Skip to content

fix: minimatch redos vulnerability#666

Closed
soberm wants to merge 2 commits intomainfrom
fix/minimatch-redos-vulnerability
Closed

fix: minimatch redos vulnerability#666
soberm wants to merge 2 commits intomainfrom
fix/minimatch-redos-vulnerability

Conversation

@soberm
Copy link
Contributor

@soberm soberm commented Feb 25, 2026

Problem

Issue number, if available:

Changes

Corresponding docs PR, if applicable:

Validation

Checklist

  • If this PR includes a functional change to the runtime or type-level behavior of the code, I have added or updated automated test coverage for this change. (see Testing Strategy README)
  • If this PR requires a docs update, I have linked to that docs PR above.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Add minimatch >=3.1.3 override/resolution to patch transitive
dependency from eslint, jest, and other dev dependencies.
Bump aws-cdk-lib to 2.240.0 in tsc-compliance example to
resolve its bundled minimatch@3.1.2.
@soberm soberm requested review from a team as code owners February 25, 2026 10:22
@changeset-bot
Copy link

changeset-bot bot commented Feb 25, 2026

🦋 Changeset detected

Latest commit: 31e9f74

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@soberm soberm changed the title Fix/minimatch redos vulnerability fix: minimatch redos vulnerability Feb 25, 2026
@soberm soberm closed this Feb 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants