chore(deps-dev): bump @microsoft/api-extractor from 7.36.3 to 7.57.8
Open
Number: #542
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Unknown
Comments: 3
Association: Unknown
Comments: 3
Created:
April 01, 2026 at 03:43 AM UTC
(3 months ago)
(3 months ago)
Updated:
April 02, 2026 at 06:11 AM UTC
(3 months ago)
(3 months ago)
Labels:
type: dependencies
type: dependencies
Description:
Bumps @microsoft/api-extractor from 7.36.3 to 7.57.8.
Changelog
Sourced from @microsoft/api-extractor's changelog.
7.57.8
Tue, 31 Mar 2026 15:14:14 GMT
Version update only
7.57.7
Mon, 09 Mar 2026 15:14:07 GMT
Patches
- Bump
minimatchversion from10.2.1to10.2.3to address CVE-2026-27903.7.57.6
Wed, 25 Feb 2026 21:39:42 GMT
Patches
- Bump
@microsoft/tsdoc-configto~0.18.1to mitigate CVE-2025-69873.7.57.5
Wed, 25 Feb 2026 00:34:29 GMT
Version update only
7.57.4
Tue, 24 Feb 2026 01:13:27 GMT
Version update only
7.57.3
Mon, 23 Feb 2026 00:42:21 GMT
Patches
- Add missing "./extends/*.json" to the package.json "exports" field so that "
@microsoft/api-extractor/extends/tsdoc-base.json" is importable.7.57.2
Fri, 20 Feb 2026 16:14:49 GMT
Patches
- Bump minimatch from 10.1.2 to 10.2.1
7.57.1
Fri, 20 Feb 2026 00:15:03 GMT
Patches
- Add
"node"condition before"import"in the"exports"map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via"import". Fixes microsoft/rushstack#5644.
... (truncated)
Commits
8740839Bump versions [skip ci]6861350Update changelogs [skip ci]bcf89c8chore: bump decoupled local dependencies (#5692)ee40f81Bump versions [skip ci]8a51049Update changelogs [skip ci]e35becechore: bump minimatch to 10.2.3 to fix vulnerability (#5675)f8a668dchore: bump decoupled local dependencies (#5674)3b13f32Bump versions [skip ci]b8a4224Update changelogs [skip ci]1a448eeFix issues with missing files in published@microsoft/load-themed-stylesan...- Additional commits viewable in compare view
Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions |
|---|---|
| @microsoft/api-extractor | [< 7.25, > 7.24.0] |
| @microsoft/api-extractor | [< 7.29, > 7.28.4] |
| @microsoft/api-extractor | [< 7.30, > 7.29.3] |
| @microsoft/api-extractor | [< 7.33, > 7.32.0] |
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Security Advisories
ajv has ReDoS when using `$data` option
GHSA-2g4f-4pwh-qvx6
CVE-2025-69873
MODERATE
ajv (Another JSON Schema Validator) through version 8.17.1 is vulnerable to Regular Expression Denial of Service (ReDoS) when the `$data` option is enabled. The pattern keyword accepts runtime data...
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
GHSA-7r86-cg39-jmmj
CVE-2026-27903
HIGH
### Summary
`matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexit...
Technical Details
| ID: | 14938461 |
| UUID: | 4183832849 |
| Node ID: | PR_kwDOG5lbN87PIWkI |
| Host: | GitHub |
| Repository: | OpenFunction/functions-framework-nodejs |