From 37daf597c90676eb78930c6fed7fb88f9ea2dcf7 Mon Sep 17 00:00:00 2001 From: Nic Date: Mon, 17 Aug 2026 08:43:12 +0100 Subject: [PATCH] chore(deps): bump brace-expansion for GHSA-mh99-v99m-4gvg / GHSA-rgw5-rvv9-x895 Dev-dependency tree only, so CI's --omit=dev audit never tripped; bumped so the stricter local `make security` (which audits dev deps too) runs clean again. Co-Authored-By: Claude Fable 5 --- web/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index 51608ad..0aaddab 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -1418,9 +1418,9 @@ "license": "MIT" }, "node_modules/brace-expansion": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz", - "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==", + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", "dev": true, "license": "MIT", "dependencies": {