admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(deps): patch HIGH advisories in brace-expansion (pnpm-lock.yaml)
CI (SIAX Cloud) / integration (push) Skipped
Details
CI (SIAX Cloud) / sonar (push) Skipped
Details
masterplan-lock / check (push) Successful in 8s
Details
CI (SIAX Cloud) / sonar (pull_request) Skipped
Details
CI (SIAX Cloud) / security (push) Successful in 20s
Details
masterplan-lock / check (pull_request) Successful in 6s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 28s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 32s
Details
CI (SIAX Cloud) / quality (push) Successful in 50s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 58s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 1m24s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m38s
Details

Browse Source 
Lockfile-only bump of the transitive dev dependency brace-expansion, within
the ranges requested by its parents (minimatch@3 -> ^1.1.7, minimatch@10 ->
^5.x):

  brace-expansion 1.1.16 -> 1.1.21
  brace-expansion 5.0.8  -> 5.0.12

Clears CVE-2026-102276, CVE-2026-102278, CVE-2026-69152 (HIGH, both lines),
CVE-2026-14257 (HIGH, 1.1.x) and CVE-2026-102277 (MEDIUM). Resolves to the same
versions/integrity hashes package-lock.json already pins. package.json is
untouched; no direct dependency changed.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Claude Code
2026-09-30 11:23:48 +02:00
co-authored by Claude Sonnet 5.5
parent 5a165f3478
commit ab051b3bca
1 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pnpm-lock.yaml
Generated
+8 -8
View File
@@ -1891,11 +1891,11 @@ packages:
engines: {node: '>=6.0.0'}
hasBin: true
brace-expansion@1.1.16:
resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==}
brace-expansion@1.1.21:
resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==}
brace-expansion@5.0.8:
resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
brace-expansion@5.0.12:
resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==}
engines: {node: 20 || >=22}
browserslist@4.28.9:
@@ -4747,12 +4747,12 @@ snapshots:
baseline-browser-mapping@2.11.23: {}
brace-expansion@1.1.16:
brace-expansion@1.1.21:
dependencies:
balanced-match: 1.0.2
concat-map: 0.0.1
brace-expansion@5.0.8:
brace-expansion@5.0.12:
dependencies:
balanced-match: 4.0.4
@@ -5338,11 +5338,11 @@ snapshots:
minimatch@10.2.5:
dependencies:
brace-expansion: 5.0.8
brace-expansion: 5.0.12
minimatch@3.1.5:
dependencies:
brace-expansion: 1.1.16
brace-expansion: 1.1.21
minimist@1.2.8: {}