Bump minimatch from 3.1.2 to 3.1.5

[dependabot]

Bumps minimatch from 3.1.2 to 3.1.5.

Commits

• 7bba978 3.1.5
• bd25942 docs: add warning about ReDoS
• 1a9c27c fix partial matching of globstar patterns
• 1a2e084 3.1.4
• ae24656 update lockfile
• b100374 limit recursion for **, improve perf considerably
• 26ffeaa lockfile update
• 9eca892 lock node version to 14
• 00c323b 3.1.3
• 30486b2 update CI matrix and actions
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[btardif]

@copilot can you check why staging failed and maybe retry?

[Copilot]

@copilot can you check why staging failed and maybe retry?

The staging failure is not related to the code changes in this PR. The workflow fails because Dependabot PRs run with restricted secret access (Secret source: Dependabot) and cannot access the Azure service principal credentials (client-id, tenant-id) required by the staging deployment workflow:

Login failed with Error: Using auth-type: SERVICE_PRINCIPAL. Not all values are present. Ensure 'client-id' and 'tenant-id' are supplied.

This is the same failure seen on all other Dependabot PRs (e.g., the picomatch bump also failed with the same error). To fix it, the Azure credentials would need to be added as Dependabot secrets (Settings → Secrets and variables → Dependabot secrets). Alternatively, a maintainer can manually re-run the staging workflow to use the standard repository secrets.

[btardif]

Alternatively, a maintainer can manually re-run the staging workflow to use the standard repository secrets.

@copilot how do I do this: "Alternatively, a maintainer can manually re-run the staging workflow to use the standard repository secrets."

[Copilot]

Alternatively, a maintainer can manually re-run the staging workflow to use the standard repository secrets.

@copilot how do I do this: "Alternatively, a maintainer can manually re-run the stagin...

To manually re-run the staging workflow as a maintainer:

1. Go to the Actions tab of this repository: https://github.com/Azure/AppService/actions/workflows/deploy-to-staging-site.yml
2. Find the failed run for this PR (titled "Bump minimatch from 3.1.2 to 3.1.5")
3. Click into that run, then click the "Re-run all jobs" button (top right)

When a maintainer triggers the re-run, GitHub uses the standard repository secrets context instead of the Dependabot-restricted context, so the Azure login step will succeed.

[btardif]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Merge conflicts resolved in commit 0e78d85. The conflict in package-lock.json was between this PR's minimatch bump (3.1.2 → 3.1.5) and master's picomatch bump (2.3.1 → 2.3.2) — both changes are now included.

[Copilot]

Copilot wasn't able to review any files in this pull request.

[github-actions]

Preview link: https://antares-blog-staging-pr-536.azurewebsites.net

• Your changes have been deployed to the preview site. The preview site will update as you add more commits to this branch.
• The preview site shows any future-dated articles. If you are publishing a future-dated article, it will not show on the production site until the file's specified date.
• The preview link is shareable, but will be deleted when this pull request is merged or closed.

This is an automated message.