[dependabot]

Bumps minimatch to 3.1.5 and updates ancestor dependency ic-mops. These dependencies need to be updated together.

Updates minimatch from 3.1.2 to 3.1.5

Commits

• 7bba978 3.1.5
• bd25942 docs: add warning about ReDoS
• 1a9c27c fix partial matching of globstar patterns
• 1a2e084 3.1.4
• ae24656 update lockfile
• b100374 limit recursion for **, improve perf considerably
• 26ffeaa lockfile update
• 9eca892 lock node version to 14
• 00c323b 3.1.3
• 30486b2 update CI matrix and actions
• Additional commits viewable in compare view

Updates ic-mops from 1.12.0 to 2.9.0

Release notes

Sourced from ic-mops's releases.

CLI v2.9.0

• Add mops info <pkg> command to show detailed package metadata from the registry
• Add [lint.extra] config for applying additional lint rules to specific files via glob patterns

---

SHA256: e1a1d5f44534d11da11272b7905d391fa0e387e78cf14aacabf3542b2b764775

Verify build:

cd cli
docker build . --build-arg COMMIT_HASH=8b97eaddfc48d12232a1a4ee75fed33a48f3ada0 --build-arg MOPS_VERSION=2.9.0 -t mops
docker run --rm --env SHASUM=e1a1d5f44534d11da11272b7905d391fa0e387e78cf14aacabf3542b2b764775 mops

CLI v2.8.1

• Fix mops check-stable failing when [moc] args contains flags with relative paths (e.g. --actor-idl=system-idl)

---

SHA256: 68be42bc87d060c13d7c33c342e643d6550c09b0a76ec19c3390577beb64a472

Verify build:

cd cli
docker build . --build-arg COMMIT_HASH=225b327db8ae98908ee6a150f0555ac90dd14894 --build-arg MOPS_VERSION=2.8.1 -t mops
docker run --rm --env SHASUM=68be42bc87d060c13d7c33c342e643d6550c09b0a76ec19c3390577beb64a472 mops

CLI v2.8.0

• mops build now generates a .most (Motoko stable types) file alongside .wasm and .did for each canister; the .most file can be passed directly to mops check-stable to verify upgrade compatibility
• mops.lock is now created automatically the first time dependencies are installed — no need to run mops i --lock update once to opt in. Triggered by mops install, mops add, mops remove, mops update, mops sync, and mops init (when it installs dependencies). Applications should commit mops.lock; library authors should add it to .gitignore.

---

SHA256: 9dfb65a25a220b498c1660e78438d316de554439e6f06d24dcfd4247d8a2b554

Verify build:

cd cli
docker build . --build-arg COMMIT_HASH=b8cf8c39dd73c88bac267d1224a5a3bd2fd78e14 --build-arg MOPS_VERSION=2.8.0 -t mops
docker run --rm --env SHASUM=9dfb65a25a220b498c1660e78438d316de554439e6f06d24dcfd4247d8a2b554 mops

CLI v2.7.0

• mops publish no longer requires a repository field — it is now optional metadata (used by the registry UI for source links)
• mops publish now hard-errors on GitHub [dependencies] instead of prompting; the backend has rejected them for some time and the prompt was misleading

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for ic-mops since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.