Skip to content

[content][nextjs][create-content-sdk-app] Upgrade glob dependency from v11 to v13 to resolve security vulnerabilities#525

Merged
illiakovalenko merged 2 commits into
devfrom
fix/JSS-9676-content-package-pull-deprecated-glob
Jun 19, 2026
Merged

[content][nextjs][create-content-sdk-app] Upgrade glob dependency from v11 to v13 to resolve security vulnerabilities#525
illiakovalenko merged 2 commits into
devfrom
fix/JSS-9676-content-package-pull-deprecated-glob

Conversation

@sc-shakyawijerathne

Copy link
Copy Markdown
Contributor

Description / Motivation

Upgrades the glob dependency from deprecated v11 to v13 in three packages to resolve security vulnerabilities (CVE-2025-64756).

Testing Details

  • Unit Test Added
  • Manual Test/Other

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

@changeset-bot

changeset-bot Bot commented Jun 19, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 019dbb8

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
Name Type
@sitecore-content-sdk/content Patch
@sitecore-content-sdk/nextjs Patch
create-content-sdk-app Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions

Copy link
Copy Markdown
Contributor

📦 Package Size and Test Coverage Report

Package Base Size PR Size Δ Change Base Coverage PR Coverage Δ Change
analytics-core 67.34 KB 67.34 KB ✅ 0.00 KB 97.40% 97.40% 0.00%
cli 61.06 KB 61.06 KB ✅ 0.00 KB 71.36% 71.36% 0.00%
content 432.56 KB 432.56 KB ✅ 0.00 KB 92.45% 92.45% 0.00%
core 120.61 KB 120.61 KB ✅ 0.00 KB 91.27% 91.27% 0.00%
create-content-sdk-app 535.58 KB 535.58 KB ✅ 0.00 KB 96.47% 96.47% 0.00%
events 72.27 KB 72.27 KB ✅ 0.00 KB 97.97% 97.97% 0.00%
nextjs 566.34 KB 566.34 KB ✅ 0.00 KB 90.98% 90.98% 0.00%
personalize 64.01 KB 64.01 KB ✅ 0.00 KB 99.74% 99.74% 0.00%
react 232.23 KB 232.23 KB ✅ 0.00 KB 94.00% 94.00% 0.00%
search 8.10 KB 8.10 KB ✅ 0.00 KB 98.57% 98.57% 0.00%
Total ✅ 0.00 KB

@illiakovalenko illiakovalenko left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good 👍

@illiakovalenko illiakovalenko merged commit debe2bd into dev Jun 19, 2026
6 checks passed
@illiakovalenko illiakovalenko deleted the fix/JSS-9676-content-package-pull-deprecated-glob branch June 19, 2026 08:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants