-12
  

  3.0.6

• 3.0.5 - 2022-02-06
  

  3.0.5

• 3.0.4 - 2017-05-07
  

  v3.0.4

from minimatch GitHub release notes

Commit messages

Package name: minimatch

• 699c459 3.1.2
• 2f2b5ff fix: trim pattern
• 25d7c0d 3.1.1
• 55dda29 fix: treat nocase:true as always having magic
• 5e1fb8d 3.1.0
• f8145c5 Add 'allowWindowsEscape' option
• 570e8b1 add publishConfig for v3 publishes
• 5b7cd33 3.0.6
• 20b4b56 [fix] revert all breaking syntax changes
• 2ff0388 document, expose, and test 'partial:true' option
• 5dbd6a7 ci: tests and makework
• dbda065 full test coverage, adding tests, deleting dead code
• 47e0e45 Credit @ yetingli for the regexp improvement
• 707e1b2 3.0.5
• a8763f4 Improve redos protection, add many tests
• bafa295 Use master branch for travis badge
• 013d64d update travis

Compare

---

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs