Skip to content

ACT-3680: remediate brace-expansion vulnerabilities#115

Merged
robertvangor merged 1 commit into
mainfrom
ACT-3680/remediate-brace-expansion-high
Jul 23, 2026
Merged

ACT-3680: remediate brace-expansion vulnerabilities#115
robertvangor merged 1 commit into
mainfrom
ACT-3680/remediate-brace-expansion-high

Conversation

@robertvangor

@robertvangor robertvangor commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

Summary

Validation

  • Node 20, 22, and 24: npm ci, build, lint, and 158 Jest tests
  • Node 20 and 24: coverage (99.39% lines)
  • bounded regression probe for each patched brace-expansion major line
  • npm pack plus clean consumer install and SDK import
  • npm audit: no remaining brace-expansion finding

@robertvangor robertvangor mentioned this pull request Jul 22, 2026
Merged
@robertvangor
robertvangor marked this pull request as ready for review July 23, 2026 07:28
@robertvangor
robertvangor requested a review from a team as a code owner July 23, 2026 07:28
@robertvangor
robertvangor merged commit d0678fc into main Jul 23, 2026
9 checks passed
@robertvangor
robertvangor deleted the ACT-3680/remediate-brace-expansion-high branch July 23, 2026 09:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nurislam03 nurislam03 nurislam03 approved these changes
@axdotl axdotl Awaiting requested review from axdotl axdotl is a code owner automatically assigned from Staffbase/product-actions

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@robertvangor @nurislam03