[jeffkl]

Bumps glob from 13.0.6 to 14.0.3 (^13.0.6 to ^14.0.3).

Changelog

Summarized from glob's changelog at v14.0.3.

14

• Adopts minimatch 11 and nonrecursive matchers instead of regular expressions, addressing pattern-driven ReDoS and aligning some edge cases more closely with Bash.
• Changes internal pattern types and matcher methods, removes debug, and introduces Unicode normalization through normalize.
• Changes walker results from sets to arrays and removes MatchRecord#entries().
• Aligns absolute ignore patterns with root, respects windowsPathsNoEscape for ignores, and handles long UNC paths on Windows.
• Improves ignore matching and directory traversal performance.
• Accepts readonly pattern and ignore arrays.
• Stops asynchronous directory traversal when its abort signal fires.

See the linked changelog for the complete API and behavior changes.

Commits

Selected upstream commits from the 37 commits between v13.0.6 and v14.0.3, newest first:

• fc93fd5 14.0.3
• cfdf76a update deps
• 54bbe8b fix windows test
• 93957bf 14.0.2
• 4682e8c fix: do not continue walking after signal abort
• 668a669 14.0.1
• 6ff2314 allow const/readonly string[] for ignore, patterns
• bbe1e5d 14.0.0

See all commits and the full diff in the compare view.

Validation

Local validation on Windows:

• Confirmed the installed direct dependency is glob@14.0.3.
• npm test: 55 of 56 test files passed with 100% coverage. test/symlink.js failed during fixture creation because Windows denied creation of the elf.js symlink (EPERM), before any test assertions ran.
• Repeated the failing test with the previous glob@13.0.6 using npm exec -- tap --no-coverage test\symlink.js: the same symlink fixture creation failed with EPERM. Restored glob@14.0.3 afterward. This local environment limitation predates the dependency update.
• Ran npm run lint separately: ESLint passed, but the subsequent template-oss-check reported unrelated drift in .github/dependabot.yml, .github/settings.yml, and the CI, CodeQL, and release workflows. Those files are unchanged by this PR.
• git diff --check passed.
• No lockfile change: this repository sets package-lock=false.