Update glob due to GHSA-5j98-mcp5-4vw2

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2025 Datadog
+Copyright (c) 2026 Datadog
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

LICENSES-3rdparty.csv

@@ -136,6 +136,8 @@ Component,Origin,Licence,Copyright
 @inquirer/input,npm,MIT,Simon Boudrias (https://github.com/SBoudrias/Inquirer.js/blob/master/packages/input/README.md)
 @inquirer/select,npm,MIT,Simon Boudrias (https://github.com/SBoudrias/Inquirer.js/blob/master/packages/select/README.md)
 @inquirer/type,npm,MIT,Simon Boudrias (https://www.npmjs.com/package/@inquirer/type)
+@isaacs/balanced-match,npm,MIT,(https://www.npmjs.com/package/@isaacs/balanced-match)
+@isaacs/brace-expansion,npm,MIT,(https://www.npmjs.com/package/@isaacs/brace-expansion)
 @isaacs/cliui,npm,ISC,Ben Coe (https://www.npmjs.com/package/@isaacs/cliui)
 @istanbuljs/load-nyc-config,npm,ISC,(https://github.com/istanbuljs/load-nyc-config#readme)
 @istanbuljs/schema,npm,MIT,Corey Farrell (https://github.com/istanbuljs/schema#readme)

NOTICE

@@ -1,4 +1,4 @@
 Datadog build-plugins
-Copyright 2025-present Datadog, Inc.
+Copyright 2026-present Datadog, Inc.
 
 This product includes software developed at Datadog (https://www.datadoghq.com/).

packages/core/package.json

@@ -25,7 +25,7 @@
     "dependencies": {
         "async-retry": "1.3.3",
         "chalk": "2.3.1",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "json-stream-stringify": "3.1.6"
     },
     "devDependencies": {

packages/published/esbuild-plugin/package.json

@@ -53,7 +53,7 @@
         "@datadog/js-instrumentation-wasm": "1.0.8",
         "async-retry": "1.3.3",
         "chalk": "2.3.1",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "json-stream-stringify": "3.1.6",
         "outdent": "0.8.0",
         "p-queue": "6.6.2",

packages/published/rollup-plugin/package.json

@@ -56,7 +56,7 @@
         "@datadog/js-instrumentation-wasm": "1.0.8",
         "async-retry": "1.3.3",
         "chalk": "2.3.1",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "json-stream-stringify": "3.1.6",
         "outdent": "0.8.0",
         "p-queue": "6.6.2",

packages/published/rspack-plugin/package.json

@@ -53,7 +53,7 @@
         "@datadog/js-instrumentation-wasm": "1.0.8",
         "async-retry": "1.3.3",
         "chalk": "2.3.1",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "json-stream-stringify": "3.1.6",
         "outdent": "0.8.0",
         "p-queue": "6.6.2",

packages/published/vite-plugin/package.json

@@ -53,7 +53,7 @@
         "@datadog/js-instrumentation-wasm": "1.0.8",
         "async-retry": "1.3.3",
         "chalk": "2.3.1",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "json-stream-stringify": "3.1.6",
         "outdent": "0.8.0",
         "p-queue": "6.6.2",

packages/published/webpack-plugin/package.json

@@ -53,7 +53,7 @@
         "@datadog/js-instrumentation-wasm": "1.0.8",
         "async-retry": "1.3.3",
         "chalk": "2.3.1",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "json-stream-stringify": "3.1.6",
         "outdent": "0.8.0",
         "p-queue": "6.6.2",

packages/tests/package.json

@@ -42,7 +42,7 @@
         "@rollup/plugin-commonjs": "28.0.1",
         "@rollup/plugin-typescript": "12.1.4",
         "clipanion": "4.0.0-rc.3",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "jest": "30.0.5",
         "ts-jest": "29.4.0"
     },

packages/tools/package.json

@@ -52,7 +52,7 @@
         "chalk": "2.3.1",
         "clipanion": "4.0.0-rc.3",
         "esbuild": "0.25.8",
-        "glob": "11.0.0",
+        "glob": "11.1.0",
         "outdent": "0.8.0",
         "rollup-plugin-import-css": "4.0.2",
         "typanion": "3.14.0",

yarn.lock

@@ -1699,7 +1699,7 @@ __metadata:
     async-retry: "npm:1.3.3"
     chalk: "npm:2.3.1"
     esbuild: "npm:0.25.8"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     json-stream-stringify: "npm:3.1.6"
     outdent: "npm:0.8.0"
     p-queue: "npm:6.6.2"
@@ -1743,7 +1743,7 @@ __metadata:
     async-retry: "npm:1.3.3"
     chalk: "npm:2.3.1"
     esbuild: "npm:0.25.8"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     json-stream-stringify: "npm:3.1.6"
     outdent: "npm:0.8.0"
     p-queue: "npm:6.6.2"
@@ -1780,7 +1780,7 @@ __metadata:
     async-retry: "npm:1.3.3"
     chalk: "npm:2.3.1"
     esbuild: "npm:0.25.8"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     json-stream-stringify: "npm:3.1.6"
     outdent: "npm:0.8.0"
     p-queue: "npm:6.6.2"
@@ -1817,7 +1817,7 @@ __metadata:
     async-retry: "npm:1.3.3"
     chalk: "npm:2.3.1"
     esbuild: "npm:0.25.8"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     json-stream-stringify: "npm:3.1.6"
     outdent: "npm:0.8.0"
     p-queue: "npm:6.6.2"
@@ -1854,7 +1854,7 @@ __metadata:
     async-retry: "npm:1.3.3"
     chalk: "npm:2.3.1"
     esbuild: "npm:0.25.8"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     json-stream-stringify: "npm:3.1.6"
     outdent: "npm:0.8.0"
     p-queue: "npm:6.6.2"
@@ -1886,7 +1886,7 @@ __metadata:
     async-retry: "npm:1.3.3"
     chalk: "npm:2.3.1"
     esbuild: "npm:0.25.8"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     json-stream-stringify: "npm:3.1.6"
     typescript: "npm:5.4.3"
     unplugin: "npm:2.3.11"
@@ -2075,7 +2075,7 @@ __metadata:
     clipanion: "npm:4.0.0-rc.3"
     esbuild: "npm:0.25.8"
     faker: "npm:5.5.3"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     jest: "npm:30.0.5"
     nock: "npm:14.0.1"
     rollup: "npm:4.45.1"
@@ -2117,7 +2117,7 @@ __metadata:
     chalk: "npm:2.3.1"
     clipanion: "npm:4.0.0-rc.3"
     esbuild: "npm:0.25.8"
-    glob: "npm:11.0.0"
+    glob: "npm:11.1.0"
     lodash.template: "npm:4.5.0"
     outdent: "npm:0.8.0"
     rollup-plugin-import-css: "npm:4.0.2"
@@ -2680,6 +2680,22 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@isaacs/balanced-match@npm:^4.0.1":
+  version: 4.0.1
+  resolution: "@isaacs/balanced-match@npm:4.0.1"
+  checksum: 10/102fbc6d2c0d5edf8f6dbf2b3feb21695a21bc850f11bc47c4f06aa83bd8884fde3fe9d6d797d619901d96865fdcb4569ac2a54c937992c48885c5e3d9967fe8
+  languageName: node
+  linkType: hard
+
+"@isaacs/brace-expansion@npm:^5.0.0":
+  version: 5.0.0
+  resolution: "@isaacs/brace-expansion@npm:5.0.0"
+  dependencies:
+    "@isaacs/balanced-match": "npm:^4.0.1"
+  checksum: 10/cf3b7f206aff12128214a1df764ac8cdbc517c110db85249b945282407e3dfc5c6e66286383a7c9391a059fc8e6e6a8ca82262fc9d2590bd615376141fbebd2d
+  languageName: node
+  linkType: hard
+
 "@isaacs/cliui@npm:^8.0.2":
   version: 8.0.2
   resolution: "@isaacs/cliui@npm:8.0.2"
@@ -5564,6 +5580,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"cross-spawn@npm:^7.0.6":
+  version: 7.0.6
+  resolution: "cross-spawn@npm:7.0.6"
+  dependencies:
+    path-key: "npm:^3.1.0"
+    shebang-command: "npm:^2.0.0"
+    which: "npm:^2.0.1"
+  checksum: 10/0d52657d7ae36eb130999dffff1168ec348687b48dd38e2ff59992ed916c88d328cf1d07ff4a4a10bc78de5e1c23f04b306d569e42f7a2293915c081e4dfee86
+  languageName: node
+  linkType: hard
+
 "dashdash@npm:^1.12.0":
   version: 1.14.1
   resolution: "dashdash@npm:1.14.1"
@@ -6767,6 +6794,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"foreground-child@npm:^3.3.1":
+  version: 3.3.1
+  resolution: "foreground-child@npm:3.3.1"
+  dependencies:
+    cross-spawn: "npm:^7.0.6"
+    signal-exit: "npm:^4.0.1"
+  checksum: 10/427b33f997a98073c0424e5c07169264a62cda806d8d2ded159b5b903fdfc8f0a1457e06b5fc35506497acb3f1e353f025edee796300209ac6231e80edece835
+  languageName: node
+  linkType: hard
+
 "forever-agent@npm:~0.6.1":
   version: 0.6.1
   resolution: "forever-agent@npm:0.6.1"
@@ -6992,19 +7029,19 @@ __metadata:
   languageName: node
   linkType: hard
 
