feat!: update dependency minimatch to v10 (#20246)

renovate[bot] · fasttime · web-flow · commit 501abd0e916a · 2025-11-17T11:59:52.000+01:00
* chore: update dependency minimatch to v10

* add unit tests

* update migration guide

* v10 → v10.0.0

* update `@eslint/config-array`

---------

Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
Co-authored-by: Francesco Trotta &lt;github@fasttime.org&gt;
diff --git a/docs/src/use/migrate-to-10.0.0.md b/docs/src/use/migrate-to-10.0.0.md
@@ -21,6 +21,7 @@ The lists below are ordered roughly by the number of users each change is expect
 - [Old config format no longer supported](#remove-eslintrc)
 - [`eslint-env` comments are reported as errors](#eslint-env-comments)
 - [Jiti < v2.2.0 are no longer supported](#drop-old-jiti)
+- [POSIX character classes in glob patterns](#posix-character-classes)
 - [Deprecated options of the `radix` rule](#radix)
 - [`no-shadow-restricted-names` now reports `globalThis` by default](#no-shadow-restricted-names)
 - [`func-names` schema is stricter](#func-names)
@@ -36,13 +37,15 @@ The lists below are ordered roughly by the number of users each change is expect
 - [New requirements for `ScopeManager` implementations](#scope-manager)
 - [Removal of deprecated `context` members](#rule-context)
 - [Prohibiting `errors` or `output` of valid RuleTester test cases](#stricter-rule-tester)
+- [POSIX character classes in glob patterns](#posix-character-classes)
 
 ### Breaking changes for integration developers
 
 - [Node.js < v20.19, v21, v23 are no longer supported](#drop-old-node)
 - [New configuration file lookup algorithm](#config-lookup-from-file)
 - [Old config format no longer supported](#remove-eslintrc)
 - [Removal of `nodeType` property in `LintMessage` objects](#lintmessage-nodetype-removed)
+- [POSIX character classes in glob patterns](#posix-character-classes)
 
 ---
 
@@ -120,6 +123,22 @@ ESLint is officially dropping support for versions of `jiti` that are less than
 
 **Related issue(s):** [#19765](https://github.com/eslint/eslint/issues/19765)
 
+## <a name="posix-character-classes"></a> POSIX character classes in glob patterns
+
+ESLint v10.0.0 uses the latest version of [minimatch](https://github.com/isaacs/minimatch), which supports [POSIX character classes](https://www.gnu.org/software/bash/manual/html_node/Pattern-Matching.html) in bracket expressions. ESLint relies on minimatch to match file names against glob patterns, such as those defined in `files`, `ignores`, and `globalIgnores()` within a config, or passed via the CLI.
+
+For example, to lint all `.js` files whose names begin with an uppercase letter, you can now run:
+
+```shell
+npx eslint "**/[[:upper:]]*.js"
+```
+
+Here, `[[:upper:]]` is a POSIX character class that matches uppercase letters in different alphabets.
+
+**To address:** If any of the glob patterns in your configuration, CLI arguments, or Node.js API calls look like containing a POSIX character class, verify that they match files as intended.
+
+**Related issue(s):** [eslint/rewrite#66](https://github.com/eslint/rewrite/issues/66)
+
 ## <a name="radix"></a> Deprecated options of the `radix` rule
 
 As of ESLint v10.0.0, string options `"always"` and `"as-needed"` of the [`radix`](../rules/radix) rule are deprecated. Setting either of these options doesn't change the behavior of this rule, which now always enforces providing a radix, as it was the case when the `"always"` option (default) was specified. Since the default radix depends on the first argument of `parseInt()`, this rule assumes that the second argument (the radix) is always needed.
diff --git a/package.json b/package.json
@@ -108,7 +108,7 @@
   "dependencies": {
     "@eslint-community/eslint-utils": "^4.8.0",
     "@eslint-community/regexpp": "^4.12.1",
-    "@eslint/config-array": "^0.22.0",
+    "@eslint/config-array": "^0.23.0",
     "@eslint/config-helpers": "^0.5.0",
     "@eslint/core": "^1.0.0",
     "@eslint/plugin-kit": "^0.5.0",
@@ -134,7 +134,7 @@
     "imurmurhash": "^0.1.4",
     "is-glob": "^4.0.0",
     "json-stable-stringify-without-jsonify": "^1.0.1",
-    "minimatch": "^3.1.2",
+    "minimatch": "^10.1.1",
     "natural-compare": "^1.4.0",
     "optionator": "^0.9.3"
   },
diff --git a/tests/lib/eslint/eslint.js b/tests/lib/eslint/eslint.js
@@ -2355,7 +2355,7 @@ describe("ESLint", () => {
 		});
 
