Skip to content

fix: Update glob dependency to patch security vulnerability#74

Merged
javierbrea merged 2 commits intoTelefonica:releasefrom
FrankLedo:fix/glob-vulnerability-cve
Feb 6, 2026
Merged

fix: Update glob dependency to patch security vulnerability#74
javierbrea merged 2 commits intoTelefonica:releasefrom
FrankLedo:fix/glob-vulnerability-cve

Conversation

@FrankLedo
Copy link
Contributor

Summary

Updates the glob dependency from version 10.3.10 to 10.5.0 to address a security vulnerability.

Changes

  • Update glob from 10.3.10 to 10.5.0 in package.json
  • Update pnpm-lock.yaml
  • Bump package version to 2.4.1 (patch release)
  • Add changelog entry for the security fix

Testing

All tests pass:

  • ✅ Unit tests (234 tests, 100% coverage)
  • ✅ TypeScript type checking
  • ✅ Linting
  • ✅ Build

Security

This update addresses potential security issues in the glob package used for file pattern matching in the markdown-confluence-sync component.

FrankLedo and others added 2 commits December 8, 2025 08:35
Updates glob from 10.3.10 to 10.5.0 to address security vulnerability.

- Update glob dependency in package.json
- Bump version to 2.4.1 (patch release)
- Update CHANGELOG.md with security fix entry
- Update pnpm-lock.yaml

All tests pass with 100% coverage.
@javierbrea
Copy link
Collaborator

Hi @FrankLedo. Thanks a lot for keeping the dependencies up to date, really appreciated 🙌. And sorry for the delay in getting to this PR.
We’ll keep this in the release branch so it can go out with the next version. We hope to cut that release as soon as possible, but it might take a bit longer than usual because npm recently changed its token system and we may have to deal with some bureaucratic friction to get our publishing credentials renewed.

@javierbrea javierbrea merged commit e6ebd64 into Telefonica:release Feb 6, 2026
9 of 11 checks passed
@github-actions github-actions bot locked and limited conversation to collaborators Feb 6, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants