From 85aaaecf53b348e42996213b9a9c05888b23174e Mon Sep 17 00:00:00 2001 From: Shinrai Date: Sun, 4 Oct 2026 01:46:31 -0700 Subject: [PATCH] deps: bump brace-expansion from 5.0.9 to 5.0.12 Re-applies the security bump from #349. It merged into hotfixes, but its release PR #353 was closed unmerged and hotfixes has since been reset, so master still ships 5.0.9 (Dependabot alert #4). Dev-only, via eslint > minimatch. --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 494cbcdc..8aadf7d5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -469,9 +469,9 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.9", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", - "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", + "version": "5.0.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz", + "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==", "dev": true, "license": "MIT", "dependencies": {