Skip to content

build(deps): bump globby from 11.1.0 to 16.2.0#9374

Open
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/npm_and_yarn/globby-16.2.0
Open

build(deps): bump globby from 11.1.0 to 16.2.0#9374
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/npm_and_yarn/globby-16.2.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 27, 2026

Bumps globby from 11.1.0 to 16.2.0.

Release notes

Sourced from globby's releases.

v16.2.0


sindresorhus/globby@v16.1.1...v16.2.0

v16.1.1

  • Fix negation patterns with absolute filesystem paths 72e9916

sindresorhus/globby@v16.1.0...v16.1.1

v16.1.0


sindresorhus/globby@v16.0.0...v16.1.0

v16.0.0

Breaking

  • Respect parent .gitignore files when gitignore option is enabled b9a9a84
    • When {gitignore: true}, Globby now searches for .gitignore files up to the Git repo root (if detected). This matches Git's actual behavior where parent .gitignore patterns apply to subdirectories. Previously, only .gitignore files within the glob search path were considered. This change could break existing code that relied on the previous, more limited behavior.

Improvements

  • Support negation-only patterns 1273541
  • Respect custom fs implementation from options c2eb272
  • Add some more options to isGitIgnored functions e794ff9
  • Improve error message for invalid cwd option 7535e6d

Fixes

  • Fix {gitignore: true} performance issue fcb07c3
  • Fix bundler compatibility e6c72c9
  • Fix parent directory patterns with gitignore option 11dd2df
  • Fix ignore patterns with parent directory references a58d117
  • Fix types for stats option c10f600

sindresorhus/globby@v15.0.0...v16.0.0

v15.0.0

Breaking

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
globby [>= 16.1.a, < 16.2]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [globby](https://github.com/sindresorhus/globby) from 11.1.0 to 16.2.0.
- [Release notes](https://github.com/sindresorhus/globby/releases)
- [Commits](sindresorhus/globby@v11.1.0...v16.2.0)

---
updated-dependencies:
- dependency-name: globby
  dependency-version: 16.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies javascript Pull requests that update javascript code labels Mar 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants