Skip to content

chore(deps): bump brace-expansion to resolve security alert - #984

Merged
B4nan merged 1 commit into
masterfrom
chore/security-deps-bump-4
Jul 30, 2026
Merged

chore(deps): bump brace-expansion to resolve security alert#984
B4nan merged 1 commit into
masterfrom
chore/security-deps-bump-4

Conversation

@B4nan

@B4nan B4nan commented Jul 29, 2026

Copy link
Copy Markdown
Member

Bumps the vulnerable brace-expansion transitive dependency in website/pnpm-lock.yaml to resolve a high-severity Dependabot alert.

  • brace-expansion 2.1.2 → 2.1.3 (high)

The 1.x (1.1.16) and 5.x (5.0.8) lines were already at patched versions.

🤖 Generated with Claude Code

@B4nan B4nan added the adhoc Ad-hoc unplanned task added during the sprint. label Jul 29, 2026
@B4nan
B4nan requested a review from barjin July 29, 2026 16:32
@github-actions github-actions Bot added this to the 146th sprint - Tooling team milestone Jul 29, 2026
@github-actions github-actions Bot added the t-tooling Issues with this label are in the ownership of the tooling team. label Jul 29, 2026
@codecov

codecov Bot commented Jul 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.62%. Comparing base (b49fb35) to head (4792452).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #984   +/-   ##
=======================================
  Coverage   94.62%   94.62%           
=======================================
  Files          58       58           
  Lines        5248     5248           
=======================================
  Hits         4966     4966           
  Misses        282      282           
Flag Coverage Δ
integration 92.26% <ø> (ø)
unit 83.89% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@B4nan
B4nan merged commit 77c4ea6 into master Jul 30, 2026
30 checks passed
@B4nan
B4nan deleted the chore/security-deps-bump-4 branch July 30, 2026 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

adhoc Ad-hoc unplanned task added during the sprint. t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants