@socketsecurity/lib 5.28.0 → 6.0.1

package/dist/external/npm-pack.js

@@ -1,4 +1,30 @@
-const { ArrayBufferIsView: _p_ArrayBufferIsView, ArrayCtor: _p_ArrayCtor, ArrayIsArray: _p_ArrayIsArray, ArrayPrototypeUnshift: _p_ArrayPrototypeUnshift, BufferConcat: _p_BufferConcat, BufferFrom: _p_BufferFrom, BufferIsBuffer: _p_BufferIsBuffer, DateCtor: _p_DateCtor, DateNow: _p_DateNow, DateParse: _p_DateParse, ErrorCtor: _p_ErrorCtor, JSONParse: _p_JSONParse, JSONStringify: _p_JSONStringify, MapCtor: _p_MapCtor, MathAbs: _p_MathAbs, MathFloor: _p_MathFloor, MathMax: _p_MathMax, MathMin: _p_MathMin, MathPow: _p_MathPow, MathRandom: _p_MathRandom, MathRound: _p_MathRound, NumberIsSafeInteger: _p_NumberIsSafeInteger, NumberParseInt: _p_NumberParseInt, ObjectAssign: _p_ObjectAssign, ObjectCreate: _p_ObjectCreate, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectEntries: _p_ObjectEntries, ObjectFreeze: _p_ObjectFreeze, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor, ObjectGetPrototypeOf: _p_ObjectGetPrototypeOf, ObjectKeys: _p_ObjectKeys, PromiseAll: _p_PromiseAll, PromiseCtor: _p_PromiseCtor, PromiseReject: _p_PromiseReject, PromiseResolve: _p_PromiseResolve, ReflectDefineProperty: _p_ReflectDefineProperty, RegExpCtor: _p_RegExpCtor, SetCtor: _p_SetCtor, StringFromCharCode: _p_StringFromCharCode, StringPrototypeCharAt: _p_StringPrototypeCharAt, StringPrototypeCharCodeAt: _p_StringPrototypeCharCodeAt, StringPrototypeEndsWith: _p_StringPrototypeEndsWith, StringPrototypeLocaleCompare: _p_StringPrototypeLocaleCompare, StringPrototypeStartsWith: _p_StringPrototypeStartsWith, StringPrototypeSubstring: _p_StringPrototypeSubstring, TypeErrorCtor: _p_TypeErrorCtor, URLCtor: _p_URLCtor } = require('../primordials.js')
+const { ArrayBufferIsView: _p_ArrayBufferIsView, ArrayCtor: _p_ArrayCtor, ArrayIsArray: _p_ArrayIsArray, ArrayPrototypeUnshift: _p_ArrayPrototypeUnshift } = require('../primordials/array.js')
+const { BufferConcat: _p_BufferConcat, BufferFrom: _p_BufferFrom, BufferIsBuffer: _p_BufferIsBuffer } = require('../primordials/buffer.js')
+
+const { DateCtor: _p_DateCtor, DateNow: _p_DateNow, DateParse: _p_DateParse } = require('../primordials/date.js')
+
+const { ErrorCtor: _p_ErrorCtor, TypeErrorCtor: _p_TypeErrorCtor } = require('../primordials/error.js')
+
+const { JSONParse: _p_JSONParse, JSONStringify: _p_JSONStringify } = require('../primordials/json.js')
+
+const { MapCtor: _p_MapCtor, SetCtor: _p_SetCtor } = require('../primordials/map-set.js')
+
+const { MathAbs: _p_MathAbs, MathFloor: _p_MathFloor, MathMax: _p_MathMax, MathMin: _p_MathMin, MathPow: _p_MathPow, MathRandom: _p_MathRandom, MathRound: _p_MathRound } = require('../primordials/math.js')
+
+const { NumberIsSafeInteger: _p_NumberIsSafeInteger, NumberParseInt: _p_NumberParseInt } = require('../primordials/number.js')
+
+const { ObjectAssign: _p_ObjectAssign, ObjectCreate: _p_ObjectCreate, ObjectDefineProperty: _p_ObjectDefineProperty, ObjectEntries: _p_ObjectEntries, ObjectFreeze: _p_ObjectFreeze, ObjectGetOwnPropertyDescriptor: _p_ObjectGetOwnPropertyDescriptor, ObjectGetPrototypeOf: _p_ObjectGetPrototypeOf, ObjectKeys: _p_ObjectKeys } = require('../primordials/object.js')
+
+const { PromiseAll: _p_PromiseAll, PromiseCtor: _p_PromiseCtor, PromiseReject: _p_PromiseReject, PromiseResolve: _p_PromiseResolve } = require('../primordials/promise.js')
+
+const { ReflectDefineProperty: _p_ReflectDefineProperty } = require('../primordials/reflect.js')
+
+const { RegExpCtor: _p_RegExpCtor } = require('../primordials/regexp.js')
+
+const { StringFromCharCode: _p_StringFromCharCode, StringPrototypeCharAt: _p_StringPrototypeCharAt, StringPrototypeCharCodeAt: _p_StringPrototypeCharCodeAt, StringPrototypeEndsWith: _p_StringPrototypeEndsWith, StringPrototypeLocaleCompare: _p_StringPrototypeLocaleCompare, StringPrototypeStartsWith: _p_StringPrototypeStartsWith, StringPrototypeSubstring: _p_StringPrototypeSubstring } = require('../primordials/string.js')
+
+const { URLCtor: _p_URLCtor } = require('../primordials/url.js')
+
 "use strict";
 /**
  * Bundled from npm-pack
@@ -682,7 +708,7 @@ var require_semver = __commonJS({
             break;
           }
           default:
-            throw new Error(`invalid increment argument: ${release}`);
