From 34de5d61084678e938627898262d7ad616ae1f87 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 21 Nov 2025 03:53:45 +0000
Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-GLOB-14040952
---
 package.json |   2 +-
 yarn.lock    | 171 ++++++++++++++++++++++++++++++++++++---------------
 2 files changed, 121 insertions(+), 52 deletions(-)

diff --git a/package.json b/package.json
index 11a5af3..fac1ab8 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
     "@midwayjs/validate": "3",
     "@typegoose/typegoose": "^11.7.1",
     "dotenv": "^16.3.1",
-    "glob": "^10.3.10",
+    "glob": "^10.5.0",
     "lint-staged": "^15.2.2",
     "lodash": "^4.17.21",
     "mongoose": "^7.0.0",
diff --git a/yarn.lock b/yarn.lock
index 1d35ff1..ee0b075 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2,7 +2,7 @@
 # Manual changes might be lost - proceed with caution!
 
 __metadata:
-  version: 8
+  version: 6
   cacheKey: 10c0
 
 "@aashutoshrathi/word-wrap@npm:^1.2.3":
@@ -1871,45 +1871,45 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@onekeybe/boilerplate@workspace:."
   dependencies:
-    "@aws-sdk/client-cloudwatch-logs": "npm:^3.454.0"
-    "@aws-sdk/client-secrets-manager": "npm:^3.454.0"
-    "@faker-js/faker": "npm:^8.3.1"
-    "@midwayjs/bootstrap": "npm:^3.12.5"
-    "@midwayjs/bull": "npm:3"
-    "@midwayjs/cli": "npm:^2.1.1"
-    "@midwayjs/core": "npm:^3.13.0"
-    "@midwayjs/cross-domain": "npm:^3.12.10"
-    "@midwayjs/decorator": "npm:^3.12.3"
-    "@midwayjs/i18n": "npm:3.13.7"
-    "@midwayjs/koa": "npm:^3.12.0"
-    "@midwayjs/logger": "npm:^2.19.3"
-    "@midwayjs/mock": "npm:^3.12.10"
-    "@midwayjs/mongoose": "npm:3"
-    "@midwayjs/redis": "npm:3"
-    "@midwayjs/validate": "npm:3"
-    "@typegoose/typegoose": "npm:^11.7.1"
-    "@types/jest": "npm:^29.5.9"
-    "@types/koa": "npm:^2.13.12"
-    "@types/lodash": "npm:^4.14.202"
-    "@types/mongoose-delete": "npm:^1.0.3"
-    "@types/node": "npm:14"
-    cross-env: "npm:^7.0.3"
-    dotenv: "npm:^16.3.1"
-    eslint-plugin-import: "npm:^2.29.0"
-    glob: "npm:^10.3.10"
-    husky: "npm:^9.0.11"
-    jest: "npm:^29.7.0"
-    lint-staged: "npm:^15.2.2"
-    lodash: "npm:^4.17.21"
-    lokalise-client: "npm:^1.1.9"
-    mongoose: "npm:^7.0.0"
-    mongoose-delete: "npm:^1.0.1"
-    mwts: "npm:^1.3.0"
-    read-pkg: "npm:5"
-    rimraf: "npm:^5.0.5"
-    ts-jest: "npm:^29.1.1"
-    typescript: "npm:~5.3.2"
-    winston-cloudwatch: "npm:^6.2.0"
+    "@aws-sdk/client-cloudwatch-logs": ^3.454.0
+    "@aws-sdk/client-secrets-manager": ^3.454.0
+    "@faker-js/faker": ^8.3.1
+    "@midwayjs/bootstrap": ^3.12.5
+    "@midwayjs/bull": 3
+    "@midwayjs/cli": ^2.1.1
+    "@midwayjs/core": ^3.13.0
+    "@midwayjs/cross-domain": ^3.12.10
+    "@midwayjs/decorator": ^3.12.3
+    "@midwayjs/i18n": 3.13.7
+    "@midwayjs/koa": ^3.12.0
+    "@midwayjs/logger": ^2.19.3
+    "@midwayjs/mock": ^3.12.10
+    "@midwayjs/mongoose": 3
+    "@midwayjs/redis": 3
+    "@midwayjs/validate": 3
+    "@typegoose/typegoose": ^11.7.1
+    "@types/jest": ^29.5.9
+    "@types/koa": ^2.13.12
+    "@types/lodash": ^4.14.202
+    "@types/mongoose-delete": ^1.0.3
+    "@types/node": 14
+    cross-env: ^7.0.3
+    dotenv: ^16.3.1
+    eslint-plugin-import: ^2.29.0
+    glob: ^10.5.0
+    husky: ^9.0.11
+    jest: ^29.7.0
+    lint-staged: ^15.2.2
+    lodash: ^4.17.21
+    lokalise-client: ^1.1.9
+    mongoose: ^7.0.0
+    mongoose-delete: ^1.0.1
+    mwts: ^1.3.0
+    read-pkg: 5
+    rimraf: ^5.0.5
+    ts-jest: ^29.1.1
+    typescript: ~5.3.2
+    winston-cloudwatch: ^6.2.0
   languageName: unknown
   linkType: soft
 
