fix(deps): upgrade glob from ^11.0.3 to ^13.0.0 (fixes #1717)

glob@11.x is deprecated by its maintainer and flagged as containing
widely-publicised security vulnerabilities (including ReDoS risks).
The latest stable version is glob@13.0.6.

Compatibility verified: the codebase uses only `globSync` with
`{ nodir, absolute }` options in two files:
- src/services/transcripts/watcher.ts
- scripts/analyze-transformations-smart.js

The `globSync` function signature and these options are identical
in glob@13. No call-site changes are required.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
kbroughton
2026-04-11 11:00:37 -05:00
parent cde4faae2f
commit 8275b3da3b
+1 -1
View File
@@ -115,7 +115,7 @@
"ansi-to-html": "^0.7.2",
"dompurify": "^3.3.1",
"express": "^4.18.2",
"glob": "^11.0.3",
"glob": "^13.0.0",
"handlebars": "^4.7.8",
"picocolors": "^1.1.1",
"react": "^18.3.1",