Skip to content

build(deps): bump picomatch, @nestjs/cli and @nestjs/schematics#25

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-676aa3545c
Open

build(deps): bump picomatch, @nestjs/cli and @nestjs/schematics#25
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-676aa3545c

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 25, 2026

Bumps picomatch to 2.3.2 and updates ancestor dependencies picomatch, @nestjs/cli and @nestjs/schematics. These dependencies need to be updated together.

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Updates @nestjs/cli from 10.3.2 to 10.4.9

Release notes

Sourced from @​nestjs/cli's releases.

Release 10.4.9

  • Merge pull request #2838 from yifanwww/fix/webpack-ignore-lazy-imports (3d0fe0b5)
  • fix: add missing class-transformer/storage in lazy import list (a1cc6cfe)
  • Merge pull request #2815 from nestjs/renovate/typescript-5.x (4af113ec)

Release 10.4.8

  • Merge pull request #2792 from nestjs/fix/type-check-error-2791 (5be20eb3)
  • Merge pull request #2797 from nestjs/renovate/tsconfig-paths-webpack-plugin-4.x (6d77fd30)
  • Merge pull request #2800 from caucik/webpack-fix-branch (9ec2d5e5)
  • fix: webpack default config - IgnorePlugin (83c5cfc8)
  • fix(deps): update dependency tsconfig-paths-webpack-plugin to v4.2.0 (ebdfb325)
  • chore(deps): update dependency @​swc/core to v1.9.2 (#2794) (ed9d8b86)
  • fix: show type check warning only when builder is not swc #2791 (2e23003b)
  • fix(deps): update dependency glob to v10.4.5 (7aba4817)

Release 10.4.7

  • Merge pull request #2786 from nestjs/revert-2642-renovate/glob-11.x (0ff0a01d)
  • Revert "fix(deps): update dependency glob to v11" (7af719ea)

Release 10.4.6

  • build: allow js, clean artificats in ci (7bc0b3ff)
  • chore(deps): update dependency ts-jest to v29.2.5 (41ce50bf)
  • fix(deps): update dependency typescript to v5.6.3 (067a1190)
  • Merge pull request #2784 from nestjs/renovate/node-22.x (f3bd8b00)
  • Merge pull request #2778 from nestjs/renovate/swc-monorepo (008ab68e)
  • Merge pull request #2780 from nestjs/renovate/webpack-5.x (d708ea95)
  • Merge pull request #2764 from nestjs/renovate/angular-cli-monorepo (d8ae02b5)
  • fix: add missing type argument (df91c495)
  • Merge branch 'addun-fix-issue-2653' (041a184b)
  • chore: resolve conflicts (486ac60e)
  • Merge pull request #2415 from yigitkurtcu/feat/generate-options-base-url (537dfa7e)
  • Merge pull request #2716 from nestjs/renovate/angular-cli-monorepo (ef0ff51d)
  • Merge pull request #2642 from nestjs/renovate/glob-11.x (c7e2e01d)
  • fix(deps): update angular-cli monorepo to v17.3.10 (960e65f8)
  • Merge pull request #2743 from nestjs/renovate/webpack-5.x (b750eadf)
  • Merge pull request #2754 from nestjs/renovate/nest-monorepo (603721e7)
  • fix(deps): update dependency @​nestjs/schematics to v10.2.2 (f062e99a)
  • fix: unification copy behavior between watched and not watched assets (3664ed06)
  • fix(deps): update dependency glob to v11 (fc6e7a16)
  • feat: basedir option added to configuration for generate command (877b6bd8)

Release 10.4.5

  • Merge pull request #2666 from nestjs/renovate/nest-monorepo (a734d81f)
  • Merge pull request #2712 from nestjs/renovate/npm-webpack-vulnerability (587e407e)
  • chore(deps): update dependency @​swc/core to v1.7.21 (4ccad5c5)
  • chore(deps): update commitlint monorepo to v19.4.1 (d3484bfd)
  • fix(deps): update dependency webpack to v5.94.0 [security] (78136826)
  • chore(deps): update dependency @​types/node to v20.16.2 (b9cdc65b)
  • chore(deps): update typescript-eslint monorepo to v8.3.0 (28913e79)
  • chore(deps): update dependency @​swc/core to v1.7.18 (fa03cba8)

... (truncated)

Commits
  • 81e15c3 chore(): release v10.4.9
  • 3d0fe0b Merge pull request #2838 from yifanwww/fix/webpack-ignore-lazy-imports
  • a1cc6cf fix: add missing class-transformer/storage in lazy import list
  • 4af113e Merge pull request #2815 from nestjs/renovate/typescript-5.x
  • 2e929c3 fix(deps): update dependency typescript to v5.7.2
  • 67503d3 Merge pull request #2830 from nestjs/renovate/webpack-5.x
  • 6110b8e chore(deps): update dependency @​swc/core to v1.10.1 (#2837)
  • ce66172 fix(deps): update dependency webpack to v5.97.1
  • bec6134 chore(deps): update dependency @​swc/core to v1.10.0 (#2832)
  • b10c00e chore(deps): update dependency prettier to v3.4.2 (#2831)
  • Additional commits viewable in compare view

Updates @nestjs/schematics from 10.1.1 to 10.2.3

Release notes

Sourced from @​nestjs/schematics's releases.