@@ -5482,9 +5482,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"fsevents@patch:fsevents@npm%3A^2.3.2#optional!builtin<compat/fsevents>, fsevents@patch:fsevents@npm%3A~2.3.2#optional!builtin<compat/fsevents>":
+"fsevents@patch:fsevents@npm%3A^2.3.2#~builtin<compat/fsevents>, fsevents@patch:fsevents@npm%3A~2.3.2#~builtin<compat/fsevents>":
   version: 2.3.3
-  resolution: "fsevents@patch:fsevents@npm%3A2.3.3#optional!builtin<compat/fsevents>::version=2.3.3&hash=df0bf1"
+  resolution: "fsevents@patch:fsevents@npm%3A2.3.3#~builtin<compat/fsevents>::version=2.3.3&hash=df0bf1"
   dependencies:
     node-gyp: "npm:latest"
   conditions: os=darwin
@@ -5647,6 +5647,22 @@ __metadata:
   languageName: node
   linkType: hard
 
+"glob@npm:^10.5.0":
+  version: 10.5.0
+  resolution: "glob@npm:10.5.0"
+  dependencies:
+    foreground-child: ^3.1.0
+    jackspeak: ^3.1.2
+    minimatch: ^9.0.4
+    minipass: ^7.1.2
+    package-json-from-dist: ^1.0.0
+    path-scurry: ^1.11.1
+  bin:
+    glob: dist/esm/bin.mjs
+  checksum: 8/cda96c074878abca9657bd984d2396945cf0d64283f6feeb40d738fe2da642be0010ad5210a1646244a5fc3511b0cab5a374569b3de5a12b8a63d392f18c6043
+  languageName: node
+  linkType: hard
+
 "glob@npm:^7.1.3, glob@npm:^7.1.4":
   version: 7.2.3
   resolution: "glob@npm:7.2.3"
@@ -6586,6 +6602,19 @@ __metadata:
   languageName: node
   linkType: hard
 
+"jackspeak@npm:^3.1.2":
+  version: 3.4.3
+  resolution: "jackspeak@npm:3.4.3"
+  dependencies:
+    "@isaacs/cliui": ^8.0.2
+    "@pkgjs/parseargs": ^0.11.0
+  dependenciesMeta:
+    "@pkgjs/parseargs":
+      optional: true
+  checksum: 8/be31027fc72e7cc726206b9f560395604b82e0fddb46c4cbf9f97d049bcef607491a5afc0699612eaa4213ca5be8fd3e1e7cd187b3040988b65c9489838a7c00
+  languageName: node
+  linkType: hard
+
 "jake@npm:^10.8.5":
   version: 10.8.7
   resolution: "jake@npm:10.8.7"
@@ -7511,6 +7540,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lru-cache@npm:^10.2.0":
+  version: 10.4.3
+  resolution: "lru-cache@npm:10.4.3"
+  checksum: 8/6476138d2125387a6d20f100608c2583d415a4f64a0fecf30c9e2dda976614f09cad4baa0842447bd37dd459a7bd27f57d9d8f8ce558805abd487c583f3d774a
+  languageName: node
+  linkType: hard
+
 "lru-cache@npm:^5.1.1":
   version: 5.1.1
   resolution: "lru-cache@npm:5.1.1"
@@ -7787,6 +7823,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"minimatch@npm:^9.0.4":
+  version: 9.0.5
+  resolution: "minimatch@npm:9.0.5"
+  dependencies:
+    brace-expansion: ^2.0.1
+  checksum: 8/2c035575eda1e50623c731ec6c14f65a85296268f749b9337005210bb2b34e2705f8ef1a358b188f69892286ab99dc42c8fb98a57bde55c8d81b3023c19cea28
+  languageName: node
+  linkType: hard
+
 "minimist-options@npm:4.1.0":
   version: 4.1.0
   resolution: "minimist-options@npm:4.1.0"
@@ -7879,6 +7924,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"minipass@npm:^7.1.2":
+  version: 7.1.2
+  resolution: "minipass@npm:7.1.2"
+  checksum: 8/2bfd325b95c555f2b4d2814d49325691c7bee937d753814861b0b49d5edcda55cbbf22b6b6a60bb91eddac8668771f03c5ff647dcd9d0f798e9548b9cdc46ee3
+  languageName: node
+  linkType: hard
+
 "minizlib@npm:^2.1.1, minizlib@npm:^2.1.2":
   version: 2.1.2
   resolution: "minizlib@npm:2.1.2"
@@ -8457,6 +8509,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"package-json-from-dist@npm:^1.0.0":
+  version: 1.0.1
+  resolution: "package-json-from-dist@npm:1.0.1"
+  checksum: 8/58ee9538f2f762988433da00e26acc788036914d57c71c246bf0be1b60cdbd77dd60b6a3e1a30465f0b248aeb80079e0b34cb6050b1dfa18c06953bb1cbc7602
+  languageName: node
+  linkType: hard
+
 "package-json@npm:^6.3.0":
   version: 6.5.0
   resolution: "package-json@npm:6.5.0"
@@ -8542,6 +8601,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"path-scurry@npm:^1.11.1":
+  version: 1.11.1
+  resolution: "path-scurry@npm:1.11.1"
+  dependencies:
+    lru-cache: ^10.2.0
+    minipass: ^5.0.0 || ^6.0.2 || ^7.0.0
+  checksum: 8/890d5abcd593a7912dcce7cf7c6bf7a0b5648e3dee6caf0712c126ca0a65c7f3d7b9d769072a4d1baf370f61ce493ab5b038d59988688e0c5f3f646ee3c69023
+  languageName: node
+  linkType: hard
+
 "path-to-regexp@npm:^6.2.1":
   version: 6.2.1
   resolution: "path-to-regexp@npm:6.2.1"
@@ -9019,16 +9088,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"resolve@patch:resolve@npm%3A^1.10.0#optional!builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.10.1#optional!builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.20.0#optional!builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.22.4#optional!builtin<compat/resolve>":
+"resolve@patch:resolve@npm%3A^1.10.0#~builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.10.1#~builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.20.0#~builtin<compat/resolve>, resolve@patch:resolve@npm%3A^1.22.4#~builtin<compat/resolve>":
   version: 1.22.8
-  resolution: "resolve@patch:resolve@npm%3A1.22.8#optional!builtin<compat/resolve>::version=1.22.8&hash=c3c19d"
+  resolution: "resolve@patch:resolve@npm%3A1.22.8#~builtin<compat/resolve>::version=1.22.8&hash=c3c19d"
   dependencies:
     is-core-module: "npm:^2.13.0"
     path-parse: "npm:^1.0.7"
     supports-preserve-symlinks-flag: "npm:^1.0.0"
   bin:
     resolve: bin/resolve
-  checksum: 0446f024439cd2e50c6c8fa8ba77eaa8370b4180f401a96abf3d1ebc770ac51c1955e12764cde449fde3fff480a61f84388e3505ecdbab778f4bef5f8212c729
+  checksum: 8/5479b7d431cacd5185f8db64bfcb7286ae5e31eb299f4c4f404ad8aa6098b77599563ac4257cb2c37a42f59dfc06a1bec2bcf283bb448f319e37f0feb9a09847
   languageName: node
   linkType: hard
 
@@ -10200,23 +10269,23 @@ __metadata:
   languageName: node
   linkType: hard
 
-"typescript@patch:typescript@npm%3A^4.1.0#optional!builtin<compat/typescript>, typescript@patch:typescript@npm%3A^4.1.2#optional!builtin<compat/typescript>":
+"typescript@patch:typescript@npm%3A^4.1.0#~builtin<compat/typescript>, typescript@patch:typescript@npm%3A^4.1.2#~builtin<compat/typescript>":
   version: 4.9.5
-  resolution: "typescript@patch:typescript@npm%3A4.9.5#optional!builtin<compat/typescript>::version=4.9.5&hash=289587"
+  resolution: "typescript@patch:typescript@npm%3A4.9.5#~builtin<compat/typescript>::version=4.9.5&hash=d73830"
   bin:
     tsc: bin/tsc
     tsserver: bin/tsserver
-  checksum: e3333f887c6829dfe0ab6c1dbe0dd1e3e2aeb56c66460cb85c5440c566f900c833d370ca34eb47558c0c69e78ced4bfe09b8f4f98b6de7afed9b84b8d1dd06a1
+  checksum: 8/2eee5c37cad4390385db5db5a8e81470e42e8f1401b0358d7390095d6f681b410f2c4a0c496c6ff9ebd775423c7785cdace7bcdad76c7bee283df3d9718c0f20
   languageName: node
   linkType: hard
 
-"typescript@patch:typescript@npm%3A~5.3.2#optional!builtin<compat/typescript>":
+"typescript@patch:typescript@~5.3.2#~builtin<compat/typescript>":
   version: 5.3.2
-  resolution: "typescript@patch:typescript@npm%3A5.3.2#optional!builtin<compat/typescript>::version=5.3.2&hash=e012d7"
+  resolution: "typescript@patch:typescript@npm%3A5.3.2#~builtin<compat/typescript>::version=5.3.2&hash=d73830"
   bin:
     tsc: bin/tsc
     tsserver: bin/tsserver
-  checksum: 73c8bad74e732d93211c9d77f28b03307e2f5fc6a0afc73f4b783261ab567686a16d6ae958bdaef383a00be1b0b8c8b6741dd6ca3d13af4963fa7e47456d49c7
+  checksum: 8/c034461079fbfde3cb584ddee52afccb15b6e32a0ce186d0b2719968786f7ca73e1b07f71fac4163088790b16811c6ccf79680de190664ef66ff0ba9c1fe4a23
   languageName: node
   linkType: hard