Skip to content

chore(deps): bump brace-expansion to resolve security alert - #2101

Merged
B4nan merged 1 commit into
masterfrom
chore/security-deps-bump-4
Jul 30, 2026
Merged

chore(deps): bump brace-expansion to resolve security alert#2101
B4nan merged 1 commit into
masterfrom
chore/security-deps-bump-4

Conversation

@B4nan

@B4nan B4nan commented Jul 29, 2026

Copy link
Copy Markdown
Member

Bumps the vulnerable brace-expansion transitive dependency in website/pnpm-lock.yaml to resolve a high-severity Dependabot alert.

  • brace-expansion 2.1.2 → 2.1.3 (high)

The 1.x (1.1.16) and 5.x (5.0.8) lines were already at patched versions.

🤖 Generated with Claude Code

@B4nan B4nan added the adhoc Ad-hoc unplanned task added during the sprint. label Jul 29, 2026
@B4nan
B4nan requested a review from barjin July 29, 2026 16:30
@github-actions github-actions Bot added this to the 146th sprint - Tooling team milestone Jul 29, 2026
@github-actions github-actions Bot added the t-tooling Issues with this label are in the ownership of the tooling team. label Jul 29, 2026
@codecov

codecov Bot commented Jul 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.57%. Comparing base (fae204b) to head (d5635ed).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #2101   +/-   ##
=======================================
  Coverage   93.57%   93.57%           
=======================================
  Files         181      181           
  Lines       12590    12590           
=======================================
  Hits        11781    11781           
  Misses        809      809           
Flag Coverage Δ
unit 93.57% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@B4nan
B4nan merged commit acbb5a0 into master Jul 30, 2026
36 checks passed
@B4nan
B4nan deleted the chore/security-deps-bump-4 branch July 30, 2026 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

adhoc Ad-hoc unplanned task added during the sprint. t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants