From fbdac30d18b5eb96f6d0d6f2232c31d226364689 Mon Sep 17 00:00:00 2001 From: Lotus CI Date: Wed, 30 Sep 2026 19:04:47 -0400 Subject: [PATCH] =?UTF-8?q?deps:=20brace-expansion=201.1.18=20=E2=86=92=20?= =?UTF-8?q?1.1.21=20(GHSA-q2hr-2g5m-vwhr=20and=20two=20related=20DoS=20adv?= =?UTF-8?q?isories)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit npm audit --omit=dev started failing every PR: brace-expansion <=1.1.20 (via @eslint/eslintrc → minimatch 3) has three high-severity DoS advisories. Lockfile-only patch bump; nothing else changes. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 41e1b7b77..0b5ce5a36 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5026,9 +5026,9 @@ "license": "MIT" }, "node_modules/brace-expansion": { - "version": "1.1.18", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", - "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "version": "1.1.21", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz", + "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==", "license": "MIT", "dependencies": { "balanced-match": "^1.0.0", -- 2.47.3