Sourced from micromatch's changelog.
[4.0.8] - 2024-08-22
- backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch
[4.0.7] - 2024-05-22
- this is basically v4.0.5, with some README updates
- it is vulnerable to CVE-2024-4067
- Updated braces to v3.0.3 to avoid CVE-2024-4068
- does NOT break API compatibility
[4.0.6] - 2024-05-21
- Added
hasBracesto check if a pattern contains braces.- Fixes CVE-2024-4067
- BREAKS API COMPATIBILITY
- Should be labeled as a major release, but it's not.
[4.0.1 - 4.0.5]
[4.0.0] - 2019-03-20
Added
- Adds support for
options.onMatch. See the readme for details- Adds support for
options.onIgnore. See the readme for details- Adds support for
options.onResult. See the readme for detailsBreaking changes
- Require Node.js >= 8.6
- Removed support for passing an array of brace patterns to
micromatch.braces().- To strictly enforce closing brackets (for
{,[, and(), you must now usestrictBrackets=trueinstead ofstrictErrors.cache- caching and all related options and methods have been removedoptions.unixifywas renamed tooptions.windowsoptions.nodupesWas removed. Duplicates are always removed by default. You can override this with custom behavior by using theonMatch,onResultandonIgnorefunctions.options.snapdragonwas removed, as snapdragon is no longer used.options.sourcemapwas removed, as snapdragon is no longer used, which provided sourcemap support.[3.0.0] - 2017-04-11
Complete overhaul, with 36,000+ new unit tests validated against actual output generated by Bash and minimatch. More specifically, 35,000+ of the tests:
- micromatch results are directly compared to bash results
- in rare cases, when micromatch and bash disagree, micromatch's results are compared to minimatch's results
- micromatch is much more accurate than minimatch, so there were cases where I had to make assumptions. I'll try to document these.
This refactor introduces a parser and compiler that are supersets of more granular parsers and compilers from other sub-modules. Each of these sub-modules has a singular responsibility and focuses on a certain type of matching that aligns with a specific part of the Bash "expansion" API.
These sub-modules work like plugins to seamlessly create the micromatch parser/compiler, so that strings are parsed in one pass, an AST is created, then a new string is generated by the compiler.
... (truncated)
8bd704e
4.0.8a0e6841
run verb to generate README documentation4ec2884
Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805
Merge pull request #266
from hauserkristof/feature/v4.0.8814f5f7
lint67fcce6
fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3
fix: CVE numbers in CHANGELOGd9dbd9a
feat: updated CHANGELOG2ab1315
fix: use actions/setup-node@v41406ea3
feat: rework test to work on macos with node 10,12 and 14