78:T22e9,![snyk\-top\-banner](https://cdn.trylle.com/media/images/75315cc2f239a742b90777373d04dfea?key=AbXYfN5i4GFPnro%2FzEJSoJkzj%2B69vLKUcqb6FpQjHHHBxuWsM8C3XTB3DIaC5lNeKG10LXvhjn5uSCadxnxrJ4xsK4AiSjh0rIgOdwO5WBGt4SVobH%2Bd72UoCQLFfp90%2Ft28QqgSiwoVhl6%2FyRFsIFDdTxBhiQNo47wjRPXkJGbp%2FOt1Wn6ljfNS3X%2FsxjXDCS7kX4gJFR2TcnbAss%2F8cm8Sz1tjNecDeh370t1HM%2BjOJZUz%2F7BFy4GIDMkM)

Snyk has created this PR to upgrade minimatch from 10.2.5 to 10.2.6.

:information\_source: Keep your dependencies up\-to\-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

- The recommended version is **1 version** ahead of your current version. - The recommended version was released **2 months ago**. #### Issues fixed by the recommended upgrade: | | Issue | Score | Exploit Maturity | |:-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------:|:--------------------------------------------------------------------------------------------------------------------------------------------------- |:------- |:---------------- | | ![high severity](https://cdn.trylle.com/media/images/7e80e74af0d55e3643e5ab19091fc7e0?key=AYDgiYdHAvFKQf3kAtgNuMslrYz6RvNra5gC2hXJvPHqfIYViVePv7cjF%2Fu1lH9BZwm1Ttjm2zuzVsNbTq%2BxtLCv%2BGQX6MS4PLpKDZ4EDUWXZ1%2B10dYU6g65F8VgQZUbj5y5baUpdXmzIJahx2LEcgJpTJEeX6L2QSOjIc99%2Ff1Dm5pBqCZTf%2BJTsysQJRhae4XqIxFhddLVQFhMHZ1UxaQr3EehUTuhw1MjpzhHeCVT0Nb%2FINotoKLq "high severity") | Inefficient Algorithmic Complexity
[SNYK\-JS\-BRACEEXPANSION\-17706650](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-17706650) | **124** | No Known Exploit | | ![high severity](https://cdn.trylle.com/media/images/7e80e74af0d55e3643e5ab19091fc7e0?key=AYDgiYdHAvFKQf3kAtgNuMslrYz6RvNra5gC2hXJvPHqfIYViVePv7cjF%2Fu1lH9BZwm1Ttjm2zuzVsNbTq%2BxtLCv%2BGQX6MS4PLpKDZ4EDUWXZ1%2B10dYU6g65F8VgQZUbj5y5baUpdXmzIJahx2LEcgJpTJEeX6L2QSOjIc99%2Ff1Dm5pBqCZTf%2BJTsysQJRhae4XqIxFhddLVQFhMHZ1UxaQr3EehUTuhw1MjpzhHeCVT0Nb%2FINotoKLq "high severity") | Allocation of Resources Without Limits or Throttling
[SNYK\-JS\-BRACEEXPANSION\-16755174](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-16755174) | **124** | No Known Exploit | | ![high severity](https://cdn.trylle.com/media/images/7e80e74af0d55e3643e5ab19091fc7e0?key=AYDgiYdHAvFKQf3kAtgNuMslrYz6RvNra5gC2hXJvPHqfIYViVePv7cjF%2Fu1lH9BZwm1Ttjm2zuzVsNbTq%2BxtLCv%2BGQX6MS4PLpKDZ4EDUWXZ1%2B10dYU6g65F8VgQZUbj5y5baUpdXmzIJahx2LEcgJpTJEeX6L2QSOjIc99%2Ff1Dm5pBqCZTf%2BJTsysQJRhae4XqIxFhddLVQFhMHZ1UxaQr3EehUTuhw1MjpzhHeCVT0Nb%2FINotoKLq "high severity") | Allocation of Resources Without Limits or Throttling
[SNYK\-JS\-BRACEEXPANSION\-18512280](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-18512280) | **124** | Proof of Concept | | ![high severity](https://cdn.trylle.com/media/images/7e80e74af0d55e3643e5ab19091fc7e0?key=AYDgiYdHAvFKQf3kAtgNuMslrYz6RvNra5gC2hXJvPHqfIYViVePv7cjF%2Fu1lH9BZwm1Ttjm2zuzVsNbTq%2BxtLCv%2BGQX6MS4PLpKDZ4EDUWXZ1%2B10dYU6g65F8VgQZUbj5y5baUpdXmzIJahx2LEcgJpTJEeX6L2QSOjIc99%2Ff1Dm5pBqCZTf%2BJTsysQJRhae4XqIxFhddLVQFhMHZ1UxaQr3EehUTuhw1MjpzhHeCVT0Nb%2FINotoKLq "high severity") | Allocation of Resources Without Limits or Throttling
[SNYK\-JS\-BRACEEXPANSION\-18313044](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-18313044) | **124** | Proof of Concept | | ![high severity](https://cdn.trylle.com/media/images/7e80e74af0d55e3643e5ab19091fc7e0?key=AYDgiYdHAvFKQf3kAtgNuMslrYz6RvNra5gC2hXJvPHqfIYViVePv7cjF%2Fu1lH9BZwm1Ttjm2zuzVsNbTq%2BxtLCv%2BGQX6MS4PLpKDZ4EDUWXZ1%2B10dYU6g65F8VgQZUbj5y5baUpdXmzIJahx2LEcgJpTJEeX6L2QSOjIc99%2Ff1Dm5pBqCZTf%2BJTsysQJRhae4XqIxFhddLVQFhMHZ1UxaQr3EehUTuhw1MjpzhHeCVT0Nb%2FINotoKLq "high severity") | Uncontrolled Recursion
[SNYK\-JS\-BRACEEXPANSION\-20244952](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-20244952) | **124** | Proof of Concept | | ![high severity](https://cdn.trylle.com/media/images/7e80e74af0d55e3643e5ab19091fc7e0?key=AYDgiYdHAvFKQf3kAtgNuMslrYz6RvNra5gC2hXJvPHqfIYViVePv7cjF%2Fu1lH9BZwm1Ttjm2zuzVsNbTq%2BxtLCv%2BGQX6MS4PLpKDZ4EDUWXZ1%2B10dYU6g65F8VgQZUbj5y5baUpdXmzIJahx2LEcgJpTJEeX6L2QSOjIc99%2Ff1Dm5pBqCZTf%2BJTsysQJRhae4XqIxFhddLVQFhMHZ1UxaQr3EehUTuhw1MjpzhHeCVT0Nb%2FINotoKLq "high severity") | Uncontrolled Recursion
[SNYK\-JS\-BRACEEXPANSION\-20244948](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-20244948) | **124** | No Known Exploit | | ![medium severity](https://cdn.trylle.com/media/images/1bcb278993afba87ec305b23f3452d26?key=AQV1ujzDmKMVHZVwXrcIxVV1629f3owctxiIstecmDiVASwl%2FgcLty92GXQ%2FtYXsyF3cGUacIiyAPCFg5Q6R5KyE6diADtES5SUn3CEq71L%2BSa8TP%2Br8Q3tLRZZCyANI9js7f%2B9PCWVBDOZepjO77QimfLEIZgGgtyG5XXB3yecoyQTkrtEPQ43lo%2FkgMoiE53zv6xW3cG1A206NBWQhZBS0JTTOWzAlVsYbnrv%2F%2BhHpRhQRUMO%2Fz2q8xBM%3D "medium severity") | Regular Expression Denial of Service (ReDoS)
[SNYK\-JS\-BRACEEXPANSION\-20244950](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-20244950) | **124** | Proof of Concept | #### Breaking Change Risk ![Merge Risk: Low](https://cdn.trylle.com/media/images/8ad9437fa066013c5c12fb1eede3a479?key=AV5eWbr%2Be1ckiANINaU6HjpEVpSyHCKMtI8e6GGhZnyc07bo1tNLmAcMzmvKWbIRBMyYJdEwAh44wPJjHOZPrC%2F0taaviSxCXMXirJsfs0dlHcjwavVEfMAORiswyYd1R0igdSrOUXYoNOC0OPOENENwACpijDoAU4WMcvV3%2FXE8yYh0PGy9%2BHpFw%2B5ERc6hbi%2FfXbNlJUitk8NjRTLP7n7GnAs%3D) > **Notice:** This assessment is enhanced by AI.