+            throw new _p_ErrorCtor(`invalid increment argument: ${release}`);
         }
         this.raw = this.format();
         if (this.build.length) {
@@ -1683,7 +1709,7 @@ var require_commonjs = __commonJS({
           if (this.#sizes) {
             entry.size = this.#sizes[i];
           }
-          arr.unshift([key, entry]);
+          _p_ArrayPrototypeUnshift(arr, [key, entry]);
         }
         return arr;
       }
@@ -3067,9 +3093,9 @@ var require_commonjs3 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js
 var require_assert_valid_pattern = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/assert-valid-pattern.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.assertValidPattern = void 0;
@@ -3086,9 +3112,9 @@ var require_assert_valid_pattern = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/brace-expressions.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/brace-expressions.js
 var require_brace_expressions = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/brace-expressions.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/brace-expressions.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.parseClass = void 0;
@@ -3203,9 +3229,9 @@ var require_brace_expressions = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/unescape.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/unescape.js
 var require_unescape = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/unescape.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/unescape.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.unescape = void 0;
@@ -3216,16 +3242,43 @@ var require_unescape = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/ast.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/ast.js
 var require_ast = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/ast.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/ast.js"(exports2) {
     "use strict";
+    var _a;
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.AST = void 0;
     var brace_expressions_js_1 = require_brace_expressions();
     var unescape_js_1 = require_unescape();
     var types = /* @__PURE__ */ new _p_SetCtor(["!", "?", "+", "*", "@"]);
     var isExtglobType = /* @__PURE__ */ __name((c) => types.has(c), "isExtglobType");
+    var isExtglobAST = /* @__PURE__ */ __name((c) => isExtglobType(c.type), "isExtglobAST");
+    var adoptionMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", ["@"]],
+      ["?", ["?", "@"]],
+      ["@", ["@"]],
+      ["*", ["*", "+", "?", "@"]],
+      ["+", ["+", "@"]]
+    ]);
+    var adoptionWithSpaceMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", ["?"]],
+      ["@", ["?"]],
+      ["+", ["?", "*"]]
+    ]);
+    var adoptionAnyMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", ["?", "@"]],
+      ["?", ["?", "@"]],
+      ["@", ["?", "@"]],
+      ["*", ["*", "+", "?", "@"]],
+      ["+", ["+", "@", "?", "*"]]
+    ]);
+    var usurpMap = /* @__PURE__ */ new _p_MapCtor([
+      ["!", /* @__PURE__ */ new _p_MapCtor([["!", "@"]])],
+      ["?", /* @__PURE__ */ new _p_MapCtor([["*", "*"], ["+", "*"]])],
+      ["@", /* @__PURE__ */ new _p_MapCtor([["!", "!"], ["?", "?"], ["@", "@"], ["*", "*"], ["+", "+"]])],
+      ["+", /* @__PURE__ */ new _p_MapCtor([["?", "*"], ["*", "*"]])]
+    ]);
     var startNoTraversal = "(?!(?:^|/)\\.\\.?(?:$|/))";
     var startNoDot = "(?!\\.)";
     var addPatternStart = /* @__PURE__ */ new _p_SetCtor(["[", "."]);
@@ -3235,7 +3288,7 @@ var require_ast = __commonJS({
     var qmark = "[^/]";
     var star = qmark + "*?";
     var starNoEmpty = qmark + "+?";
-    var AST = class _AST {
+    var AST = class {
       static {
         __name(this, "AST");
       }
@@ -3318,7 +3371,7 @@ var require_ast = __commonJS({
         for (const p of parts) {
           if (p === "")
             continue;
-          if (typeof p !== "string" && !(p instanceof _AST && p.#parent === this)) {
+          if (typeof p !== "string" && !(p instanceof _a && p.#parent === this)) {
             throw new _p_ErrorCtor("invalid part: " + p);
           }
           this.#parts.push(p);
@@ -3343,7 +3396,7 @@ var require_ast = __commonJS({
         const p = this.#parent;
         for (let i = 0; i < this.#parentIndex; i++) {
           const pp = p.#parts[i];
