From 222feb90b4f665e32032663577be9cf0223c515b Mon Sep 17 00:00:00 2001 From: "Abdullah." <125115953+mabdullahabaid@users.noreply.github.com> Date: Tue, 18 Nov 2025 21:12:53 +0500 Subject: [PATCH] fix: update glob version to 11.1.0 (#15884) Some Glob CLI related alerts were generated last night. I believe they're safe to dismiss since I do not expect us to use the Glob CLI in production environment, and those alerts do not impact the API, but still updating the dependency version just in case. Not sure if this would resolve all/any of the alerts since glob is a dependency for many other dependencies, so a good number of dependency variants are pulled in. The alert that confirms it's just a CLI related vulnerability: [Dependabot Alert 307](https://github.com/twentyhq/twenty/security/dependabot/307) --- packages/twenty-sdk/package.json | 1 + packages/twenty-server/package.json | 1 - packages/twenty-shared/package.json | 2 +- .../migrateFromSingleToMultiBarrelImport.ts | 4 +- packages/twenty-ui/package.json | 2 +- yarn.lock | 57 ++++++++----------- 6 files changed, 29 insertions(+), 38 deletions(-) diff --git a/packages/twenty-sdk/package.json b/packages/twenty-sdk/package.json index 801c6f2279..8728b613fc 100644 --- a/packages/twenty-sdk/package.json +++ b/packages/twenty-sdk/package.json @@ -20,6 +20,7 @@ "vite-tsconfig-paths": "^4.2.1" }, "dependencies": { + "glob": "^11.1.0", "twenty-shared": "workspace:*" }, "exports": { diff --git a/packages/twenty-server/package.json b/packages/twenty-server/package.json index 965c4b9606..281f8cf202 100644 --- a/packages/twenty-server/package.json +++ b/packages/twenty-server/package.json @@ -99,7 +99,6 @@ "express-session": "^1.18.2", "file-type": "16.5.4", "gaxios": "5.1.3", - "glob": "11.0.1", "google-auth-library": "8.9.0", "googleapis": "105.0.0", "graphql": "16.8.1", diff --git a/packages/twenty-shared/package.json b/packages/twenty-shared/package.json index f6fdcca331..76dc29112d 100644 --- a/packages/twenty-shared/package.json +++ b/packages/twenty-shared/package.json @@ -19,7 +19,7 @@ "@types/babel__preset-env": "^7", "@types/handlebars": "^4.1.0", "babel-plugin-module-resolver": "^5.0.2", - "glob": "^11.0.1", + "glob": "^11.1.0", "tsx": "^4.19.3", "vite": "^7.0.0", "vite-plugin-dts": "3.8.1", diff --git a/packages/twenty-shared/scripts/migrateFromSingleToMultiBarrelImport.ts b/packages/twenty-shared/scripts/migrateFromSingleToMultiBarrelImport.ts index 305be6ad90..1e951cb089 100644 --- a/packages/twenty-shared/scripts/migrateFromSingleToMultiBarrelImport.ts +++ b/packages/twenty-shared/scripts/migrateFromSingleToMultiBarrelImport.ts @@ -1,6 +1,6 @@ import prettier from '@prettier/sync'; import * as fs from 'fs'; -import glob from 'glob'; +import { globSync } from 'glob'; import * as path from 'path'; import ts from 'typescript'; const prettierConfigFile = prettier.resolveConfigFile(); @@ -82,7 +82,7 @@ function getTypeScriptFiles( includeIndex: boolean = false, ): string[] { const pattern = path.join(directoryPath, '**/*.{ts,tsx}'); - const files = glob.sync(pattern); + const files = globSync(pattern); return files.filter( (file) => diff --git a/packages/twenty-ui/package.json b/packages/twenty-ui/package.json index ab45d50ce9..e82c7345b0 100644 --- a/packages/twenty-ui/package.json +++ b/packages/twenty-ui/package.json @@ -29,7 +29,7 @@ "@tabler/icons-react": "^3.31.0", "date-fns": "^2.30.0", "framer-motion": "^11.18.0", - "glob": "^11.0.1", + "glob": "^11.1.0", "hex-rgb": "^5.0.0", "react": "^18.2.0", "react-dom": "^18.2.0", diff --git a/yarn.lock b/yarn.lock index 6e18b856b8..ef43085f14 100644 --- a/yarn.lock +++ b/yarn.lock @@ -37163,22 +37163,6 @@ __metadata: languageName: node linkType: hard -"glob@npm:11.0.1, glob@npm:^11.0.0, glob@npm:^11.0.1": - version: 11.0.1 - resolution: "glob@npm:11.0.1" - dependencies: - foreground-child: "npm:^3.1.0" - jackspeak: "npm:^4.0.1" - minimatch: "npm:^10.0.0" - minipass: "npm:^7.1.2" - package-json-from-dist: "npm:^1.0.0" - path-scurry: "npm:^2.0.0" - bin: - glob: dist/esm/bin.mjs - checksum: 10c0/2b32588be52e9e90f914c7d8dec32f3144b81b84054b0f70e9adfebf37cd7014570489f2a79d21f7801b9a4bd4cca94f426966bfd00fb64a5b705cfe10da3a03 - languageName: node - linkType: hard - "glob@npm:11.0.3": version: 11.0.3 resolution: "glob@npm:11.0.3" @@ -37196,8 +37180,8 @@ __metadata: linkType: hard "glob@npm:^10.0.0, glob@npm:^10.2.2, glob@npm:^10.3.10, glob@npm:^10.3.7": - version: 10.4.5 - resolution: "glob@npm:10.4.5" + version: 10.5.0 + resolution: "glob@npm:10.5.0" dependencies: foreground-child: "npm:^3.1.0" jackspeak: "npm:^3.1.2" @@ -37207,7 +37191,23 @@ __metadata: path-scurry: "npm:^1.11.1" bin: glob: dist/esm/bin.mjs - checksum: 10c0/19a9759ea77b8e3ca0a43c2f07ecddc2ad46216b786bb8f993c445aee80d345925a21e5280c7b7c6c59e860a0154b84e4b2b60321fea92cd3c56b4a7489f160e + checksum: 10c0/100705eddbde6323e7b35e1d1ac28bcb58322095bd8e63a7d0bef1a2cdafe0d0f7922a981b2b48369a4f8c1b077be5c171804534c3509dfe950dde15fbe6d828 + languageName: node + linkType: hard + +"glob@npm:^11.0.0, glob@npm:^11.1.0": + version: 11.1.0 + resolution: "glob@npm:11.1.0" + dependencies: + foreground-child: "npm:^3.3.1" + jackspeak: "npm:^4.1.1" + minimatch: "npm:^10.1.1" + minipass: "npm:^7.1.2" + package-json-from-dist: "npm:^1.0.0" + path-scurry: "npm:^2.0.0" + bin: + glob: dist/esm/bin.mjs + checksum: 10c0/1ceae07f23e316a6fa74581d9a74be6e8c2e590d2f7205034dd5c0435c53f5f7b712c2be00c3b65bf0a49294a1c6f4b98cd84c7637e29453b5aa13b79f1763a2 languageName: node linkType: hard @@ -40601,15 +40601,6 @@ __metadata: languageName: node linkType: hard -"jackspeak@npm:^4.0.1": - version: 4.0.2 - resolution: "jackspeak@npm:4.0.2" - dependencies: - "@isaacs/cliui": "npm:^8.0.2" - checksum: 10c0/b26039d11c0163a95b1e58851b9ac453cce64ad6d1eb98a00b303ad5eeb761b29d33c9419d1e16c016d3f7151c8edf7df223e6cf93a1907655fd95d6ce85c0de - languageName: node - linkType: hard - "jackspeak@npm:^4.1.1": version: 4.1.1 resolution: "jackspeak@npm:4.1.1" @@ -45433,7 +45424,7 @@ __metadata: languageName: node linkType: hard -"minimatch@npm:^10.0.0, minimatch@npm:^10.0.1": +"minimatch@npm:^10.0.1": version: 10.0.1 resolution: "minimatch@npm:10.0.1" dependencies: @@ -45442,7 +45433,7 @@ __metadata: languageName: node linkType: hard -"minimatch@npm:^10.0.3": +"minimatch@npm:^10.0.3, minimatch@npm:^10.1.1": version: 10.1.1 resolution: "minimatch@npm:10.1.1" dependencies: @@ -56509,6 +56500,7 @@ __metadata: resolution: "twenty-sdk@workspace:packages/twenty-sdk" dependencies: "@types/node": "npm:^24.0.0" + glob: "npm:^11.1.0" twenty-shared: "workspace:*" typescript: "npm:5.9.2" vite: "npm:^7.0.0" @@ -56643,7 +56635,6 @@ __metadata: express-session: "npm:^1.18.2" file-type: "npm:16.5.4" gaxios: "npm:5.1.3" - glob: "npm:11.0.1" google-auth-library: "npm:8.9.0" googleapis: "npm:105.0.0" graphql: "npm:16.8.1" @@ -56735,7 +56726,7 @@ __metadata: "@types/handlebars": "npm:^4.1.0" babel-plugin-module-resolver: "npm:^5.0.2" class-validator: "npm:^0.14.0" - glob: "npm:^11.0.1" + glob: "npm:^11.1.0" handlebars: "npm:^4.7.8" libphonenumber-js: "npm:^1.10.26" qs: "npm:^6.11.2" @@ -56772,7 +56763,7 @@ __metadata: babel-plugin-module-resolver: "npm:^5.0.2" date-fns: "npm:^2.30.0" framer-motion: "npm:^11.18.0" - glob: "npm:^11.0.1" + glob: "npm:^11.1.0" hex-rgb: "npm:^5.0.0" react: "npm:^18.2.0" react-dom: "npm:^18.2.0"