Skip to content

Update brace-expansion to 1.1.18 - #1754

Merged
gcatanese merged 1 commit into
mainfrom
fix-brace-expansion-vulnerabilities
Aug 24, 2026
Merged

gcatanese merged 1 commit into
mainfrom
fix-brace-expansion-vulnerabilities

Conversation

@gcatanese

Copy link
Copy Markdown
Contributor

Description
Updates the transitive brace-expansion dependency from 1.1.12 to 1.1.18 in package-lock.json, resolving the related Dependabot alerts.

Tested scenarios

  • npm ci
  • npm run build
  • npm run lint
  • npm test -- --runInBand
  • npm audit --json confirms brace-expansion is no longer reported; unrelated existing advisories remain

Fixed issues:

@gcatanese
gcatanese requested a review from a team as a code owner August 21, 2026 11:38
@gcatanese gcatanese added the security Pull requests that address a security vulnerability label Aug 21, 2026
@gcatanese
gcatanese enabled auto-merge August 21, 2026 11:38

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the brace-expansion dependency in package-lock.json from version 1.1.12 to 1.1.18. There are no review comments, and I have no feedback to provide.

@gcatanese
gcatanese added this pull request to the merge queue Aug 24, 2026
Merged via the queue into main with commit 57c262a Aug 24, 2026
4 checks passed
@gcatanese
gcatanese deleted the fix-brace-expansion-vulnerabilities branch August 24, 2026 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security Pull requests that address a security vulnerability

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants