Update dependency path-to-regexp@<0.1.13 to ^0.2.0

[tryghost-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
path-to-regexp@<0.1.13	^0.1.13 → ^0.2.0

---

Release Notes

pillarjs/path-to-regexp (path-to-regexp@<0.1.13)

v0.2.5

Compare Source

• Allow keys parameter to be omitted

v0.2.4

Compare Source

• Code coverage badge
• Updated readme
• Attach keys to the generated regexp

v0.2.3

Compare Source

• Add MIT license

v0.2.2

Compare Source

• A passed in trailing slash in non-strict mode will become optional
• In non-end mode, the optional trailing slash will only match at the end

v0.2.1

Compare Source

• Fixed a major capturing group regexp regression

v0.2.0

Compare Source

• Improved support for arrays
• Improved support for regexps
• Better support for non-ending strict mode matches with a trailing slash
• Travis CI support
• Block using regexp special characters in the path
• Removed support for the asterisk to match all
• New support for parameter suffixes - *, + and ?
• Updated readme
• Provide delimiter information with keys array

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
  • Between 11:00 PM and 11:59 PM, Monday through Friday (* 23 * * 1-5)
  • Between 12:00 AM and 04:59 AM, Monday through Saturday (* 0-4 * * 1-6)
• Automerge
  • Only on Sunday and Saturday (* * * * 0,6)
  • Between 11:00 PM and 11:59 PM, Monday through Friday (* 23 * * 1-5)
  • Between 12:00 AM and 04:59 AM, Monday through Saturday (* 0-4 * * 1-6)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cursor]

Bugbot is not enabled for this team, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[nx-cloud]

🤖 Nx Cloud AI Fix

Ensure the fix-ci command is configured to always run in your CI pipeline to get automatic fixes in future runs. For more information, please see https://nx.dev/ci/features/self-healing-ci

---

View your CI Pipeline Execution ↗ for commit fbd51fa

Command	Status	Duration	Result
nx run ghost:test:legacy	❌ Failed	1m 48s	View ↗
nx run ghost:test:e2e	❌ Failed	2m 49s	View ↗
nx run @tryghost/admin:test:acceptance	✅ Succeeded	6m 28s	View ↗
nx run @tryghost/comments-ui:test:acceptance	✅ Succeeded	46s	View ↗
nx run @tryghost/koenig-lexical:test:acceptance	✅ Succeeded	2m 27s	View ↗
nx run-many --target=build --projects=tag:publi...	✅ Succeeded	<1s	View ↗
nx run ghost-admin:test	✅ Succeeded	1s	View ↗
nx run @tryghost/activitypub:test:acceptance	✅ Succeeded	41s	View ↗
Additional runs (6)	✅ Succeeded	...	View ↗

💡 Dealing with memory or CPU issues? See memory and CPU details with the resource usage add-on ↗.

---

☁️ Nx Cloud last updated this comment at 2026-07-24 15:21:10 UTC

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.79%. Comparing base (7be5975) to head (3796d6e).

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #29099   +/-   ##
=======================================
  Coverage   74.79%   74.79%           
=======================================
  Files        1608     1608           
  Lines      141719   141719           
  Branches    17317    17317           
=======================================
  Hits       105995   105995           
  Misses      34652    34652           
  Partials     1072     1072           

Flag	Coverage Δ
admin-tests	55.62% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[9larsons]

Closing: this bumps the pnpm security override for Express 4's transitive path-to-regexp across the 0.1.x → 0.2.x breaking boundary. Express 4 pins path-to-regexp 0.1.x; 0.2.x changes routing semantics and this PR's own CI shows redirect route matching breaking (click-tracking acceptance test). The override exists solely to force the ReDoS-patched 0.1.13, which main already has.

[tryghost-renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (^0.2.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.