Bump minimatch, gettext-extractor, glob and rimraf in /build-tools

[dependabot]

Bumps minimatch to 10.2.2 and updates ancestor dependencies minimatch, gettext-extractor, glob and rimraf. These dependencies need to be updated together.

Updates minimatch from 3.0.4 to 10.2.2

Changelog

Sourced from minimatch's changelog.

change log

10.2

• Add braceExpandMax option

10.1

• Add magicalBraces option for escape
• Fix makeRe when partial: true is set.
• Fix makeRe when pattern ends in a final ** path part.

10.0

• Require node 20 or 22 and higher

9.0

• No default export, only named exports.

8.0

• Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
• Bump required Node.js version

7.4

• Add escape() method
• Add unescape() method
• Add Minimatch.hasMagic() method

7.3

• Add support for posix character classes in a unicode-aware way.

7.2

• Add windowsNoMagicRoot option

7.1

• Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

... (truncated)

Commits

• f42b239 10.2.2
• fa2133b update deps
• b9d0153 ci: update action workflows
• 35d9ee9 expand engines to include node 18
• 6d7ac34 10.2.1
• 2e111f3 coalesce consecutive non-globstar * characters
• 1a62a2a 10.2.0
• 758b5a3 changelog 10.2
• 903e50b add braceExpandMax option, format
• a50a110 10.1.3
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates gettext-extractor from 3.5.3 to 4.0.6

Release notes

Sourced from gettext-extractor's releases.

v4.0.6

What's Changed

• Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 by @​dependabot[bot] in connectedcars/gettext-extractor#95

Full Changelog: connectedcars/gettext-extractor@v4.0.5...v4.0.6

v4.0.5

• Added prepublish step
• Also rebuilt the remove debug console error outputs

v4.0.4

• Fixed audit vulnerabilities

v4.0.3

Fixes

• Bump js-yaml from 3.14.0 to 3.14.2 by @​dependabot[bot] in connectedcars/gettext-extractor#92

v4.0.2

Improvements

• Switches from Yarn to npm connectedcars/gettext-extractor#84

Fixes

• Bump glob connectedcars/gettext-extractor#91

v4.0.1

Bugfixes

• Fixes naming of repository in package.json connectedcars/gettext-extractor@9a5e264

v4.0.0

Breaking changes

• Remove support for Node versions 6 to 18 (new minimum version is 20) #82

Improvements

• Removed looking for maintainer notice #75
• Updated author information #75
• Updated Node versions for test workflow #75
• Updated glob dependency from 5 - 7 to 11 #82
• Updated jest versions #82

v3.8.0

Features

• New JsExtractors.htmlTemplate extractor #64

Bugfixes

• Fix comment extraction around variable assignment #65

v3.7.2

... (truncated)

Commits

• 79b78a6 4.0.6
• 5c18c7e Merge pull request #95 from connectedcars/dependabot/npm_and_yarn/isaacs/brac...
• 43efc7d Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1
• 82e24fd 4.0.5
• 891381f Added prepublish step
• d920b44 4.0.4
• e2e6a9d Fixed audit vulnerabilities
• 83c3399 4.0.3
• f788173 Merge pull request #92 from connectedcars/dependabot/npm_and_yarn/js-yaml-3.14.2
• cdc8e0c Bump js-yaml from 3.14.0 to 3.14.2
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by mex, a new releaser for gettext-extractor since your current version.

Updates glob from 7.1.7 to 13.0.6

Changelog

Sourced from glob's changelog.

changeglob

13

• Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

• Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
• Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
• Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

• e80cb38 13.0.6
• 9cdbbff revert tsgo, not ready for test coverage correctness yet
• 89c99ba use tsgo compiler
• b7275d5 update deps, expand engines to include node 18
• 942e360 update workflows, pull taprc out of package.json
• 4a0d53c update tap for mockImport bugfix
• ef94ad2 update tap
• 180c2d4 update docs
• 37993c8 remove stray console.error in test
• 03ae4c2 13.0.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for glob since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates rimraf from 3.0.2 to 6.1.3

Changelog

Sourced from rimraf's changelog.

6.1

• Move to native fs/promises usage instead of promisifying manually.

6.0

• Drop support for nodes before v20
• Add --version to CLI

5.0

• No default export, only named exports

4.4

• Provide Dirent or Stats object as second argument to filter

4.3

• Return boolean indicating whether the path was fully removed
• Add filter option
• bin: add --verbose, -v to print files as they are deleted
• bin: add --no-verbose, -V to not print files as they are deleted
• bin: add -i --interactive to be prompted on each deletion
• bin: add -I --no-interactive to not be prompted on each deletion
• 4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

• Brought back glob support, using the new and improved glob v9

v4.1

• Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.
• Accept and ignore -rf and -fr arguments to the bin.

v4.0

• Remove glob dependency entirely. This library now only accepts actual file and folder names to delete.
• Accept array of paths or single path.
• Windows performance and reliability improved.
• All strategies separated into explicitly exported methods.
• Drop support for Node.js below version 14
• rewrite in TypeScript

... (truncated)

Commits

• f738c78 6.1.3
• a164a85 update deps
• 4635ba7 update deps
• 509c53f limit ci workflow permissions
• 68ce04f formatting
• 37680c5 add warning to not pass untrusted input to this method ever
• 786563d remove contributing doc, already covered by .github repo
• dbeef73 contributing
• 84d27af update workflows and standard project junk
• cd45498 6.1.2
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for rimraf since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.