Skip to content

chore(deps): bump brace-expansion to resolve security alert - #1070

Merged
B4nan merged 1 commit into
masterfrom
chore/security-deps-bump-4
Jul 30, 2026
Merged

chore(deps): bump brace-expansion to resolve security alert#1070
B4nan merged 1 commit into
masterfrom
chore/security-deps-bump-4

Conversation

@B4nan

@B4nan B4nan commented Jul 29, 2026

Copy link
Copy Markdown
Member

Bumps the vulnerable brace-expansion transitive dependency in website/pnpm-lock.yaml to resolve a high-severity Dependabot alert.

  • brace-expansion 2.1.2 → 2.1.3 (high)

The 1.x (1.1.16) and 5.x (5.0.8) lines were already at patched versions.

🤖 Generated with Claude Code

@B4nan B4nan added the adhoc Ad-hoc unplanned task added during the sprint. label Jul 29, 2026
@B4nan
B4nan requested a review from barjin July 29, 2026 16:31
@github-actions github-actions Bot added this to the 146th sprint - Tooling team milestone Jul 29, 2026
@github-actions github-actions Bot added the t-tooling Issues with this label are in the ownership of the tooling team. label Jul 29, 2026
@codecov

codecov Bot commented Jul 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.92%. Comparing base (67445ba) to head (bb74c31).
⚠️ Report is 5 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #1070      +/-   ##
==========================================
+ Coverage   91.83%   91.92%   +0.09%     
==========================================
  Files          51       51              
  Lines        3232     3232              
==========================================
+ Hits         2968     2971       +3     
+ Misses        264      261       -3     
Flag Coverage Δ
e2e 35.33% <ø> (ø)
integration 57.11% <ø> (+0.03%) ⬆️
unit 83.26% <ø> (+0.06%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@B4nan
B4nan merged commit 212d978 into master Jul 30, 2026
31 checks passed
@B4nan
B4nan deleted the chore/security-deps-bump-4 branch July 30, 2026 08:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

adhoc Ad-hoc unplanned task added during the sprint. t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants