fix: replace bash-glob with fast-glob to omit cross-spawn from prod deps tree

Author: antongolub

lib/lockfileV2/workspace.js

@@ -1,6 +1,6 @@
 'use strict'
 
-const glob = require('bash-glob')
+const glob = require('fast-glob')
 const { sep, resolve } = require('path')
 
 module.exports = {
@@ -15,8 +15,8 @@ module.exports = {
       packages.map((p) => p.replace(/\/?$/, '/package.json')),
       {
         cwd: resolve(cwd),
-        realpath: true,
-        ignore: '**/node_modules/**'
+        absolute: true,
+        ignore: ['**/node_modules/**']
       }
     )
   },

package.json

@@ -35,20 +35,20 @@
   },
   "dependencies": {
     "@yarnpkg/lockfile": "^1.1.0",
-    "bash-glob": "^2.0.0",
+    "fast-glob": "^3.3.2",
     "colors": "1.4.0",
     "commander": "^7.2.0",
-    "eol": "^0.9.1",
+    "eol": "^0.10.0",
     "lodash": "4.17.21",
     "nmtree": "^1.0.6",
-    "semver": "^7.6.0",
+    "semver": "^7.6.3",
     "sort-object-keys": "^1.1.3"
   },
   "devDependencies": {
     "nyc": "15.1.0",
     "sinon": "^9.2.4",
     "standard": "^16.0.4",
-    "tape": "^5.7.5",
+    "tape": "^5.9.0",
     "rimraf": "^3.0.2"
   }
 }