-"glob@npm:11.0.0":
-  version: 11.0.0
-  resolution: "glob@npm:11.0.0"
+"glob@npm:11.1.0":
+  version: 11.1.0
+  resolution: "glob@npm:11.1.0"
   dependencies:
-    foreground-child: "npm:^3.1.0"
-    jackspeak: "npm:^4.0.1"
-    minimatch: "npm:^10.0.0"
+    foreground-child: "npm:^3.3.1"
+    jackspeak: "npm:^4.1.1"
+    minimatch: "npm:^10.1.1"
     minipass: "npm:^7.1.2"
     package-json-from-dist: "npm:^1.0.0"
     path-scurry: "npm:^2.0.0"
   bin:
     glob: dist/esm/bin.mjs
-  checksum: 10/e66939201d11ae30fe97e3364ac2be5c59d6c9bfce18ac633edfad473eb6b46a7553f6f73658f67caaf6cccc1df1ae336298a45e9021fa5695fd78754cc1603e
+  checksum: 10/da4501819633daff8822c007bb3f93d5c4d2cbc7b15a8e886660f4497dd251a1fb4f53a85fba1e760b31704eff7164aeb2c7a82db10f9f2c362d12c02fe52cf3
   languageName: node
   linkType: hard
 
@@ -7659,16 +7696,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"jackspeak@npm:^4.0.1":
-  version: 4.0.1
-  resolution: "jackspeak@npm:4.0.1"
+"jackspeak@npm:^4.1.1":
+  version: 4.1.1
+  resolution: "jackspeak@npm:4.1.1"
   dependencies:
     "@isaacs/cliui": "npm:^8.0.2"
-    "@pkgjs/parseargs": "npm:^0.11.0"
-  dependenciesMeta:
-    "@pkgjs/parseargs":
-      optional: true
-  checksum: 10/b20dc0df0dbb2903e4d540ae68308ec7d1dd60944b130e867e218c98b5d77481d65ea734b6c81c812d481500076e8b3fdfccfb38fc81cb1acf165e853da3e26c
+  checksum: 10/ffceb270ec286841f48413bfb4a50b188662dfd599378ce142b6540f3f0a66821dc9dcb1e9ebc55c6c3b24dc2226c96e5819ba9bd7a241bd29031b61911718c7
   languageName: node
   linkType: hard
 
@@ -8633,12 +8666,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"minimatch@npm:^10.0.0":
-  version: 10.0.1
-  resolution: "minimatch@npm:10.0.1"
+"minimatch@npm:^10.1.1":
+  version: 10.1.1
+  resolution: "minimatch@npm:10.1.1"
   dependencies:
-    brace-expansion: "npm:^2.0.1"
-  checksum: 10/082e7ccbc090d5f8c4e4e029255d5a1d1e3af37bda837da2b8b0085b1503a1210c91ac90d9ebfe741d8a5f286ece820a1abb4f61dc1f82ce602a055d461d93f3
+    "@isaacs/brace-expansion": "npm:^5.0.0"
+  checksum: 10/110f38921ea527022e90f7a5f43721838ac740d0a0c26881c03b57c261354fb9a0430e40b2c56dfcea2ef3c773768f27210d1106f1f2be19cde3eea93f26f45e
   languageName: node
   linkType: hard