Vulnerability in dependencies "minimatch" <10.2.1 #2267

Activity

1. remy

   added 2 commits that reference this issue on Feb 19, 2026

   fix: bump minimatch

   ...

   This issue will close once commit e089516 is merged into the 'main' branch.

   e089516

   fix: bump minimatch

   ...

   This issue will close once commit 9376af3 is merged into the 'main' branch.

   9376af3
2. remy

   closed this as completedin #2268on Feb 19, 2026
3. remy commented on Feb 19, 2026

   

   remy

   on Feb 19, 2026

   Owner

   More actions

   bump going up in the next release

   🎉React with 🎉2Reacted by Daniel Waters and Patrick Augusto
4. lkraav commented on Mar 21, 2026

   

   lkraav

   on Mar 21, 2026

   Last edited by lkraav

   More actions

   This missed bumping engine requirements to Node 18+, because now on Node 16, nodemon-3.1.12+ won't install, breaking reasonable ^ constraints like ^3.1.11.

   $ npm --workspaces=false install --package-lock-only
   npm ERR! code EBADENGINE
   npm ERR! engine Unsupported engine
   npm ERR! engine Not compatible with your version of node/npm: minimatch@10.2.4
   npm ERR! notsup Not compatible with your version of node/npm: minimatch@10.2.4
   npm ERR! notsup Required: {"node":"18 || 20 || >=22"}
   npm ERR! notsup Actual:   {"npm":"8.19.4","node":"v16.20.2"}
   
   npm ERR! A complete log of this run can be found in:
   npm ERR!     /home/node/.npm/_logs/2026-03-21T14_28_38_848Z-debug-0.log