chore(deps-dev): bump glob from 7.2.3 to 13.0.6

[dependabot]

Bumps glob from 7.2.3 to 13.0.6.

Changelog

Sourced from glob's changelog.

changeglob

13

• Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

• Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
• Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
• Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

• e80cb38 13.0.6
• 9cdbbff revert tsgo, not ready for test coverage correctness yet
• 89c99ba use tsgo compiler
• b7275d5 update deps, expand engines to include node 18
• 942e360 update workflows, pull taprc out of package.json
• 4a0d53c update tap for mockImport bugfix
• ef94ad2 update tap
• 180c2d4 update docs
• 37993c8 remove stray console.error in test
• 03ae4c2 13.0.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for glob since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

[Copilot]

🔵 Needs a closer look

The dependency bump introduces install-time script considerations and new Node engine constraints, and still leaves glob@7 present via tslint, all of which warrant a deliberate human decision.

Pull request overview

This PR updates the repo’s dev dependency on glob to v13 and adapts the Mocha test runners to the new glob API (named export + Promise-based), helping keep dev tooling up to date and making test discovery deterministic.

Changes:

• Bump glob from ^7.2.3 to ^13.0.6 and remove @types/glob.
• Update test suite runners to use import { glob } from "glob" and Promise-based file discovery.
• Sort discovered test files before adding them to Mocha for stable execution order.

File summaries

File	Description
test/suite/index.ts	Switch to Promise-based glob() and sort test files before running.
test/simple-suite/index.ts	Same glob API update + deterministic ordering.
test/non-java-gradle-suite/index.ts	Same glob API update + deterministic ordering.
test/multiple-suite/index.ts	Same glob API update + deterministic ordering.
test/multi-module-suite/index.ts	Same glob API update + deterministic ordering.
test/maven-suite/index.ts	Same glob API update + deterministic ordering.
test/invisible-suite/index.ts	Same glob API update + deterministic ordering.
test/gradle-suite/index.ts	Same glob API update + deterministic ordering.
package.json	Bump glob devDependency and drop @types/glob.
package-lock.json	Lockfile updates for glob@13 and its new dependency tree (including new engine constraints and nested glob@7 under tslint).

Review details

• Files reviewed: 9/10 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Changyong Gong (chagong)]

Reviewed the glob 13 migration, deterministic test ordering, published package contents, and final CI results.

[Changyong Gong (chagong)]

Reviewed the glob 13 migration, dependency necessity, published package contents, Node 20 compatibility, deterministic test discovery, and final CI results.

[Changyong Gong (chagong)]

Reviewed the glob 13 migration, direct dependency necessity, published tarball, Node 20/22 compatibility, deterministic test discovery, local test/package results, and final CI checks.