Skip to content

Bump picomatch from 2.3.1 to 2.3.2 in /eng/vsix-tools#2235

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/eng/vsix-tools/picomatch-2.3.2
Open

Bump picomatch from 2.3.1 to 2.3.2 in /eng/vsix-tools#2235
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/eng/vsix-tools/picomatch-2.3.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps picomatch from 2.3.1 to 2.3.2.

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
@dependabot dependabot bot requested review from a team as code owners March 26, 2026 19:45
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 26, 2026
@dependabot dependabot bot added the javascript Pull requests that update javascript code label Mar 26, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/eng/vsix-tools/picomatch-2.3.2 branch from 15c9182 to 1fec95e Compare April 16, 2026 19:45
KarishmaGhiya
KarishmaGhiya previously approved these changes Apr 16, 2026
@github-project-automation github-project-automation bot moved this from Untriaged to In Progress in Azure MCP Server Apr 16, 2026
@KarishmaGhiya KarishmaGhiya enabled auto-merge (squash) April 16, 2026 20:15
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/eng/vsix-tools/picomatch-2.3.2 branch from 1fec95e to 1eb4611 Compare April 16, 2026 20:15
@github-actions
Copy link
Copy Markdown

Hi @dependabot[bot]. We've noticed that new changes have been pushed to this pull request. Because it is set to automatically merge, we've reset the approvals to allow the opportunity to review the updates.

@github-actions github-actions bot dismissed KarishmaGhiya’s stale review April 16, 2026 20:16

Hi @KarishmaGhiya. We've noticed that new changes have been pushed to this pull request. Because it is set to automatically merge, we've reset the approvals to allow the opportunity to review the updates.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: In Progress

Development

Successfully merging this pull request may close these issues.

1 participant