From 1bc833cac1b31f8703dad6944910b7ee3a6ae1a0 Mon Sep 17 00:00:00 2001 From: Rodolpho Pagani Date: Tue, 7 Jul 2026 08:08:22 -0300 Subject: [PATCH] fix: bump brace-expansion to patch DoS vulnerability npm audit fix resolved GHSA-f886-m6hf-6m8v and GHSA-jxxr-4gwj-5jf2 in the transitive brace-expansion dependency. Co-Authored-By: Claude Sonnet 5 --- package-lock.json | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index 955fc2e2..c803cf7b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "opensquad", - "version": "0.1.11", + "version": "0.1.15", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "opensquad", - "version": "0.1.11", + "version": "0.1.15", "license": "MIT", "dependencies": { "@inquirer/checkbox": "^5.1.0", @@ -360,7 +360,6 @@ "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==", "dev": true, "license": "MIT", - "peer": true, "bin": { "acorn": "bin/acorn" }, @@ -406,9 +405,9 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.4", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.4.tgz", - "integrity": "sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==", + "version": "5.0.7", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz", + "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==", "dev": true, "license": "MIT", "dependencies": { @@ -486,7 +485,6 @@ "integrity": "sha512-COV33RzXZkqhG9P2rZCFl9ZmJ7WL+gQSCRzE7RhkbclbQPtLAWReL7ysA0Sh4c8Im2U9ynybdR56PV0XcKvqaQ==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2",