Skip to content

Bump brace-expansion from 1.1.16 to 1.1.18 - #191

Open
celiac747 wants to merge 1 commit into
mainfrom
celiac747-bump-brace-expansion-1-1-18
Open

Bump brace-expansion from 1.1.16 to 1.1.18#191
celiac747 wants to merge 1 commit into
mainfrom
celiac747-bump-brace-expansion-1-1-18

Conversation

@celiac747

Copy link
Copy Markdown
Contributor

Summary

Bumps brace-expansion from 1.1.16 to 1.1.18 in the root yarn.lock to address a security vulnerability.

1.1.18 satisfies the existing ^1.1.7 range, so no package.json changes are required.

Changes

  • Updated the "brace-expansion@npm:^1.1.7": entry in yarn.lock:
    • version: 1.1.161.1.18
    • resolution: brace-expansion@npm:1.1.16brace-expansion@npm:1.1.18
    • Regenerated the checksum via yarn install --mode update-lockfile.

Notes

  • The separate "brace-expansion@npm:^2.0.1": entry (resolved to 2.0.1) is a different major line and is intentionally left untouched.
  • Verified with yarn install --immutable (passes; only pre-existing peer-dependency warnings remain).
  • git status shows only yarn.lock changed.

Co-authored-by: Copilot App 223556219+Copilot@users.noreply.github.com

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant