[Pkg-javascript-devel] node-minimatch_9.0.7-1_sourceonly.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 06 Apr 2026 11:41:05 +0200
Source: node-minimatch
Architecture: source
Version: 9.0.7-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel at lists.alioth.debian.org>
Changed-By: Xavier Guimard <yadd at debian.org>
Closes: 1128579 1129095
Changes:
 node-minimatch (9.0.7-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 9.0.7 (Closes: #1128579, #1129095)
     - fixes CVE-2026-26996, CVE-2026-27903, CVE-2026-27904 (ReDoS)
   * Declare compliance with policy 4.7.4
   * debian/watch version 5, optimize
   * Switch build from rollup to tshy
   * Add patch to use brace-expansion 2.x default export
   * Use index.cjs wrapper for backward-compatible default export
   * Drop unused build-deps: rollup plugins, ts-node, node-tap
   * Replace upstream ESM tests with minimal require test
     (upstream tests need tap >= 21, not available in Debian)
Checksums-Sha1: 
 ad396f73efbbe57234c48e07b73db07962d04abd 2081 node-minimatch_9.0.7-1.dsc
 670520f954d0f4532cb66e23ed8b9ccb79c420ea 103051 node-minimatch_9.0.7.orig.tar.gz
 95ac5483176563b9af9ad931bd496a08f56a111f 4840 node-minimatch_9.0.7-1.debian.tar.xz
Checksums-Sha256: 
 b5e7e5b95a956cf02dc9e4a02711befac763e03f9b798b7027c83f174d2a48ef 2081 node-minimatch_9.0.7-1.dsc
 8ce497d77411b0b1c3a1b02fc10db086a9e2699ab9447679fbd1843df378be72 103051 node-minimatch_9.0.7.orig.tar.gz
 65264945986cb7f4fca96225adf3ad0853cd148eaca4c09be6d55f4b7dce64d9 4840 node-minimatch_9.0.7-1.debian.tar.xz
Files: 
 0d5904b2bee4b4f8261ad344b7020b0a 2081 javascript optional node-minimatch_9.0.7-1.dsc
 8ce743300cf8adda6106fe6364f37882 103051 javascript optional node-minimatch_9.0.7.orig.tar.gz
 531596a1be15e850568d8565d006bb9c 4840 javascript optional node-minimatch_9.0.7-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmnTgEcACgkQ9tdMp8mZ
7umKrBAAk0ygdwSI1n/H8gfiwPaCYV26rROUkqQbcf72w0+PFxxw1fj0D6bNrr+o
JVLLU2kWX4x8ajuulhV9l09qys5LcwHreDvPOVWDAafNfq/shppGo9SNwykSYE6U
UqGfgQsz+UH4EMXwCe0yLIWA+byoEhAExBh9PcWkIC0TofkVZMaWxvlfQC+hMEuI
mV94tEQx3sgWBsorgsmBXYmS4ZciQPhoPL0LdOGKzSwGxje4wB3e1Q+XNVkiloAo
0Nk+rRMlvQTYQBVH6QR9wKVlAmm8bIGabxYQOc2gyeZl4eLMAuKXT1eAMvdP6TWz
8W6xlz5zrVZp4eNFb7REf7wtBj2/2INbLB31wl0Fhlstayzp3d8dyl1nKDMFh05q
K5+MdbUYuTPkTj7l3dPpmvjRHpoZLu1x0dC8XNz2iKXStKP8bUvZEE8Q9Btt5Rs/
iUN04EeFhz8u5rC+i4n50SFHWMFMB8m3M9HyL2UzAQoJFZ9t63WR0yA5Ggcw/HDI
G1A/hB9hTkhlSKU2YrmBu+eATH/19FkSe1jlQ3wCDIyyc/ZgGTiQcea7fIhm/Dii
ivj8MFWJBShVHBouYcy2JpLIqNgiwMotxwD/ijtJdN6R9ni1c0FHCGiwI4xV5ES3
FQm4hbliazD11GsQcfmuz1hC+eI+/RcwaWeE3muz/r57z9+Gffw=
=MxAh
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20260406/c379450a/attachment.sig>