Overview

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Failed
36567
f4d29a8c fix(core): replace minimatch with picomatch nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). Fixes NXC-4762
by Jack Hsu
Failed
36567
Fix applied→
f4d29a8c fix(core): replace minimatch with picomatch nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). Fixes NXC-4762
by Jack Hsu
Failed
36567
Flaky task→
0248ff13 fix(core): replace minimatch with picomatch ## Current Behavior nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). ## Expected Behavior All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). ## Related Issue(s) Fixes NXC-4762
by Jack Hsu
Succeeded
36567
521c1ce8 fix(core): replace minimatch with picomatch ## Current Behavior nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). ## Expected Behavior All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). ## Related Issue(s) Fixes NXC-4762
by Jack Hsu
Failed
36567
Flaky task→
521c1ce8 fix(core): replace minimatch with picomatch ## Current Behavior nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). ## Expected Behavior All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). ## Related Issue(s) Fixes NXC-4762
by Jack Hsu
Canceled
36567
8a07d192 fix(core): replace minimatch with picomatch ## Current Behavior nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). ## Expected Behavior All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). ## Related Issue(s) Fixes NXC-4762
by Jack Hsu
Succeeded
36567
74f7a167 fix(core): replace minimatch with picomatch ## Current Behavior nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). ## Expected Behavior All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). ## Related Issue(s) Fixes NXC-4762
by Jack Hsu
Failed
36567
Flaky task→
74f7a167 fix(core): replace minimatch with picomatch ## Current Behavior nx and several plugins depend on minimatch, which pulls brace-expansion (GHSA-rgw5-rvv9-x895 DoS, third CVE in that package this year). ## Expected Behavior All minimatch usages replaced with picomatch (nx, devkit, jest, playwright, react, rsbuild). minimatch, brace-expansion and balanced-match leave the published nx runtime dependency closure. Not pure 1:1: - picomatch only lets a leading `**/` match zero path segments in standalone patterns, not inside `{a,b}` brace alternation, so combineGlobPatterns output missed root-level files. New splitGlobPatterns() (local copy in devkit for the +/-1 nx major compat contract); jest plugin and project-glob-changes pass pattern arrays instead. - picomatch throws on empty patterns and invalid makeRe input where minimatch returned false/null: guards added at the affected sites. - `!(x)` is a real extglob now (micromatch semantics), which makes the min-release-age yarn matcher closer to yarn's own behavior. Dev-tree transitives (eslint, glob, verdaccio, typedoc) still pull minimatch, so the pnpm overrides stay; brace-expansion override bumped to 5.0.9 (the patched version). ## Related Issue(s) Fixes NXC-4762
by Jack Hsu