Skip to content

Update brace-expansion to patched compatible releases - #238

Closed
jayhill with Copilot wants to merge 1 commit into
mainfrom
copilot/update-dependencies
Closed

Update brace-expansion to patched compatible releases#238
jayhill with Copilot wants to merge 1 commit into
mainfrom
copilot/update-dependencies

Conversation

Copilot AI commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Resolved transitive brace-expansion CVEs without major-version overrides. Existing dependency ranges now resolve to patched v1 and v2 releases.

  • Lockfile updates

    • brace-expansion@1.1.18 for legacy minimatch consumers.
    • brace-expansion@2.1.4 for current minimatch consumers.
    • Updated frontend, serverless, and shared lockfiles.
  • Compatibility

    • Preserves callable v1/v2 API required by existing transitive consumers.
    • Avoids incompatible brace-expansion@5 override.

Co-authored-by: jayhill <116148+jayhill@users.noreply.github.com>
@jayhill

jayhill commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

@copilot resolve conflicts and force push

@jayhill jayhill closed this Aug 12, 2026
@jayhill
jayhill deleted the copilot/update-dependencies branch August 12, 2026 02:45
Copilot stopped work on behalf of jayhill due to an error August 12, 2026 02:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants