Package
gitlab-rails-ce-18.1
Component
minimatch
Latest update
7.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
This version stream has reached end of life and is no longer built or updated, so the affected dependency will not be advanced. Consumers should migrate to a supported version stream.
Status
Impact
This dependency resolves to four major versions in the same lockfile, each required by a different consumer. Yarn v1 resolution keys match on package-name path and provide no version selector, so a key broad enough to reach the affected copies also forces the remaining consumers onto an out-of-range major. One consumer is itself present at two majors that require different major lines of this dependency, so no path-scoped key can separate them, and a further consumer pins an exact version. Deferring to upstream to advance the dependency tree.
Status