Release notes

Package name: minimatch

10.2.6 - 2026-07-27
10.2.6
10.2.5 - 2026-03-30
10.2.5

from minimatch GitHub release notes

*** > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - This PR was automatically created by Snyk using the credentials of a real user. > - Max score is 1000. Note that the real score may have changed since the PR was raised. *** **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* **For more information:** > > - 🧐 [View latest project report](https://app.snyk.io/org/aerospike-clients/project/d16612a8-60d2-4883-b646-53255d23214a?utm_source=github&utm_medium=referral&page=upgrade-pr) > - 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template) > - 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/aerospike-clients/project/d16612a8-60d2-4883-b646-53255d23214a/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) > - 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/aerospike-clients/project/d16612a8-60d2-4883-b646-53255d23214a/settings/integration?pkg=minimatch&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) 62:["$","$L75",null,{"entries":[{"key":["platform",{"userId":"anon"},"pulls","page",{"owner":"aerospike","repo":"aerospike-client-nodejs","pullNumber":1104}],"data":{"repositoryId":"3699","detail":{"author":{"avatarUrl":"https://cdn.trylle.com/media/images/a0f92bef88468bb71896fe1949c0b38d?key=AQE9TWdwyKPUnbOSIHR%2BW%2FqFvLL5%2Bu%2FKHimWZ3Q0%2FFmV2cGu4K2YYql8CqJXlGe9lxUE8KxcSmJpXg0l1kaHfEYOTDgl2e4p44Hgu8MR5DQ26fxDxgiJb%2B5DsJSd7wcjUkquoFr34O4kMI7lKJDJeo6B54FnnqMnWlMRpFQPuShXO%2FosJUNJEWuZ","externalProvider":"github","login":"filkeith","type":"User","url":"https://github.com/filkeith"},"authorId":"1285713","baseRefName":"master","closedAt":null,"comments":2,"createdAt":"2026-10-01T07:31:02Z","headRefName":"snyk-upgrade-d88b75fce31d982501bfe6acce8be1c3","id":"4923573","isDraft":false,"labels":[],"number":1104,"repository":{"name":"aerospike-client-nodejs","owner":"aerospike","provider":"forgejo"},"state":"open","title":"[Snyk] Upgrade minimatch from 10.2.5 to 10.2.6","updatedAt":"2026-10-01T07:38:20Z","url":"https://trylle.com/aerospike/aerospike-client-nodejs/pulls/1104","body":"$78","additions":65,"deletions":18,"changedFiles":2,"commits":1,"reviewComments":0,"headSha":"acc9ca697af3c0a4760ca79fa3c96706ef6c629d","baseSha":"79241ba542e83679169b398f6f5b0eeeda35b263","headRepoOwner":"aerospike","headRepoName":"aerospike-client-nodejs","isMerged":false,"mergeCommitSha":null,"mergedBy":null,"mergeable":false,"mergeableState":"dirty","conflictingFiles":["package-lock.json"],"requestedTeams":[],"requestedReviewers":[],"graphqlId":"issue:1104"},"comments":[{"id":26777085,"graphqlId":"26777085","body":"![Merge Risk: Low](https://cdn.trylle.com/media/images/8ad9437fa066013c5c12fb1eede3a479?key=AV5eWbr%2Be1ckiANINaU6HjpEVpSyHCKMtI8e6GGhZnyc07bo1tNLmAcMzmvKWbIRBMyYJdEwAh44wPJjHOZPrC%2F0taaviSxCXMXirJsfs0dlHcjwavVEfMAORiswyYd1R0igdSrOUXYoNOC0OPOENENwACpijDoAU4WMcvV3%2FXE8yYh0PGy9%2BHpFw%2B5ERc6hbi%2FfXbNlJUitk8NjRTLP7n7GnAs%3D)\n\nThis is a patch version upgrade for minimatch, from 10.2.5 to 10.2.6.\n\nRecent versions leading up to this release have focused on patching high\\-severity ReDoS (Regular Expression Denial of Service) vulnerabilities. This patch likely contains further security hardening or minor bug fixes. No breaking changes are documented or expected in this maintenance release.\n\nSource: Package documentation\n\n> **Notice 🤖:** This content was augmented using **artificial intelligence**. AI\\-generated content **may** contain **errors** and should be **reviewed** for accuracy before use.\n\n","createdAt":"2026-10-01T07:31:03Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/a0f92bef88468bb71896fe1949c0b38d?key=AQE9TWdwyKPUnbOSIHR%2BW%2FqFvLL5%2Bu%2FKHimWZ3Q0%2FFmV2cGu4K2YYql8CqJXlGe9lxUE8KxcSmJpXg0l1kaHfEYOTDgl2e4p44Hgu8MR5DQ26fxDxgiJb%2B5DsJSd7wcjUkquoFr34O4kMI7lKJDJeo6B54FnnqMnWlMRpFQPuShXO%2FosJUNJEWuZ","externalProvider":"github","login":"filkeith","type":"User","url":"https://github.com/filkeith"}},{"id":26777086,"graphqlId":"26777086","body":"## Example Run (8.1.2.3)\n29 tests ±0 27 ✅ ±0 3s ⏱️ +3s\n 1 suites ±0 2 💤 ±0 \n 1 files ±0 0 ❌ ±0 \n\nResults for commit acc9ca69. ± Comparison against base commit 85099cbf.\n\n[test-results]:data:application/gzip;base64,H4sIAAAAAAAC/1WMywrCMBBFf6Vk7SI2MmH8GRmmCQy2jeSxEv/dpGpad/ecC+epvMwuqetwPg0qFckdphIpS1grmor1yO0a8Qe3VJibsbu5y6OZLjzJXIXuwsUY4tfEsvZi23/Bj9h7Gx9yGx9rHJZFcgVFzMgEaMkb1nSxoJksejKMYDU4DwwjTur1BuxLADf/AAAA\n","createdAt":"2026-10-01T07:38:19Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/618d0dadf2cc03e4da918f9fce155434?key=AZR2NWibZ4GI6G7n0snc5O%2FCy3ukthRybL%2FnPkuHfb%2BSDl5jyY%2BICnK7fBwKjvxrsVV6C0JPZxZTQgFdB8jeaILFLR9JfexsaUup8AkkgNnbAGbZgojNsOfLPmKPf7SYvH%2FYQb5ondr7R93kUYfqwz0RJC2nyFR5R%2Brm41rXkHLcotJyErDIvfgcMw%3D%3D","externalProvider":"github","login":"github-actions[bot]","type":"Bot","url":"https://github.com/apps/github-actions"}}],"commits":[{"sha":"acc9ca697af3c0a4760ca79fa3c96706ef6c629d","message":"fix: upgrade minimatch from 10.2.5 to 10.2.6\n\nSnyk has created this PR to upgrade minimatch from 10.2.5 to 10.2.6.\n\nSee this package in npm:\nminimatch\n\nSee this project in Snyk:\nhttps://app.snyk.io/org/aerospike-clients/project/d16612a8-60d2-4883-b646-53255d23214a?utm_source=github&utm_medium=referral&page=upgrade-pr","createdAt":"2026-10-01T07:30:59Z","author":{"avatarUrl":"","login":"","name":"snyk-bot","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.no_gpg_keys_found"}}],"events":[],"reviews":[],"stackEvents":[],"commentPagination":{"totalCount":2,"perPage":30,"loadedPages":[1]},"eventPagination":{"loadedPages":[1],"hasMore":false},"headRefDeleted":false},"fetchedAt":1793417464955}],"children":"$L79"}] 64:null 6b:[["$","title","0",{"children":"Commits · [Snyk] Upgrade minimatch from 10.2.5 to 10.2.6 · aerospike/aerospike-client-nodejs | Trylle"}],["$","meta","1",{"name":"description","content":"Commits on [Snyk] Upgrade minimatch from 10.2.5 to 10.2.6 (#1104) in aerospike/aerospike-client-nodejs."