Skip to content

chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.10.3 - #630

Merged
cspath1 merged 2 commits into
mainfrom
dependabot/go_modules/github.com/bmatcuk/doublestar/v4-4.10.3
Oct 26, 2026
Merged

cspath1 merged 2 commits into
mainfrom
dependabot/go_modules/github.com/bmatcuk/doublestar/v4-4.10.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.10.3.

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Handles character ranges when using WithCaseInsensitive

Character ranges, such as [a-z] would not match things like A when using WithCaseInsensitive. This release fixes that.

Thanks to @​bensynapse for bringing this to my attention.

Full Changelog: bmatcuk/doublestar@v4.10.2...v4.10.3

Better support for Windows "Junctions"

Has improved support for reading "junctions" in Windows (ie, Windows' version of symlinks).

Thanks @​x0Lazarus for the PR!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.10.1...v4.10.2

Fixed issue with alternatives and character classes

There was an issue where commas or ending curly brackets inside a character class would cause code looking for the next alternative (commas) or the end of alternatives (ending curly brackets) to erroneously match those characters inside the character classes.

Thanks to @​sidsri14 for the fix!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.10.0...v4.10.1

Added WithNoHidden option

Added support for a WithNoHidden option to ignore hidden files in patterns that might unintentionally match them. For example, a .config directory would not be matched by * or recursed into by **, but would be matched by .* or recursed by .config/**.

Thanks to @​lukasngl for the initial PR and idea!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.9.2...v4.10.0

Fixed Handling of Paths With Meta Chars Using Alts

@​toga4 submitted a PR that fixed a small bug with the way paths were handled when the pattern used {alts}: if some part of the on-disk path that came before the {alt} included meta characters (say, a directory name that included the character ?), these meta characters were not escaped when they were passed back through the globbing routines. This caused doublestar to interpret them as actual meta characters, rather than a fixed-string path as it should have. Nice find, @​toga4 !

What's Changed

... (truncated)

Commits
  • 03688d3 fix tests
  • 7ac7790 case-insensitive character ranges
  • a922627 run symlink tests on windows
  • fc7b711 update CI
  • 7b00623 Merge branch 'x0Lazarus-fix/windows-junction-traversal'
  • 146da9c small test changes
  • dbb13b8 fix brace alternation scanning with character classes
  • 314a609 Merge branch 'sidsri14-master'
  • f0902d5 small test changes
  • ee530d0 Fix traversal of Windows junctions reported as irregular files
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Overview
Bumps vendored github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.10.3 (go.mod, go.sum, vendor/). No first-party code changes.

The newer release brings glob/match fixes and an optional WithNoHidden API (not used here—aliases/alias.go still calls FilepathGlob with default options). Notable upstream changes that could affect filepattern globs: correct parsing of {…} alternatives when character classes contain , or }; escaping literal meta characters in on-disk path segments when expanding alternatives; case-insensitive [a-z] ranges when that option is enabled; and treating Windows junctions (ModeIrregular) like symlinks during directory traversal.

Reviewed by Cursor Bugbot for commit 73fa535. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) from 4.9.1 to 4.10.3.
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.9.1...v4.10.3)

---
updated-dependencies:
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 23, 2026 12:49
@cspath1
cspath1 merged commit a6f757b into main Oct 26, 2026
7 checks passed
@cspath1
cspath1 deleted the dependabot/go_modules/github.com/bmatcuk/doublestar/v4-4.10.3 branch October 26, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant