Skip to content

Bump globby from 13.2.2 to 16.2.2#986

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/globby-16.2.2
Open

Bump globby from 13.2.2 to 16.2.2#986
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/globby-16.2.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps globby from 13.2.2 to 16.2.2.

Release notes

Sourced from globby's releases.

v16.2.2

  • Fix: Do not enumerate ignored directories with gitignore option 8bf8f54

sindresorhus/globby@v16.2.1...v16.2.2

v16.2.1

  • Fix gitignore ignoring an entire checkout under an anchored ancestor path (#277) e7bd988

sindresorhus/globby@v16.2.0...v16.2.1

v16.2.0


sindresorhus/globby@v16.1.1...v16.2.0

v16.1.1

  • Fix negation patterns with absolute filesystem paths 72e9916

sindresorhus/globby@v16.1.0...v16.1.1

v16.1.0


sindresorhus/globby@v16.0.0...v16.1.0

v16.0.0

Breaking

  • Respect parent .gitignore files when gitignore option is enabled b9a9a84
    • When {gitignore: true}, Globby now searches for .gitignore files up to the Git repo root (if detected). This matches Git's actual behavior where parent .gitignore patterns apply to subdirectories. Previously, only .gitignore files within the glob search path were considered. This change could break existing code that relied on the previous, more limited behavior.

Improvements

  • Support negation-only patterns 1273541
  • Respect custom fs implementation from options c2eb272
  • Add some more options to isGitIgnored functions e794ff9
  • Improve error message for invalid cwd option 7535e6d

Fixes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [globby](https://github.com/sindresorhus/globby) from 13.2.2 to 16.2.2.
- [Release notes](https://github.com/sindresorhus/globby/releases)
- [Commits](sindresorhus/globby@v13.2.2...v16.2.2)

---
updated-dependencies:
- dependency-name: globby
  dependency-version: 16.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 23, 2026
@github-actions

Copy link
Copy Markdown
Contributor

We detected some changes in packages/*/package.json or packages/*/source, and there are no updates in the .changeset directory.

If the changes are user-facing and should cause a version bump, run pnpm changeset to track your changes and include them in the next release CHANGELOG.

If you are making simple updates to repo configuration, examples, or documentation, you do not need to add a changeset.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants