voyagi/bumpwarden-demo-app / glob
glob 7.2.3 to 13.0.6
Scored 87 of 100, which is held. Every factor below is computed from a source you can open, and the sum decides the band. Nothing here is a judgement call.
Where this sits
The same axis as the queue, so this bump's place in the run is legible.
Machine explanation, not verdict
Glob upgrade to v13 removes the root option and changes the synchronous API
The glob package has been upgraded from v7.2.3 to v13.0.6. In glob v9 and later, the library was rewritten in TypeScript, changing its exports and options. Specifically, the 'root' option has been removed, meaning absolute patterns starting with a slash are no longer resolved against a custom root directory but are instead resolved against the filesystem root. Additionally, the synchronous API 'glob.sync()' has been replaced by the named export 'globSync()'.
- The 'root' option is no longer supported in glob v9+.
- Absolute patterns starting with a slash resolve to the filesystem root instead of the 'root' option.
- The 'glob.sync()' method is replaced by the named export 'globSync()'.
lib/notes.js:13 uses root
"const paths = glob.sync('/*.md', { root: NOTES_DIR, nodir: true });" the commit subjects and changed files this run read
Migration
- Import 'globSync' from 'glob' instead of the default 'glob' import.
- Replace 'glob.sync()' calls with 'globSync()'.
- Remove the 'root' option from the options object.
- Change the pattern to a relative pattern (e.g., '*.md' instead of '/*.md') and use the 'cwd' option to specify the directory.
Confidence high. Model gemini-3.5-flash. 1 of 1 claims matched a call site the mechanical matcher also found. None were dropped. Some inputs were truncated to fit the token budget.
Provenance
- Run
- run-20260830T180003072Z-scheduled
- First seen
- 2026-08-29 06:53:40 UTC
- Last scored
- 2026-08-30 18:00:03 UTC
- Rubric
- v1.0.0
- Bump key
- voyagi/bumpwarden-demo-app#glob@13.0.6
How 87 was reached
What was done
Rule RED-HOLD-1 Open a hold issue with a migration plan, labelled bumpwarden:hold. Never open a pull request for a held bump.