Thank you for your contribution to Debian.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Apr 2026 11:41:05 +0200 Source: node-minimatch Architecture: source Version: 9.0.7-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <[email protected]> Changed-By: Xavier Guimard <[email protected]> Closes: 1128579 1129095 Changes: node-minimatch (9.0.7-1) unstable; urgency=medium . * Team upload * New upstream version 9.0.7 (Closes: #1128579, #1129095) - fixes CVE-2026-26996, CVE-2026-27903, CVE-2026-27904 (ReDoS) * Declare compliance with policy 4.7.4 * debian/watch version 5, optimize * Switch build from rollup to tshy * Add patch to use brace-expansion 2.x default export * Use index.cjs wrapper for backward-compatible default export * Drop unused build-deps: rollup plugins, ts-node, node-tap * Replace upstream ESM tests with minimal require test (upstream tests need tap >= 21, not available in Debian) Checksums-Sha1: ad396f73efbbe57234c48e07b73db07962d04abd 2081 node-minimatch_9.0.7-1.dsc 670520f954d0f4532cb66e23ed8b9ccb79c420ea 103051 node-minimatch_9.0.7.orig.tar.gz 95ac5483176563b9af9ad931bd496a08f56a111f 4840 node-minimatch_9.0.7-1.debian.tar.xz Checksums-Sha256: b5e7e5b95a956cf02dc9e4a02711befac763e03f9b798b7027c83f174d2a48ef 2081 node-minimatch_9.0.7-1.dsc 8ce497d77411b0b1c3a1b02fc10db086a9e2699ab9447679fbd1843df378be72 103051 node-minimatch_9.0.7.orig.tar.gz 65264945986cb7f4fca96225adf3ad0853cd148eaca4c09be6d55f4b7dce64d9 4840 node-minimatch_9.0.7-1.debian.tar.xz Files: 0d5904b2bee4b4f8261ad344b7020b0a 2081 javascript optional node-minimatch_9.0.7-1.dsc 8ce743300cf8adda6106fe6364f37882 103051 javascript optional node-minimatch_9.0.7.orig.tar.gz 531596a1be15e850568d8565d006bb9c 4840 javascript optional node-minimatch_9.0.7-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmnTgEcACgkQ9tdMp8mZ 7umKrBAAk0ygdwSI1n/H8gfiwPaCYV26rROUkqQbcf72w0+PFxxw1fj0D6bNrr+o JVLLU2kWX4x8ajuulhV9l09qys5LcwHreDvPOVWDAafNfq/shppGo9SNwykSYE6U UqGfgQsz+UH4EMXwCe0yLIWA+byoEhAExBh9PcWkIC0TofkVZMaWxvlfQC+hMEuI mV94tEQx3sgWBsorgsmBXYmS4ZciQPhoPL0LdOGKzSwGxje4wB3e1Q+XNVkiloAo 0Nk+rRMlvQTYQBVH6QR9wKVlAmm8bIGabxYQOc2gyeZl4eLMAuKXT1eAMvdP6TWz 8W6xlz5zrVZp4eNFb7REf7wtBj2/2INbLB31wl0Fhlstayzp3d8dyl1nKDMFh05q K5+MdbUYuTPkTj7l3dPpmvjRHpoZLu1x0dC8XNz2iKXStKP8bUvZEE8Q9Btt5Rs/ iUN04EeFhz8u5rC+i4n50SFHWMFMB8m3M9HyL2UzAQoJFZ9t63WR0yA5Ggcw/HDI G1A/hB9hTkhlSKU2YrmBu+eATH/19FkSe1jlQ3wCDIyyc/ZgGTiQcea7fIhm/Dii ivj8MFWJBShVHBouYcy2JpLIqNgiwMotxwD/ijtJdN6R9ni1c0FHCGiwI4xV5ES3 FQm4hbliazD11GsQcfmuz1hC+eI+/RcwaWeE3muz/r57z9+Gffw= =MxAh -----END PGP SIGNATURE-----
pgpzNmODmpWZS.pgp
Description: PGP signature
-- Pkg-javascript-devel mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