-          if (!(pp instanceof _AST && pp.type === "!")) {
+          if (!(pp instanceof _a && pp.type === "!")) {
             return false;
           }
         }
@@ -3368,13 +3421,14 @@ var require_ast = __commonJS({
           this.push(part.clone(this));
       }
       clone(parent) {
-        const c = new _AST(this.type, parent);
+        const c = new _a(this.type, parent);
         for (const p of this.#parts) {
           c.copyIn(p);
         }
         return c;
       }
-      static #parseAST(str, ast, pos, opt) {
+      static #parseAST(str, ast, pos, opt, extDepth) {
+        const maxDepth = opt.maxExtglobRecursion ?? 2;
         let escaping = false;
         let inBrace = false;
         let braceStart = -1;
@@ -3406,11 +3460,12 @@ var require_ast = __commonJS({
               acc2 += c;
               continue;
             }
-            if (!opt.noext && isExtglobType(c) && _p_StringPrototypeCharAt(str, i2) === "(") {
+            const doRecurse = !opt.noext && isExtglobType(c) && _p_StringPrototypeCharAt(str, i2) === "(" && extDepth <= maxDepth;
+            if (doRecurse) {
               ast.push(acc2);
               acc2 = "";
-              const ext = new _AST(c, ast);
-              i2 = _AST.#parseAST(str, ext, i2, opt);
+              const ext = new _a(c, ast);
+              i2 = _a.#parseAST(str, ext, i2, opt, extDepth + 1);
               ast.push(ext);
               continue;
             }
@@ -3420,7 +3475,7 @@ var require_ast = __commonJS({
           return i2;
         }
         let i = pos + 1;
-        let part = new _AST(null, ast);
+        let part = new _a(null, ast);
         const parts = [];
         let acc = "";
         while (i < str.length) {
@@ -3447,19 +3502,22 @@ var require_ast = __commonJS({
             acc += c;
             continue;
           }
-          if (isExtglobType(c) && _p_StringPrototypeCharAt(str, i) === "(") {
+          const doRecurse = isExtglobType(c) && _p_StringPrototypeCharAt(str, i) === "(" && /* c8 ignore start - the maxDepth is sufficient here */
+          (extDepth <= maxDepth || ast && ast.#canAdoptType(c));
+          if (doRecurse) {
+            const depthAdd = ast && ast.#canAdoptType(c) ? 0 : 1;
             part.push(acc);
             acc = "";
-            const ext = new _AST(c, part);
+            const ext = new _a(c, part);
             part.push(ext);
-            i = _AST.#parseAST(str, ext, i, opt);
+            i = _a.#parseAST(str, ext, i, opt, extDepth + depthAdd);
             continue;
           }
           if (c === "|") {
             part.push(acc);
             acc = "";
             parts.push(part);
-            part = new _AST(null, ast);
+            part = new _a(null, ast);
             continue;
           }
           if (c === ")") {
@@ -3478,9 +3536,101 @@ var require_ast = __commonJS({
         ast.#parts = [_p_StringPrototypeSubstring(str, pos - 1)];
         return i;
       }
+      #canAdoptWithSpace(child) {
+        return this.#canAdopt(child, adoptionWithSpaceMap);
+      }
+      #canAdopt(child, map = adoptionMap) {
+        if (!child || typeof child !== "object" || child.type !== null || child.#parts.length !== 1 || this.type === null) {
+          return false;
+        }
+        const gc = child.#parts[0];
+        if (!gc || typeof gc !== "object" || gc.type === null) {
+          return false;
+        }
+        return this.#canAdoptType(gc.type, map);
+      }
+      #canAdoptType(c, map = adoptionAnyMap) {
+        return !!map.get(this.type)?.includes(c);
+      }
+      #adoptWithSpace(child, index) {
+        const gc = child.#parts[0];
+        const blank = new _a(null, gc, this.options);
+        blank.#parts.push("");
+        gc.push(blank);
+        this.#adopt(child, index);
+      }
+      #adopt(child, index) {
+        const gc = child.#parts[0];
+        this.#parts.splice(index, 1, ...gc.#parts);
+        for (const p of gc.#parts) {
+          if (typeof p === "object")
+            p.#parent = this;
+        }
+        this.#toString = void 0;
+      }
+      #canUsurpType(c) {
+        const m = usurpMap.get(this.type);
+        return !!m?.has(c);
+      }
+      #canUsurp(child) {
+        if (!child || typeof child !== "object" || child.type !== null || child.#parts.length !== 1 || this.type === null || this.#parts.length !== 1) {
+          return false;
+        }
+        const gc = child.#parts[0];
+        if (!gc || typeof gc !== "object" || gc.type === null) {
+          return false;
+        }
+        return this.#canUsurpType(gc.type);
+      }
+      #usurp(child) {
+        const m = usurpMap.get(this.type);
+        const gc = child.#parts[0];
+        const nt = m?.get(gc.type);
+        if (!nt)
+          return false;
+        this.#parts = gc.#parts;
+        for (const p of this.#parts) {
+          if (typeof p === "object")
+            p.#parent = this;
+        }
+        this.type = nt;
+        this.#toString = void 0;
+        this.#emptyExt = false;
+      }
+      #flatten() {
+        if (!isExtglobAST(this)) {
+          for (const p of this.#parts) {
+            if (typeof p === "object")
+              p.#flatten();
+          }
+        } else {
+          let iterations = 0;
+          let done = false;
+          do {
+            done = true;
+            for (let i = 0; i < this.#parts.length; i++) {
+              const c = this.#parts[i];
+              if (typeof c === "object") {
+                c.#flatten();
+                if (this.#canAdopt(c)) {
+                  done = false;
+                  this.#adopt(c, i);
+                } else if (this.#canAdoptWithSpace(c)) {
+                  done = false;
+                  this.#adoptWithSpace(c, i);
+                } else if (this.#canUsurp(c)) {
+                  done = false;
+                  this.#usurp(c);
+                }
+              }
+            }
+          } while (!done && ++iterations < 10);
+        }
+        this.#toString = void 0;
+      }
       static fromGlob(pattern, options = {}) {
-        const ast = new _AST(null, void 0, options);
-        _AST.#parseAST(pattern, ast, 0, options);
+        const ast = new _a(null, void 0, options);
+        _a.#parseAST(pattern, ast, 0, options, 0);
         return ast;
       }
       // returns the regular expression if there's magic, or the unescaped
@@ -3574,12 +3724,14 @@ var require_ast = __commonJS({
       // or start or whatever) and prepend ^ or / at the Regexp construction.
       toRegExpSource(allowDot) {
         const dot = allowDot ?? !!this.#options.dot;
-        if (this.#root === this)
+        if (this.#root === this) {
+          this.#flatten();
           this.#fillNegs();
-        if (!this.type) {
+        }
+        if (!isExtglobAST(this)) {
           const noEmpty = this.isStart() && this.isEnd();
           const src = this.#parts.map((p) => {
-            const [re, _, hasMagic, uflag] = typeof p === "string" ? _AST.#parseGlob(p, this.#hasMagic, noEmpty) : p.toRegExpSource(allowDot);
+            const [re, _, hasMagic, uflag] = typeof p === "string" ? _a.#parseGlob(p, this.#hasMagic, noEmpty) : p.toRegExpSource(allowDot);
             this.#hasMagic = this.#hasMagic || hasMagic;
             this.#uflag = this.#uflag || uflag;
             return re;
@@ -3618,9 +3770,10 @@ var require_ast = __commonJS({
         let body = this.#partsToRegExp(dot);
         if (this.isStart() && this.isEnd() && !body && this.type !== "!") {
           const s = this.toString();
-          this.#parts = [s];
-          this.type = null;
-          this.#hasMagic = void 0;
+          const me = this;
+          me.#parts = [s];
+          me.type = null;
+          me.#hasMagic = void 0;
           return [s, (0, unescape_js_1.unescape)(this.toString()), false, false];
         }
         let bodyDotAllowed = !repeated || allowDot || dot || !startNoDot ? "" : this.#partsToRegExp(true);
@@ -3710,12 +3863,13 @@ var require_ast = __commonJS({
       }
     };
     exports2.AST = AST;
+    _a = AST;
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/escape.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/escape.js
 var require_escape = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/escape.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/escape.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.escape = void 0;
@@ -3726,9 +3880,9 @@ var require_escape = __commonJS({
   }
 });
 
-// node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/index.js
+// node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/index.js
 var require_commonjs4 = __commonJS({
-  "node_modules/.pnpm/minimatch@9.0.6/node_modules/minimatch/dist/commonjs/index.js"(exports2) {
+  "node_modules/.pnpm/minimatch@9.0.7/node_modules/minimatch/dist/commonjs/index.js"(exports2) {
     "use strict";
     _p_ObjectDefineProperty(exports2, "__esModule", { value: true });
     exports2.unescape = exports2.escape = exports2.AST = exports2.Minimatch = exports2.match = exports2.makeRe = exports2.braceExpand = exports2.defaults = exports2.filter = exports2.GLOBSTAR = exports2.sep = exports2.minimatch = void 0;
@@ -3900,11 +4054,13 @@ var require_commonjs4 = __commonJS({
       isWindows;
       platform;
       windowsNoMagicRoot;
+      maxGlobstarRecursion;
       regexp;
       constructor(pattern, options = {}) {
         (0, assert_valid_pattern_js_1.assertValidPattern)(pattern);
         options = options || {};
         this.options = options;
+        this.maxGlobstarRecursion = options.maxGlobstarRecursion ?? 200;
         this.pattern = pattern;
         this.platform = options.platform || defaultPlatform;
         this.isWindows = this.platform === "win32";
@@ -4237,7 +4393,8 @@ var require_commonjs4 = __commonJS({
       // out of pattern, then that's fine, as long as all
       // the parts match.
       matchOne(file, pattern, partial = false) {
-        const options = this.options;
+        let fileStartIndex = 0;
+        let patternStartIndex = 0;
         if (this.isWindows) {
           const fileDrive = typeof file[0] === "string" && /^[a-z]:$/i.test(file[0]);
           const fileUNC = !fileDrive && file[0] === "" && file[1] === "" && file[2] === "?" && /^[a-z]:$/i.test(file[3]);
@@ -4246,14 +4403,14 @@ var require_commonjs4 = __commonJS({
           const fdi = fileUNC ? 3 : fileDrive ? 0 : void 0;
           const pdi = patternUNC ? 3 : patternDrive ? 0 : void 0;
           if (typeof fdi === "number" && typeof pdi === "number") {
-            const [fd, pd] = [file[fdi], pattern[pdi]];
+            const [fd, pd] = [
+              file[fdi],
+              pattern[pdi]
+            ];
             if (fd.toLowerCase() === pd.toLowerCase()) {
               pattern[pdi] = fd;
-              if (pdi > fdi) {
-                pattern = pattern.slice(pdi);
-              } else if (fdi > pdi) {
-                file = file.slice(fdi);
-              }
+              patternStartIndex = pdi;
+              fileStartIndex = fdi;
             }
           }
         }
@@ -4261,51 +4418,114 @@ var require_commonjs4 = __commonJS({
         if (optimizationLevel >= 2) {
           file = this.levelTwoFileOptimize(file);
         }
-        this.debug("matchOne", this, { file, pattern });
-        this.debug("matchOne", file.length, pattern.length);
-        for (var fi = 0, pi = 0, fl = file.length, pl = pattern.length; fi < fl && pi < pl; fi++, pi++) {
-          this.debug("matchOne loop");
-          var p = pattern[pi];
-          var f = file[fi];
-          this.debug(pattern, p, f);
-          if (p === false) {
+        if (pattern.includes(exports2.GLOBSTAR)) {
+          return this.#matchGlobstar(file, pattern, partial, fileStartIndex, patternStartIndex);
+        }
+        return this.#matchOne(file, pattern, partial, fileStartIndex, patternStartIndex);
+      }
+      #matchGlobstar(file, pattern, partial, fileIndex, patternIndex) {
+        const firstgs = pattern.indexOf(exports2.GLOBSTAR, patternIndex);
+        const lastgs = pattern.lastIndexOf(exports2.GLOBSTAR);
+        const [head, body, tail] = [
+          pattern.slice(patternIndex, firstgs),
+          pattern.slice(firstgs + 1, lastgs),
+          pattern.slice(lastgs + 1)
+        ];
+        if (head.length) {
+          const fileHead = file.slice(fileIndex, fileIndex + head.length);
+          if (!this.#matchOne(fileHead, head, partial, 0, 0))
             return false;
-          }
-          if (p === exports2.GLOBSTAR) {
-            this.debug("GLOBSTAR", [pattern, p, f]);
-            var fr = fi;
-            var pr = pi + 1;
-            if (pr === pl) {
-              this.debug("** at the end");
-              for (; fi < fl; fi++) {
-                if (file[fi] === "." || file[fi] === ".." || !options.dot && file[fi].charAt(0) === ".")
-                  return false;
-              }
-              return true;
+          fileIndex += head.length;
+        }
+        let fileTailMatch = 0;
+        if (tail.length) {
+          if (tail.length + fileIndex > file.length)
+            return false;
+          let tailStart = file.length - tail.length;
+          if (this.#matchOne(file, tail, partial, tailStart, 0)) {
+            fileTailMatch = tail.length;
+          } else {
+            if (file[file.length - 1] !== "" || fileIndex + tail.length === file.length) {
+              return false;
             }
-            while (fr < fl) {
-              var swallowee = file[fr];
-              this.debug("\nglobstar while", file, fr, pattern, pr, swallowee);
-              if (this.matchOne(file.slice(fr), pattern.slice(pr), partial)) {
-                this.debug("globstar found match!", fr, fl, swallowee);
-                return true;
-              } else {
-                if (swallowee === "." || swallowee === ".." || !options.dot && _p_StringPrototypeCharAt(swallowee, 0) === ".") {
-                  this.debug("dot detected!", file, fr, pattern, pr);
-                  break;
-                }
-                this.debug("globstar swallow a segment, and continue");
-                fr++;
-              }
+            tailStart--;
+            if (!this.#matchOne(file, tail, partial, tailStart, 0))
+              return false;
+            fileTailMatch = tail.length + 1;
+          }
+        }
+        if (!body.length) {
+          let sawSome = !!fileTailMatch;
+          for (let i2 = fileIndex; i2 < file.length - fileTailMatch; i2++) {
+            const f = String(file[i2]);
+            sawSome = true;
+            if (f === "." || f === ".." || !this.options.dot && _p_StringPrototypeStartsWith(f, ".")) {
+              return false;
             }
-            if (partial) {
-              this.debug("\n>>> no match, partial?", file, fr, pattern, pr);
-              if (fr === fl) {
-                return true;
-              }
+          }
+          return sawSome;
+        }
+        const bodySegments = [[[], 0]];
+        let currentBody = bodySegments[0];
+        let nonGsParts = 0;
+        const nonGsPartsSums = [0];
+        for (const b of body) {
+          if (b === exports2.GLOBSTAR) {
+            nonGsPartsSums.push(nonGsParts);
+            currentBody = [[], 0];
+            bodySegments.push(currentBody);
+          } else {
+            currentBody[0].push(b);
+            nonGsParts++;
+          }
+        }
+        let i = bodySegments.length - 1;
+        const fileLength = file.length - fileTailMatch;
+        for (const b of bodySegments) {
+          b[1] = fileLength - (nonGsPartsSums[i--] + b[0].length);
+        }
+        return !!this.#matchGlobStarBodySections(file, bodySegments, fileIndex, 0, partial, 0, !!fileTailMatch);
+      }
+      #matchGlobStarBodySections(file, bodySegments, fileIndex, bodyIndex, partial, globStarDepth, sawTail) {
+        const bs = bodySegments[bodyIndex];
+        if (!bs) {
+          for (let i = fileIndex; i < file.length; i++) {
+            sawTail = true;
+            const f = file[i];
+            if (f === "." || f === ".." || !this.options.dot && _p_StringPrototypeStartsWith(f, ".")) {
+              return false;
             }
+          }
+          return sawTail;
+        }
+        const [body, after] = bs;
+        while (fileIndex <= after) {
+          const m = this.#matchOne(file.slice(0, fileIndex + body.length), body, partial, fileIndex, 0);
+          if (m && globStarDepth < this.maxGlobstarRecursion) {
+            const sub = this.#matchGlobStarBodySections(file, bodySegments, fileIndex + body.length, bodyIndex + 1, partial, globStarDepth + 1, sawTail);
+            if (sub !== false)
+              return sub;
+          }
+          const f = file[fileIndex];
+          if (f === "." || f === ".." || !this.options.dot && _p_StringPrototypeStartsWith(f, ".")) {
             return false;
           }
+          fileIndex++;
+        }
+        return null;
+      }
+      #matchOne(file, pattern, partial, fileIndex, patternIndex) {
+        let fi;
+        let pi;
+        let pl;
+        let fl;
+        for (fi = fileIndex, pi = patternIndex, fl = file.length, pl = pattern.length; fi < fl && pi < pl; fi++, pi++) {
+          this.debug("matchOne loop");
+          let p = pattern[pi];
+          let f = file[fi];
+          this.debug(pattern, p, f);
+          if (p === false || p === exports2.GLOBSTAR)
+            return false;
           let hit;
           if (typeof p === "string") {
             hit = f === p;
@@ -6601,7 +6821,7 @@ var require_commonjs6 = __commonJS({
