Skip to content

fix: update picomatch dep#84

Open
mikbeach wants to merge 1 commit intomasterfrom
fix-picomatch-dep
Open

fix: update picomatch dep#84
mikbeach wants to merge 1 commit intomasterfrom
fix-picomatch-dep

Conversation

@mikbeach
Copy link
Copy Markdown
Collaborator

@mikbeach mikbeach commented Apr 20, 2026

This pull request makes a minor update to the package.json file, including a dependency version bump and a small formatting change.

  • Dependency updates:

    • Upgraded the picomatch dependency from version 2.3.1 to 2.3.2 to include the latest bug fixes and improvements.
  • Formatting changes:

    • Reformatted the files array to a single line for consistency and readability. No functional changes were made.

Fixes the issue with npm audit flag security concerns (and the security concerns themself).

@mikbeach mikbeach requested review from Copilot and moroshko April 20, 2026 10:35
@mikbeach mikbeach self-assigned this Apr 20, 2026
@mikbeach mikbeach added the dependencies Pull requests that update a dependency file label Apr 20, 2026
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the npm dependency tree by bumping picomatch to 2.3.2, along with a minor package.json formatting tweak.

Changes:

  • Bump picomatch from 2.3.1 to 2.3.2 in package.json.
  • Reformat the files array in package.json to a single line.
  • Update package-lock.json entries for picomatch to the new resolved version.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates picomatch to 2.3.2 and reformats the files array.
package-lock.json Updates the lockfile to resolve picomatch@2.3.2 (but currently introduces a root dependency range mismatch).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants