fix: bump micromatch VSCODE-533 VSCODE-534 #737
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Checklist
Motivation and Context
https://jira.mongodb.org/browse/VSCODE-533
https://jira.mongodb.org/browse/VSCODE-534
Updating
micromatch
also updatesbraces
to3.0.3
, which includes the fix for theSNYK-JS-BRACES-6838727
vulnerability https://github.com/micromatch/braces/commits/master/. This leaves onlyjest
, which is a dev dependency so hopefully the vulnerability is not applicable. (I checked if updatingjest
is easy, but we are several major versions behind so it's a rabbit hole).I couldn't find the release notes for
micromatch
, but the description ofSNYK-JS-MICROMATCH-6838728
said it already had the fix on main. that was from 2 weeks ago, the latest version is 12 days ago 🤷https://github.com/micromatch/micromatch/commits/master/
Open Questions
Dependents
Types of changes