[Snyk] Upgrade globby from 8.0.2 to 12.1.0

[snyk-bot]

Snyk has created this PR to upgrade globby from 8.0.2 to 12.1.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 16 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-01-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: globby

• 12.1.0 - 2022-01-15
  • Support URL for the cwd option (#201) 73c0aca

  v12.0.2...v12.1.0

• 12.0.2 - 2021-08-24
  • Ensure async method is completely async e167725

  v12.0.1...v12.0.2

• 12.0.1 - 2021-08-16
  • Internal changes 5a64253

  v12.0.0...v12.0.1

• 12.0.0 - 2021-07-22

  Breaking

  • Require Node.js 12.20 (#181) 5c32b4a
  • This package is now pure ESM. Please read this.
  • This package now uses named exports instead of a default export
    • globby → {globby}
    • globby.sync → {globbySync}
    • globby.stream → {globbyStream}
    • globby.generateGlobTasks → {generateGlobTasks}
    • globby.hasMagic → {isDynamicPattern}
    • globby.gitignore → {isGitIgnored}
    • globby.gitignore.sync → {isGitIgnoredSync}

  -const globby = require('globby');
  +import {globby} from 'globby';

  v11.0.4...v12.0.0

• 11.1.0 - 2022-01-08
  • Update dependencies to fix some npm audit notices

  v11.0.4...v11.1.0

• 11.0.4 - 2021-06-16
  • Support objectMode option in the TypeScript types (#178) a08264f

  v11.0.3...v11.0.4

• 11.0.3 - 2021-03-22
  • Fix Windows compatibility for gitignore option (#171) f67edfe

  v11.0.2...v11.0.3

• 11.0.2 - 2021-01-06
  • Fix gitignore option compatibility with objectMode option (#157) f9fc476

  v11.0.1...v11.0.2

• 11.0.1 - 2020-06-02
  • Normalize file paths to posix for gitignore calculation (#143) f2bdce6

  v11.0.0...v11.0.1

• 11.0.0 - 2020-01-06

  Breaking

  • Require Node.js 10 4a471af
  • Get rid of glob dependency (#135) d4681a4
    If you passed in options to globby.hasMagic(), you need to update to use the new options.

  v10.0.2...v11.0.0

• 10.0.2 - 2020-01-06
• 10.0.1 - 2019-07-05
• 10.0.0 - 2019-06-29
• 9.2.0 - 2019-04-01
• 9.1.0 - 2019-03-03
• 9.0.0 - 2019-01-11
• 8.0.2 - 2019-01-09

from globby GitHub release notes

Commit messages

Package name: globby

• 1be9d02 12.1.0
• 73c0aca Support `URL` as `cwd` (#201)
• de4082b DRY a little bit (#203)
• 60b7116 Use `fs.promises.readFile` instead of `promisify(fs.readFile)` (#204)
• 79765fb Upgrade dev dependencies
• 6e09986 12.0.2
• e167725 Ensure async method is completely async
• c69526f 12.0.1
• 5a64253 Meta tweaks
• 24453e6 12.0.0
• 662cafc Minor tweaks
• 5c32b4a Require Node.js 12.20 and move to ESM (#181)
• 94e192c 11.0.4
• a08264f Support `objectMode` option in the TypeScript types (#178)
• c1a3b32 11.0.3
• f67edfe Fix Windows compatibility for gitignore option (#171)
• 20bb8ae Rename `master` branch to `main`
• 4bb7f4a 11.0.2
• f9fc476 Fix `gitignore` option compatibility with `objectMode` option (#157)
• 7807d29 Move to GitHub Actions (#159)
• 52d02bb Upgrade dev dependencies (#154)
• 39b7636 11.0.1
• f2bdce6 Normalize file paths to posix for gitignore calculation (#143)
• 45ac58a 11.0.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs