Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade fast-glob from 3.0.4 to 3.2.0 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade fast-glob from 3.0.4 to 3.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 5 versions ahead of your current version.
  • The recommended version was released a month ago, on 2020-02-15.
Release notes
Package name: fast-glob
  • 3.2.0 - 2020-02-15

    💬 Common

    • An empty pattern now causes an error (#247)

    🚀 Improvements

    In the #156 issue we've redesigned the deep filter, which controls the reading of directories in depth.

    Previously, this filter did not use positive patterns directly (only their maximum depth). The example below shows how many extra directories we read:

    {src,fixtures}/**
    

    src → read
    fixtures → read
    out → read
    node_modules → read

    Now we apply positive patterns.

    {src,fixtures}/**
    

    src → read
    fixtures → read
    out → skip
    node_modules → skip

    Synthetic benchmark

    More benchmarks can be found here.

    {fixtures,out}/{first,second}/*

    sync, ms async, ms stream, ms
    3.x.x 13 22 20
    3.2.0 5 9 8

    {fixtures,out}/**

    sync, ms async, ms stream, ms
    3.x.x 37 49 52
    3.2.0 6 10 12

    Real world benchmark

    • Globby
    • Prettier
    • {blocks-*,construct}/**/*.styl (a very large project) 13s → 0.16s

    Known issues

    • For some cases, there is a noticeable slowdown of 3-6%.
    • Patterns containing {a..z} (or similar) may introduce some slowdown.
    • Actually, fast-glob is 2 times slower than node-glob in this scenario.

    We will work on this in the future.

    🎉 Thanks

    • @jonschlinkert for the scan method in picomatch that returns parts of the pattern.
    • @fisker for early beta feedback.
  • 3.2.0-beta.2 - 2020-02-09
  • 3.2.0-beta - 2020-02-04
  • 3.1.1 - 2019-12-01

    🐛 Bug fixes

    Stream is not closed when the receiver is closed (#239)

    Previously, we read directories in the stream, even after the receiver is closed. Now we stop reading after closing the receiver by .emit('end'), .destroy() or for await...of.

    const fg = require('fast-glob');
    

    (async () => {
    const stream = fg.stream('**');

    <span class="pl-k">for</span> <span class="pl-en">await</span> (<span class="pl-k">const</span> <span class="pl-c1">entry</span> <span class="pl-k">of</span> <span class="pl-smi">stream</span>) {
        <span class="pl-en">console</span>.<span class="pl-c1">log</span>(entry);
    
        <span class="pl-k">return</span>;
    }
    

    })();

    Most likely, in future releases, we will improve integration with streams (#243).

  • 3.1.0 - 2019-10-06

    💬 Common

    📖 Documentation

    🐛 Bug Fixes

    • Matching specific file is not found when pattern contains parentheses (#223)
      • ⚠️ Now we route patterns with escape symbol to dynamic patterns
    • Match subdirectories starting with . in {dot: false} mode (#226)

    ⚙️ Infrastructure

    • Move from TSLint to ESLint (#233)
  • 3.0.4 - 2019-07-05

    This is a maintenance release.

    💬 Common

    • Set correct default value for the onlyFiles option in the documentation (thanks, @garyking)
    • Disable the strictSlashes option (internal) for the micromatch package. Related to micromatch/picomatch#21.
from fast-glob GitHub release notes
Commit messages
Package name: fast-glob

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant