From f39a8c687738f1846bbde816b8429e95f66f9071 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Fri, 6 Nov 2026 12:09:49 +0000 Subject: [PATCH] fix: upgrade glob from 13.0.6 to 13.0.7 Resolve the glob ^13 ranges to 13.0.7, which backports the abort-signal fix for CVE-2026-118773 without leaving the ranges Expo and rimraf request. Co-authored-by: chris --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index bda787453..ef1b0db15 100644 --- a/yarn.lock +++ b/yarn.lock @@ -13253,13 +13253,13 @@ __metadata: linkType: hard "glob@npm:^13.0.0, glob@npm:^13.0.3": - version: 13.0.6 - resolution: "glob@npm:13.0.6" + version: 13.0.7 + resolution: "glob@npm:13.0.7" dependencies: minimatch: "npm:^10.2.2" minipass: "npm:^7.1.3" path-scurry: "npm:^2.0.2" - checksum: 10c0/269c236f11a9b50357fe7a8c6aadac667e01deb5242b19c84975628f05f4438d8ee1354bb62c5d6c10f37fd59911b54d7799730633a2786660d8c69f1d18120a + checksum: 10c0/e32f4b9029a28f2b2d3610a55758fef37aa9c7098a5ba118628a5332eddd5299c7261d09ed9812e35afac117bc5f1f528ea3a8f4df2d941e38e0bc4f169221f8 languageName: node linkType: hard