From f663498e8603c12dc70fe23cfe18efa4954c8d4c Mon Sep 17 00:00:00 2001 From: teixeiraagustavo Date: Thu, 23 Jul 2026 19:28:33 -0300 Subject: [PATCH] Bump brace-expansion to fix DoS vulnerability npm audit flagged brace-expansion <5.0.8 for a high-severity DoS (GHSA-f886-m6hf-6m8v, GHSA-jxxr-4gwj-5jf2, GHSA-3jxr-9vmj-r5cp). Co-Authored-By: Claude Sonnet 5 --- package-lock.json | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 955fc2e2..2326a47f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "opensquad", - "version": "0.1.11", + "version": "0.1.15", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "opensquad", - "version": "0.1.11", + "version": "0.1.15", "license": "MIT", "dependencies": { "@inquirer/checkbox": "^5.1.0", @@ -360,7 +360,6 @@ "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==", "dev": true, "license": "MIT", - "peer": true, "bin": { "acorn": "bin/acorn" }, @@ -406,16 +405,16 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.4", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.4.tgz", - "integrity": "sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==", + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz", + "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==", "dev": true, "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" }, "engines": { - "node": "18 || 20 || >=22" + "node": "20 || >=22" } }, "node_modules/cli-width": { @@ -486,7 +485,6 @@ "integrity": "sha512-COV33RzXZkqhG9P2rZCFl9ZmJ7WL+gQSCRzE7RhkbclbQPtLAWReL7ysA0Sh4c8Im2U9ynybdR56PV0XcKvqaQ==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2",