         for (const part of split) {
           const l = len--;
           prev = prev.child(part, {
-            relative: new _p_ArrayCtor(l).fill("..").join(joinSep),
+            relative: new Array(l).fill("..").join(joinSep),
             relativePosix: new Array(l).fill("..").join("/"),
             fullpath: abs += (sawFirst ? "" : joinSep) + part
           });
@@ -10868,7 +11088,7 @@ var require_promise_retry = __commonJS({
           }).then(resolve, function(err) {
             if (isRetryError(err)) {
               err = err.retried;
-              if (operation.retry(err || new Error())) {
+              if (operation.retry(err || new _p_ErrorCtor())) {
                 return;
               }
             }
@@ -12285,7 +12505,7 @@ var require_min_version = __commonJS({
               break;
             /* istanbul ignore next */
             default:
-              throw new Error(`Unexpected operation: ${comparator.operator}`);
+              throw new _p_ErrorCtor(`Unexpected operation: ${comparator.operator}`);
           }
         });
         if (setMin && (!minver || gt(minver, setMin))) {
@@ -13891,7 +14111,7 @@ ${polMsg}`;
 // node_modules/.pnpm/@npmcli+git@6.0.3/node_modules/@npmcli/git/lib/clone.js
 var require_clone = __commonJS({
   "node_modules/.pnpm/@npmcli+git@6.0.3/node_modules/@npmcli/git/lib/clone.js"(exports2, module2) {
-    var shallowHosts = /* @__PURE__ */ new _p_SetCtor([
+    var shallowHosts = /* @__PURE__ */ new Set([
       "github.com",
       "gist.github.com",
       "gitlab.com",
@@ -30087,9 +30307,9 @@ var require_util = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/common.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/common.js
 var require_common2 = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/common.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/common.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.isInSubnet = isInSubnet;
@@ -30139,9 +30359,9 @@ var require_common2 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v4/constants.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v4/constants.js
 var require_constants4 = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v4/constants.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v4/constants.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.RE_SUBNET_STRING = exports2.RE_ADDRESS = exports2.GROUPS = exports2.BITS = void 0;
@@ -30152,9 +30372,9 @@ var require_constants4 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/address-error.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/address-error.js
 var require_address_error = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/address-error.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/address-error.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.AddressError = void 0;
@@ -30172,9 +30392,9 @@ var require_address_error = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/ipv4.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/ipv4.js
 var require_ipv4 = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/ipv4.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/ipv4.js"(exports2) {
     "use strict";
     var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -30518,9 +30738,9 @@ var require_ipv4 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v6/constants.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v6/constants.js
 var require_constants5 = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v6/constants.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v6/constants.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.RE_URL_WITH_PORT = exports2.RE_URL = exports2.RE_ZONE_STRING = exports2.RE_SUBNET_STRING = exports2.RE_BAD_ADDRESS = exports2.RE_BAD_CHARACTERS = exports2.TYPES = exports2.SCOPES = exports2.GROUPS = exports2.BITS = void 0;
@@ -30569,26 +30789,31 @@ var require_constants5 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v6/helpers.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v6/helpers.js
 var require_helpers2 = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v6/helpers.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v6/helpers.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.escapeHtml = escapeHtml;
     exports2.spanAllZeroes = spanAllZeroes;
     exports2.spanAll = spanAll;
     exports2.spanLeadingZeroes = spanLeadingZeroes;
     exports2.simpleGroup = simpleGroup;
+    function escapeHtml(s) {
+      return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+    }
+    __name(escapeHtml, "escapeHtml");
     function spanAllZeroes(s) {
-      return s.replace(/(0+)/g, '<span class="zero">$1</span>');
+      return escapeHtml(s).replace(/(0+)/g, '<span class="zero">$1</span>');
