Skip to content

📦 Bump picomatch from 2.3.1 to 2.3.2 - #15843

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/picomatch-2.3.2
Closed

📦 Bump picomatch from 2.3.1 to 2.3.2#15843
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/picomatch-2.3.2

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMar 25, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps picomatch from 2.3.1 to 2.3.2.

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

@dependabotdependabotBot added the dependencies Pull requests that update a dependency file label Mar 25, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerMarch 25, 2026 21:59
@dependabotdependabotBot added the dependencies Pull requests that update a dependency file label Mar 25, 2026
@HariniMalothu17

Harini Malothu (HariniMalothu17) commented Mar 25, 2026

Copy link
Copy Markdown
Contributor

/azp run PR

@azure-pipelines

azure-pipelinesBot commented Mar 25, 2026

Copy link
Copy Markdown
Contributor
Azure Pipelines successfully started running 1 pipeline(s).

@vineethkuttan

Vineeth (vineethkuttan) commented Mar 26, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) recreate

@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/picomatch-2.3.2 branch from e4602bb to 55bc74dCompareMarch 26, 2026 06:37
@HariniMalothu17

Harini Malothu (HariniMalothu17) commented Mar 26, 2026

Copy link
Copy Markdown
Contributor

/azp run PR

@azure-pipelines

azure-pipelinesBot commented Mar 26, 2026

Copy link
Copy Markdown
Contributor
Azure Pipelines successfully started running 1 pipeline(s).

@vineethkuttan

Vineeth (vineethkuttan) commented Mar 26, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) recreate

@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/picomatch-2.3.2 branch from 55bc74d to 7011000CompareMarch 26, 2026 08:38
@HariniMalothu17

Harini Malothu (HariniMalothu17) commented Mar 26, 2026

Copy link
Copy Markdown
Contributor

/azp run PR

@azure-pipelines

azure-pipelinesBot commented Mar 26, 2026

Copy link
Copy Markdown
Contributor
Azure Pipelines successfully started running 1 pipeline(s).

@vmoroz

Vladimir Morozov (vmoroz) commented Mar 26, 2026

Copy link
Copy Markdown
Member

Dependabot (@dependabot) recreate

@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/picomatch-2.3.2 branch from 7011000 to 5a3b77aCompareMarch 26, 2026 18:26
@HariniMalothu17

Harini Malothu (HariniMalothu17) commented Mar 26, 2026

Copy link
Copy Markdown
Contributor

/azp run PR

@rnbot

rnbot commented Mar 26, 2026

Copy link
Copy Markdown
Collaborator

Dependabot (@dependabot) rebase

@dependabot@github

dependabotBot commented on behalf of githubMar 26, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@rnbot

rnbot commented Mar 26, 2026

Copy link
Copy Markdown
Collaborator

Dependabot (@dependabot) recreate

@dependabot
📦 Bump picomatch from 2.3.1 to 2.3.2
616601b
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/picomatch-2.3.2 branch from 5a3b77a to 616601bCompareMarch 26, 2026 22:54
@vmorozVladimir Morozov (vmoroz) mentioned this pull request Mar 27, 2026
Merged
@dependabot@github

dependabotBot commented on behalf of githubMar 27, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like picomatch is up-to-date now, so this is no longer needed.

@dependabotdependabotBot closed this Mar 27, 2026
@dependabot
dependabotBot deleted the dependabot/npm_and_yarn/picomatch-2.3.2 branch March 27, 2026 18:54
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@HariniMalothu17@vineethkuttan@vmoroz@rnbot