From 54a9b982ed8b5ab324a10df585e9ff51e9d75f5f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 27 Aug 2026 18:33:44 +0000
Subject: [PATCH 1/3] Bump picomatch from 4.0.5 to 4.0.7

Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.5 to 4.0.7.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.5...4.0.7)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0ef006c9b..729c5b44f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9224,9 +9224,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
-      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
       "dev": true,
       "license": "MIT",
       "engines": {

From 8aa9388e0b7ba98434fb4ab67f3239ade42a2111 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 31 Aug 2026 13:03:06 +0000
Subject: [PATCH 2/3] Validate picomatch glob matching update

Co-authored-by: jainakanksha-msft <181211853+jainakanksha-msft@users.noreply.github.com>
---
 ChangeLog.md                 |  3 +++
 tests/packageScripts.test.ts | 20 ++++++++++++++++++++
 2 files changed, 23 insertions(+)

diff --git a/ChangeLog.md b/ChangeLog.md
index b81bb1c6a..93ddb333c 100644
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -4,6 +4,9 @@
 
 ## Upcoming Release
 
+General:
+
+- Updated the lockfile-resolved `picomatch` version from 4.0.5 to 4.0.7 to fix glob scanning and terminal globstars in parenthesized patterns; added a matcher regression test.
 
 ## 2026.08 Version 3.37.0
 
diff --git a/tests/packageScripts.test.ts b/tests/packageScripts.test.ts
index 94135dc29..498f52b42 100644
--- a/tests/packageScripts.test.ts
+++ b/tests/packageScripts.test.ts
@@ -111,4 +111,24 @@ describe("Package scripts @loki", () => {
       );
     }
   });
+
+  it("matches terminal globstars in parenthesized patterns", () => {
+    const result = spawnSync(
+      process.execPath,
+      [
+        "-e",
+        [
+          'const picomatch = require("picomatch");',
+          'const pattern = "test?(/utils/**)";',
+          'if (!picomatch.isMatch("test/utils", pattern)) process.exit(1);',
+          'if (!picomatch.isMatch("test/utils/file", pattern)) process.exit(1);',
+          'if (!picomatch.isMatch("test", pattern)) process.exit(1);',
+          'if (picomatch.isMatch("test/other", pattern)) process.exit(1);'
+        ].join("\n")
+      ],
+      { encoding: "utf8" }
+    );
+
+    assert.strictEqual(result.status, 0, result.stderr);
+  });
 });

From e18555282e6e8e8aec349b467f1d3139d16b52d6 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 1 Sep 2026 12:00:46 +0000
Subject: [PATCH 3/3] Remove dependency-specific picomatch regression test

Co-authored-by: jainakanksha-msft <181211853+jainakanksha-msft@users.noreply.github.com>
---
 ChangeLog.md                 |  2 +-
 tests/packageScripts.test.ts | 20 --------------------
 2 files changed, 1 insertion(+), 21 deletions(-)

diff --git a/ChangeLog.md b/ChangeLog.md
index 53d854747..283116b18 100644
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -6,7 +6,7 @@
 
 General:
 
-- Updated the lockfile-resolved `picomatch` version from 4.0.5 to 4.0.7 to fix glob scanning and terminal globstars in parenthesized patterns; added a matcher regression test.
+- Updated the lockfile-resolved `picomatch` version from 4.0.5 to 4.0.7 to fix glob scanning and terminal globstars in parenthesized patterns.
 - Updated lockfile-resolved `mysql2` from 3.23.4 to 3.24.2 to correct three-byte length-coded parameter encoding and improve SQL metadata-store performance; added SQL pool regression coverage for large bound parameters.
 - Updated the lockfile-resolved `eslint` version from 10.9.0 to 10.9.1 to fix a `no-loss-of-precision` false positive for trailing decimal points; added regression coverage for the corrected lint behavior.
 
diff --git a/tests/packageScripts.test.ts b/tests/packageScripts.test.ts
index 498f52b42..94135dc29 100644
--- a/tests/packageScripts.test.ts
+++ b/tests/packageScripts.test.ts
@@ -111,24 +111,4 @@ describe("Package scripts @loki", () => {
       );
     }
   });
-
-  it("matches terminal globstars in parenthesized patterns", () => {
-    const result = spawnSync(
-      process.execPath,
-      [
-        "-e",
-        [
-          'const picomatch = require("picomatch");',
-          'const pattern = "test?(/utils/**)";',
-          'if (!picomatch.isMatch("test/utils", pattern)) process.exit(1);',
-          'if (!picomatch.isMatch("test/utils/file", pattern)) process.exit(1);',
-          'if (!picomatch.isMatch("test", pattern)) process.exit(1);',
-          'if (picomatch.isMatch("test/other", pattern)) process.exit(1);'
-        ].join("\n")
-      ],
-      { encoding: "utf8" }
-    );
-
-    assert.strictEqual(result.status, 0, result.stderr);
-  });
 });