}],["$","meta","2",{"name":"application-name","content":"Trylle"}],["$","link","3",{"rel":"manifest","href":"/manifest.json","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"Commits · [Snyk] Upgrade minimatch from 10.2.5 to 10.2.6 · aerospike/aerospike-client-nodejs, aerospike/aerospike-client-nodejs, aerospike/aerospike-client-nodejs repository, aerospike-client-nodejs, JavaScript repository, source code, trylle, agent-native git platform, git platform for agents and humans, git platform for ai agents, coding agent pull requests, ai code review, repository automation, stacked pull requests, two-way github sync, github-compatible actions, try cli"}],["$","meta","5",{"name":"robots","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","6",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","7",{"name":"googlebot","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","8",{"name":"twitter:domain","content":"trylle.com"}],["$","meta","9",{"name":"twitter:url","content":"https://trylle.com/aerospike/aerospike-client-nodejs/pulls/1104/commits"}],["$","link","10",{"rel":"canonical","href":"https://trylle.com/aerospike/aerospike-client-nodejs/pulls/1104/commits"}],["$","meta","11",{"name":"format-detection","content":"telephone=no"}],["$","meta","12",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","13",{"name":"apple-mobile-web-app-title","content":"Trylle"}],["$","meta","14",{"name":"apple-mobile-web-app-status-bar-style","content":"black-translucent"}],["$","meta","15",{"property":"og:title","content":"Commits · [Snyk] Upgrade minimatch from 10.2.5 to 10.2.6 · aerospike/aerospike-client-nodejs | Trylle"}],["$","meta","16",{"property":"og:description","content":"Commits on [Snyk] Upgrade minimatch from 10.2.5 to 10.2.6 (#1104) in aerospike/aerospike-client-nodejs."}],["$","meta","17",{"property":"og:url","content":"https://trylle.com/aerospike/aerospike-client-nodejs/pulls/1104/commits"}],["$","meta","18",{"property":"og:site_name","content":"Trylle"}],["$","meta","19",{"property":"og:locale","content":"en_US"}],["$","meta","20",{"property":"og:image","content":"https://trylle.com/api/og.png?kind=repo&owner=aerospike&repo=aerospike-client-nodejs"}],["$","meta","21",{"property":"og:image:secure_url","content":"https://trylle.com/api/og.png?kind=repo&owner=aerospike&repo=aerospike-client-nodejs"}],["$","meta","22",{"property":"og:image:type","content":"image/png"}],["$","meta","23",{"property":"og:image:width","content":"1200"}],["$","meta","24",{"property":"og:image:height","content":"630"}],["$","meta","25",{"property":"og:image:alt","content":"aerospike/aerospike-client-nodejs repository preview on Trylle"}],["$","meta","26",{"property":"og:type","content":"website"}],["$","meta","27",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","28",{"name":"twitter:site","content":"@trylle"}],["$","meta","29",{"name":"twitter:title","content":"Commits · [Snyk] Upgrade minimatch from 10.2.5 to 10.2.6 · aerospike/aerospike-client-nodejs | Trylle"}],["$","meta","30",{"name":"twitter:description","content":"Commits on [Snyk] Upgrade minimatch from 10.2.5 to 10.2.6 (#1104) in aerospike/aerospike-client-nodejs."}],["$","meta","31",{"name":"twitter:image","content":"https://trylle.com/api/og.png?kind=repo&owner=aerospike&repo=aerospike-client-nodejs"}],["$","meta","32",{"name":"twitter:image:alt","content":"aerospike/aerospike-client-nodejs repository preview on Trylle"}],["$","link","33",{"rel":"icon","href":"/favicon.png","type":"image/png"}],"$L7a","$L7b","$L7c"]

Commits on Thu, Oct 1, 2026