From 60cf12cdace098994090085db0b16118f4b86c60 Mon Sep 17 00:00:00 2001 From: Jennifer Takagi Date: Thu, 13 Aug 2026 10:07:16 -0400 Subject: [PATCH] chore: tighten stale brace-expansion override - 2026-08-13 Tighten the brace-expansion override from ^5.0.8 to ^5.0.9. The ^5.0.8 caret still admitted the advisory-vulnerable 5.0.8 (GHSA-rgw5-rvv9-x895 covers <5.0.9), so bumping the floor to ^5.0.9 closes that window. npm audit total unchanged (0 before, 0 after). All gates pass (typecheck, biome check, test, build). The react-scanner>picomatch override is left untouched. Co-Authored-By: Claude Opus 4.8 (1M context) --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 4bd8734..a5cb649 100644 --- a/package.json +++ b/package.json @@ -83,6 +83,6 @@ "react-scanner": { "picomatch": "^2.3.2" }, - "brace-expansion": "^5.0.8" + "brace-expansion": "^5.0.9" } }