     }
     __name(spanAllZeroes, "spanAllZeroes");
     function spanAll(s, offset = 0) {
       const letters = s.split("");
-      return letters.map((n, i) => `<span class="digit value-${n} position-${i + offset}">${spanAllZeroes(n)}</span>`).join("");
+      return letters.map((n, i) => `<span class="digit value-${escapeHtml(n)} position-${i + offset}">${spanAllZeroes(n)}</span>`).join("");
     }
     __name(spanAll, "spanAll");
     function spanLeadingZeroesSimple(group) {
-      return group.replace(/^(0+)/, '<span class="zero">$1</span>');
+      return escapeHtml(group).replace(/^(0+)/, '<span class="zero">$1</span>');
     }
     __name(spanLeadingZeroesSimple, "spanLeadingZeroesSimple");
     function spanLeadingZeroes(address) {
@@ -30609,9 +30834,9 @@ var require_helpers2 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v6/regular-expressions.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v6/regular-expressions.js
 var require_regular_expressions = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/v6/regular-expressions.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/v6/regular-expressions.js"(exports2) {
     "use strict";
     var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -30705,9 +30930,9 @@ var require_regular_expressions = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/ipv6.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/ipv6.js
 var require_ipv6 = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/ipv6.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/ipv6.js"(exports2) {
     "use strict";
     var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -31203,7 +31428,10 @@ var require_ipv6 = __commonJS({
           this.address4 = new ipv4_1.Address4(this.parsedAddress4);
           for (let i = 0; i < this.address4.groups; i++) {
             if (/^0[0-9]+/.test(this.address4.parsedAddress[i])) {
-              throw new address_error_1.AddressError("IPv4 addresses can't have leading zeroes.", address.replace(constants4.RE_ADDRESS, this.address4.parsedAddress.map(spanLeadingZeroes4).join(".")));
+              const highlighted = this.address4.parsedAddress.map(spanLeadingZeroes4).join(".");
+              const prefix = groups.slice(0, -1).map(helpers.escapeHtml).join(":");
+              const separator = groups.length > 1 ? ":" : "";
+              throw new address_error_1.AddressError("IPv4 addresses can't have leading zeroes.", `${prefix}${separator}${highlighted}`);
             }
           }
           this.v4 = true;
@@ -31531,10 +31759,13 @@ var require_ipv6 = __commonJS({
           formFunction = this.to4in6;
         }
         const form = formFunction.call(this);
+        const safeHref = helpers.escapeHtml(`${options.prefix}${form}`);
+        const safeForm = helpers.escapeHtml(form);
         if (options.className) {
-          return `<a href="${options.prefix}${form}" class="${options.className}">${form}</a>`;
+          const safeClass = helpers.escapeHtml(options.className);
+          return `<a href="${safeHref}" class="${safeClass}">${safeForm}</a>`;
         }
-        return `<a href="${options.prefix}${form}">${form}</a>`;
+        return `<a href="${safeHref}">${safeForm}</a>`;
       }
       /**
        * Groups an address
@@ -31542,12 +31773,12 @@ var require_ipv6 = __commonJS({
        */
       group() {
         if (this.elidedGroups === 0) {
-          return helpers.simpleGroup(this.address).join(":");
+          return helpers.simpleGroup(this.addressMinusSuffix).join(":");
         }
         assert(typeof this.elidedGroups === "number");
         assert(typeof this.elisionBegin === "number");
         const output = [];
-        const [left, right] = this.address.split("::");
+        const [left, right] = this.addressMinusSuffix.split("::");
         if (left.length) {
           output.push(...helpers.simpleGroup(left));
         } else {
@@ -31628,9 +31859,9 @@ var require_ipv6 = __commonJS({
   }
 });
 
-// node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/ip-address.js
+// node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/ip-address.js
 var require_ip_address = __commonJS({
-  "node_modules/.pnpm/ip-address@10.1.0/node_modules/ip-address/dist/ip-address.js"(exports2) {
+  "node_modules/.pnpm/ip-address@10.1.1/node_modules/ip-address/dist/ip-address.js"(exports2) {
     "use strict";
     var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o, m, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -39460,7 +39691,7 @@ var require_audit_report = __commonJS({
         __name(this, "AuditReport");
       }
       static async load() {
-        return null;
+        return void 0;
       }
       constructor() {
         throw new Error(