Release 10.2.3

  • Merge pull request #1919 from micalevisk/patch-1 (590ad1f)
  • Merge pull request #1915 from nestjs/renovate/angular-cli-monorepo (c2a0085)
  • Merge pull request #1918 from micalevisk/refactor-remove-deprecated-node-apis (2546cdb)
  • fix: downgrade eslint to v8 on application files (c716ed9)
  • refactor: drop deprecate nodejs utility api (e323a5a)
  • chore(deps): update babel monorepo to v7.26.0 (5eddd5a)
  • chore(deps): update dependency @​types/node to v20.17.1 (66013b1)
  • fix(deps): update angular-cli monorepo to v17.3.11 (5d47e13)
  • chore(deps): update dependency @​types/node to v20.17.0 (f614f17)
  • chore(deps): update dependency @​types/jest to v29.5.14 (ea8edec)
  • chore(deps): update babel monorepo to v7.25.9 (f50afcb)
  • chore(deps): update dependency @​types/node to v20.16.14 (39a550e)
  • chore(deps): update typescript-eslint monorepo to v8.11.0 (9271009)
  • Merge pull request #1904 from nestjs/renovate/release-it-17.x (fb410a8)
  • chore(deps): update dependency @​types/node to v20.16.13 (353afd8)
  • chore(deps): update dependency eslint to v9.13.0 (ba3b0d5)
  • chore(deps): update typescript-eslint monorepo to v8.10.0 (9d90c4d)
  • chore(deps): update dependency release-it to v17.10.0 (a880ab3)

Release 10.2.2

  • Merge pull request #1905 from nestjs/revert-1899-patch-1 (5fee5b0)
  • Revert "feat: enable forceConsistentCasingInFileNames for 'application' template" (8b4e2ec)

Release 10.2.1

  • chore: temporarily use web release (fcda2d4)
  • chore: regenerate package-lock (a97af97)
  • chore: regenerate package-lock (68ad379)
  • Merge branch 'master' of https://github.com/nestjs/schematics (14d1bba)
  • chore: update application schematic readme (ac76463)
  • chore(deps): update dependency @​types/node to v20.16.12 (427e447)

Release 10.2.0

  • Merge branch 'BrunnerLivio-feature/use-env-port' (8cb708c)
  • chore: resolve conflicts, update to nullish coalescing (1572899)
  • Merge branch 'master' of https://github.com/nestjs/schematics (7acea9b)
  • chore: update readme (e4b101c)
  • Merge pull request #1813 from nestjs/renovate/comment-json-4.x (cb3e503)
  • fix(deps): update dependency comment-json to v4.2.5 (ef65b9b)
  • Merge pull request #1862 from nestjs/renovate/angular-cli-monorepo (b5554ff)
  • Merge pull request #1899 from micalevisk/patch-1 (b1e1f8f)
  • Merge pull request #1902 from nestjs/renovate/release-it-17.x (3779fd3)
  • chore: update readme (5001925)
  • chore(deps): update dependency release-it to v17.10.0 (457d711)
  • chore(deps): update typescript-eslint monorepo to v8.9.0 (9ba353f)
  • chore(deps): update dependency release-it to v17.9.0 (87b1e53)
  • feat: enable forceConsistentCasingInFileNames for 'application' template (052e658)
  • chore(deps): update babel monorepo to v7.25.8 (a6b1074)
  • chore(deps): update dependency release-it to v17.8.2 (4eeaa31)
  • chore(deps): update dependency typescript to v5.6.3 (288fb88)

... (truncated)

Commits
  • 88e10f3 chore(): release v10.2.3
  • 590ad1f Merge pull request #1919 from micalevisk/patch-1
  • c2a0085 Merge pull request #1915 from nestjs/renovate/angular-cli-monorepo
  • 2546cdb Merge pull request #1918 from micalevisk/refactor-remove-deprecated-node-apis
  • c716ed9 fix: downgrade eslint to v8 on application files
  • e323a5a refactor: drop deprecate nodejs utility api
  • 5eddd5a chore(deps): update babel monorepo to v7.26.0
  • 66013b1 chore(deps): update dependency @​types/node to v20.17.1
  • 5d47e13 fix(deps): update angular-cli monorepo to v17.3.11
  • f614f17 chore(deps): update dependency @​types/node to v20.17.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [picomatch](https://github.com/micromatch/picomatch) to 2.3.2 and updates ancestor dependencies [picomatch](https://github.com/micromatch/picomatch), [@nestjs/cli](https://github.com/nestjs/nest-cli) and [@nestjs/schematics](https://github.com/nestjs/schematics). These dependencies need to be updated together.


Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `@nestjs/cli` from 10.3.2 to 10.4.9
- [Release notes](https://github.com/nestjs/nest-cli/releases)
- [Commits](nestjs/nest-cli@10.3.2...10.4.9)

Updates `@nestjs/schematics` from 10.1.1 to 10.2.3
- [Release notes](https://github.com/nestjs/schematics/releases)
- [Commits](nestjs/schematics@10.1.1...10.2.3)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: "@nestjs/cli"
  dependency-version: 10.4.9
  dependency-type: direct:development
- dependency-name: "@nestjs/schematics"
  dependency-version: 10.2.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants