Skip to content

chore(deps): bump glob to 13.0.6#307

Merged
jsteinich merged 1 commit into
open-constructs:mainfrom
X-Guardian:chore/update-glob
Jul 7, 2026
Merged

chore(deps): bump glob to 13.0.6#307
jsteinich merged 1 commit into
open-constructs:mainfrom
X-Guardian:chore/update-glob

Conversation

@X-Guardian

Copy link
Copy Markdown
Contributor

Description

Bumps the direct glob dependency from 10.5.0 to 13.0.6 in the three packages that declare it:

Package Before After
@cdktn/hcl2cdk 10.5.0 13.0.6
@cdktn/provider-generator 10.5.0 13.0.6
cdktn-cli 10.5.0 13.0.6

Why: glob@10.5.0 is deprecated on npm. Installing it prints:

Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update.

The whole v9–v12 range carries this same deprecation notice; only v13 (the current major) is supported. Moving to 13.0.6 clears the warning and puts us on the maintained line.

No code changes required. Every call site uses the synchronous, string-returning form — glob.sync(pattern, { cwd })string[] — which is unchanged from v10 through v13.

Node compatibility: glob 13 requires node: 18 || 20 || >=22. The repo targets Node 22 (.nvmrc22.22.3), so this is satisfied.

Checklist

  • I have updated the PR title to match CDKTN's style guide
  • I have run the linter on my code locally
  • I have performed a self-review of my code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation if applicable
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works if applicable
  • New and existing unit tests pass locally with my changes

@X-Guardian X-Guardian marked this pull request as ready for review July 6, 2026 15:44
@X-Guardian X-Guardian requested a review from a team as a code owner July 6, 2026 15:44
@jsteinich jsteinich merged commit 47ee2bb into open-constructs:main Jul 7, 2026
513 of 515 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants