Skip to content

[0.83] Replace glob@^7.0.0 with tinyglobby@^0.2.15#54759

Closed
kitten wants to merge 7 commits into
facebook:0.83-stablefrom
kitten:@kitten/backport-0.83/security/replace-glob-with-tinyglobby
Closed

[0.83] Replace glob@^7.0.0 with tinyglobby@^0.2.15#54759
kitten wants to merge 7 commits into
facebook:0.83-stablefrom
kitten:@kitten/backport-0.83/security/replace-glob-with-tinyglobby

Conversation

@kitten
Copy link
Copy Markdown
Contributor

@kitten kitten commented Dec 2, 2025

Summary:

Picked #54737 onto 0.83-stable

Changelog:

[GENERAL] [SECURITY] - Replace glob@^7.0.0 with tinyglobby@^0.2.15

Test Plan:

@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Dec 2, 2025
A difference between `glob` and `tinyglob` is how `ignore` is applied.
`glob` has an exception that only applies `.../*` patterns to files.
`tinyglobby` doesn't make this distinction and hence that'd also exclude
directories to be traversed. Patterns have been adjusted to account for
this.
@kitten kitten force-pushed the @kitten/backport-0.83/security/replace-glob-with-tinyglobby branch from a6f5c43 to 153975a Compare December 3, 2025 15:39
@kitten
Copy link
Copy Markdown
Contributor Author

kitten commented Dec 3, 2025

Not planned for a backport for now

@kitten kitten closed this Dec 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. p: Expo Partner: Expo Partner Pick Request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants