rubric v1.0.0 ยท scored 2026-08-30 18:00:03 UTC

voyagi/bumpwarden-demo-app / glob

glob 7.2.3 to 13.0.6

Scored 87 of 100, which is held. Every factor below is computed from a source you can open, and the sum decides the band. Nothing here is a judgement call.

Where this sits

The same axis as the queue, so this bump's place in the run is legible.

30
61
body-parser 50
node-fetch 58
express 62
chalk 71
glob 87

Machine explanation, not verdict

Glob upgrade to v13 removes the root option and changes the synchronous API

The glob package has been upgraded from v7.2.3 to v13.0.6. In glob v9 and later, the library was rewritten in TypeScript, changing its exports and options. Specifically, the 'root' option has been removed, meaning absolute patterns starting with a slash are no longer resolved against a custom root directory but are instead resolved against the filesystem root. Additionally, the synchronous API 'glob.sync()' has been replaced by the named export 'globSync()'.

  • The 'root' option is no longer supported in glob v9+.
  • Absolute patterns starting with a slash resolve to the filesystem root instead of the 'root' option.
  • The 'glob.sync()' method is replaced by the named export 'globSync()'.

lib/notes.js:13 uses root

"const paths = glob.sync('/*.md', { root: NOTES_DIR, nodir: true });" the commit subjects and changed files this run read

Migration

  1. Import 'globSync' from 'glob' instead of the default 'glob' import.
  2. Replace 'glob.sync()' calls with 'globSync()'.
  3. Remove the 'root' option from the options object.
  4. Change the pattern to a relative pattern (e.g., '*.md' instead of '/*.md') and use the 'cwd' option to specify the directory.

Confidence high. Model gemini-3.5-flash. 1 of 1 claims matched a call site the mechanical matcher also found. None were dropped. Some inputs were truncated to fit the token budget.

Provenance

Run
run-20260830T180003072Z-scheduled
First seen
2026-08-29 06:53:40 UTC
Last scored
2026-08-30 18:00:03 UTC
Rubric
v1.0.0
Bump key
voyagi/bumpwarden-demo-app#glob@13.0.6

How 87 was reached

Semver distance, 6 majors45
Your code touches a changed symbol, lib/notes.js:9, lib/notes.js:13, lib/notes.js:13, lib/notes.js:14, lib/notes.js:3120
Breaking marker in release evidence, removal wording in commit subjects6
Advisories on the candidate, none on the candidate0
Deprecation, the installed version is deprecated10
Engine range, candidate needs Node 18.0.0, you declare 18.0.00
Candidate release age, published 2026-02-19, 192 days ago0
Peer dependency range, peer range unchanged0
Release notes for the candidate, could not be read, recorded as missing6
Total87

What was done

Rule RED-HOLD-1 Open a hold issue with a migration plan, labelled bumpwarden:hold. Never open a pull request for a held bump.