Skip to content

chore(deps): bump picomatch in /docs - #464

Merged
Daniel Meppiel (danielmeppiel) merged 3 commits into
mainfrom
dependabot/npm_and_yarn/docs/multi-bf05dc1ecf
Mar 27, 2026
Merged

chore(deps): bump picomatch in /docs#464
Daniel Meppiel (danielmeppiel) merged 3 commits into
mainfrom
dependabot/npm_and_yarn/docs/multi-bf05dc1ecf

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 26, 2026

Copy link
Copy Markdown
Contributor

Bumps and picomatch. These dependencies needed to be updated together.
Updates picomatch from 4.0.3 to 4.0.4

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps and [picomatch](https://github.com/micromatch/picomatch). These dependencies needed to be updated together.
Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)
Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 4.0.4
dependency-type: indirect
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
@danielmeppiel
Daniel Meppiel (danielmeppiel) merged commit c9131dd into mainMar 27, 2026
6 checks passed
@danielmeppiel
Daniel Meppiel (danielmeppiel) deleted the dependabot/npm_and_yarn/docs/multi-bf05dc1ecf branch March 27, 2026 05:19
CopilotAI added a commit that referenced this pull request Mar 27, 2026
Propagate exclude patterns from CompilationConfig to the primitive
discovery phase so that .instructions.md files (and other primitives)
inside excluded directories are never discovered or compiled.
Fixes#464
Agent-Logs-Url: https://github.com/microsoft/apm/sessions/6aae940e-6c6a-40f5-9f06-994570e01fa7
Co-authored-by: danielmeppiel <51440732+danielmeppiel@users.noreply.github.com>
Daniel Meppiel (danielmeppiel) added a commit that referenced this pull request Apr 6, 2026
* Initial plan
* Initial plan for compilation.exclude primitive discovery fix
Agent-Logs-Url: https://github.com/microsoft/apm/sessions/6aae940e-6c6a-40f5-9f06-994570e01fa7
Co-authored-by: danielmeppiel <51440732+danielmeppiel@users.noreply.github.com>
* fix: compilation.exclude patterns now filter primitive discovery
Propagate exclude patterns from CompilationConfig to the primitive
discovery phase so that .instructions.md files (and other primitives)
inside excluded directories are never discovered or compiled.
Fixes#464
Agent-Logs-Url: https://github.com/microsoft/apm/sessions/6aae940e-6c6a-40f5-9f06-994570e01fa7
Co-authored-by: danielmeppiel <51440732+danielmeppiel@users.noreply.github.com>
* refactor: extract shared exclude matcher, add DoS guard, complete coverage
- Extract duplicated glob matcher from discovery.py and context_optimizer.py
into shared src/apm_cli/utils/exclude.py
- Add validate_exclude_patterns() with consecutive ** collapse and segment
cap (max 5 non-consecutive) to prevent exponential recursion DoS
- Cover _discover_local_skill() with exclusion filtering (was bypassed)
- Add debug logging for excluded files
- Add 34 tests for shared exclude util (validation, matching, DoS guard)
- Add SKILL.md exclusion and DoS validation tests to discovery tests
- Revert uv.lock version bump artifact
- Net -160 lines from deduplication
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: danielmeppiel <51440732+danielmeppiel@users.noreply.github.com>
Co-authored-by: danielmeppiel <dmeppiel@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sergio Sisternes (sergio-sisternes-epam) pushed a commit that referenced this pull request May 19, 2026
Bumps and [picomatch](https://github.com/micromatch/picomatch). These dependencies needed to be updated together.
Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)
Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 4.0.4
dependency-type: indirect
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Daniel Meppiel <51440732+danielmeppiel@users.noreply.github.com>
Sergio Sisternes (sergio-sisternes-epam) pushed a commit that referenced this pull request May 19, 2026
* Initial plan
* Initial plan for compilation.exclude primitive discovery fix
Agent-Logs-Url: https://github.com/microsoft/apm/sessions/6aae940e-6c6a-40f5-9f06-994570e01fa7
Co-authored-by: danielmeppiel <51440732+danielmeppiel@users.noreply.github.com>
* fix: compilation.exclude patterns now filter primitive discovery
Propagate exclude patterns from CompilationConfig to the primitive
discovery phase so that .instructions.md files (and other primitives)
inside excluded directories are never discovered or compiled.
Fixes#464
Agent-Logs-Url: https://github.com/microsoft/apm/sessions/6aae940e-6c6a-40f5-9f06-994570e01fa7
Co-authored-by: danielmeppiel <51440732+danielmeppiel@users.noreply.github.com>
* refactor: extract shared exclude matcher, add DoS guard, complete coverage
- Extract duplicated glob matcher from discovery.py and context_optimizer.py
into shared src/apm_cli/utils/exclude.py
- Add validate_exclude_patterns() with consecutive ** collapse and segment
cap (max 5 non-consecutive) to prevent exponential recursion DoS
- Cover _discover_local_skill() with exclusion filtering (was bypassed)
- Add debug logging for excluded files
- Add 34 tests for shared exclude util (validation, matching, DoS guard)
- Add SKILL.md exclusion and DoS validation tests to discovery tests
- Revert uv.lock version bump artifact
- Net -160 lines from deduplication
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: danielmeppiel <51440732+danielmeppiel@users.noreply.github.com>
Co-authored-by: danielmeppiel <dmeppiel@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@danielmeppiel