[Vulnerability]: Update glob dependencies to address GHSA-3g3m-2fjr-6pw4 #16529

Version

30.5.2

Steps to reproduce

yarn npm audit --all --recursive --no-deprecations --json

Expected behavior

No audit issues for glob

Actual behavior

est 30.5.2 brings in vulnerable versions of glob through these paths:

• @jest/reporters, jest-config, and jest-runtime → [email protected]
• @jest/transform / babel-jest → [email protected] → [email protected] → [email protected]
  GHSA-3g3m-2fjr-6pw4 affects glob >=9.0.0 <=14.0.1 and is fixed in 14.0.2. The current dependency ranges exclude the fix.

Additional context

I believe test-exclude is outside your domain and it is also affected by this which also impacts jest. But if it's possible to be able to at least update the jest components that would be great.

Environment

System:
    OS: macOS 26.7.1
    CPU: (12) arm64 Apple M3 Pro
  Binaries:
    Node: 24.15.0 - /Users/home/.nvm/versions/node/v24.15.0/bin/node
    Yarn: 4.18.1 - /Users/home/.nvm/versions/node/v24.15.0/bin/yarn
    npm: 11.12.1 - /Users/home/.nvm/versions/node/v24.15.0/bin/npm
  npmPackages:
    jest: 30.5.2 => 30.5.2