 		// https://github.com/eslint/eslint/issues/16038
-		it("should allow files patterns with '..' inside", async () => {
+		it("should allow file patterns with '..' inside", async () => {
 			eslint = new ESLint({
 				ignore: false,
 				cwd: getFixturePath("dots-in-files"),
@@ -2371,6 +2371,23 @@ describe("ESLint", () => {
 			assert.strictEqual(results[0].suppressedMessages.length, 0);
 		});
 
+		it("should allow file patterns with POSIX character classes", async () => {
+			eslint = new ESLint({
+				cwd: getFixturePath(),
+			});
+			const results = await eslint.lintFiles([
+				"file[[:alnum:]]/[[:punct:]]*.js",
+			]);
+
+			assert.strictEqual(results.length, 1);
+			assert.strictEqual(results[0].messages.length, 0);
+			assert.strictEqual(
+				results[0].filePath,
+				getFixturePath("files/.bar.js"),
+			);
+			assert.strictEqual(results[0].suppressedMessages.length, 0);
+		});
+
 		// https://github.com/eslint/eslint/issues/16299
 		it("should only find files in the subdir1 directory when given a directory name", async () => {
 			eslint = new ESLint({
@@ -2389,7 +2406,7 @@ describe("ESLint", () => {
 		});
 
 		// https://github.com/eslint/eslint/issues/14742
-		it("should run", async () => {
+		it("should work when a directory name contains curly braces", async () => {
 			eslint = new ESLint({
 				cwd: getFixturePath("{curly-path}", "server"),
 			});
@@ -5628,7 +5645,7 @@ describe("ESLint", () => {
 
 			afterEach(() => cleanup());
 
-			it("should match '[ab].js' if existed.", async () => {
+			it("should match '[ab].js' if existing", async () => {
 				const teardown = createCustomTeardown({
 					cwd: root,
 					files: {
@@ -5650,7 +5667,7 @@ describe("ESLint", () => {
 				assert.deepStrictEqual(filenames, ["[ab].js"]);
 			});
 
-			it("should match 'a.js' and 'b.js' if '[ab].js' didn't existed.", async () => {
+			it("should match 'a.js' and 'b.js' if '[ab].js' doesn't exist", async () => {
 				const teardown = createCustomTeardown({
 					cwd: root,
 					files: {
@@ -5671,6 +5688,70 @@ describe("ESLint", () => {
 			});
 		});
 
+		describe("pattern [0[:alpha:]].js", () => {
+			if (os.platform() === "win32") {
+				return; // skip on Windows - ":" is not valid in Windows filenames
+			}
+
+			const root = getFixturePath("cli-engine/unmatched-glob");
+
+			let cleanup;
+
+			beforeEach(() => {
+				cleanup = () => {};
+			});
+
+			afterEach(() => cleanup());
+
+			it("should match '[0[:alpha:]].js' if existing", async () => {
+				const teardown = createCustomTeardown({
+					cwd: root,
+					files: {
+						"a.js": "",
+						"b.js": "",
+						"[0[:alpha:]].js": "",
+					},
+				});
+
+				await teardown.prepare();
+				cleanup = teardown.cleanup;
+
+				eslint = new ESLint({
+					cwd: teardown.getPath(),
+					overrideConfigFile: true,
+				});
+				const results = await eslint.lintFiles(["[0[:alpha:]].js"]);
+				const filenames = results.map(r => path.basename(r.filePath));
+
+				assert.deepStrictEqual(filenames, ["[0[:alpha:]].js"]);
+			});
+
+			it("should match '0.js', 'a.js' and 'b.js' if '[0[:alpha:]].js' doesn't exist", async () => {
+				const teardown = createCustomTeardown({
+					cwd: root,
+					files: {
+						"0.js": "",
+						"1.js": "",
+						"a.js": "",
+						"b.js": "",
+						"0a.js": "",
+						"[:alpha:].js": "",
+					},
+				});
+
+				await teardown.prepare();
+				cleanup = teardown.cleanup;
+				eslint = new ESLint({
+					cwd: teardown.getPath(),
+					overrideConfigFile: true,
+				});
+				const results = await eslint.lintFiles(["[0[:alpha:]].js"]);
+				const filenames = results.map(r => path.basename(r.filePath));
+
+				assert.deepStrictEqual(filenames, ["0.js", "a.js", "b.js"]);
+			});
+		});
+
 		describe("with 'noInlineConfig' setting", () => {
 			const root = getFixturePath("cli-engine/noInlineConfig");
 
