[Snyk] Fix for 1 vulnerabilities

[MaxMood96]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• packages/readable-js-assets-webpack-plugin/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Inefficient Algorithmic Complexity SNYK-JS-BRACEEXPANSION-17706650

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[MaxMood96]

This update includes a major version upgrade for glob from v7 to v12, which contains significant and numerous breaking changes. The rimraf upgrade also introduces a key environmental breaking change.

glob: 7.2.3 → 12.0.0 (High Risk)

The glob package has been completely rewritten between these versions, introducing major breaking changes.

Key Changes:

• Promise-Based API: The library now uses Promises instead of callbacks. All asynchronous calls must be updated to use async/await or .then().
• Node.js Requirement: Version 9+ requires Node.js v16 or higher, and version 8+ requires Node.js v12 or higher.
• Path Separators: The backslash (\) is no longer a path separator and is treated only as an escape character. All patterns must use forward slashes (/).
• API Surface Changes: Many function names and class methods have changed. The Glob class is no longer an event emitter.
• Removed Options: Numerous options have been removed, including root, stat, silent, strict, nonull, nounique, and nosort.

Recommendation:
This is a major refactoring effort. Code using glob must be carefully migrated to the new Promise-based API, and all glob patterns must be audited to ensure they use forward slashes. Thorough testing is required.

rimraf: 5.0.10 → 6.1.1 (Medium Risk)

Key Changes:

• Node.js Requirement: The most significant change is that rimraf v6 requires Node.js v20 or higher.

Recommendation:
Before upgrading, ensure your production and development environments are running a compatible version of Node.js (v20+). If not, you must upgrade your Node.js runtime before applying this update.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[github-actions]

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

Unlinked Accounts

The following contributors have not linked their GitHub and WordPress.org accounts: @snyk-bot, @MaxMood96, @mergify.

Contributors, please read how to link your accounts to ensure your work is properly credited in WordPress releases.

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Unlinked contributors: snyk-bot, MaxMood96, mergify.

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.