From d5ef1770a5a3180642a543ff7f2ca4aae67931db Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Mon, 12 Oct 2026 09:47:11 +0000 Subject: [PATCH] chore(deps): bump brace-expansion override to 1.1.21 Close Dependabot alert #77 (GHSA-q2hr-2g5m-vwhr) by raising the existing 1.x override so every brace-expansion 1.x copy is patched. --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 504345ba..a9377173 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3278,9 +3278,9 @@ } }, "node_modules/brace-expansion": { - "version": "1.1.18", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", - "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "version": "1.1.21", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz", + "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==", "dev": true, "license": "MIT", "dependencies": { diff --git a/package.json b/package.json index 172a63a9..34767427 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ }, "homepage": "https://comphy-lab.org/vatsalsy", "overrides": { - "brace-expansion": "1.1.18", + "brace-expansion": "1.1.21", "fast-uri": "4.2.1", "form-data": "4.0.4", "js-yaml": "4.3.2",