From d0a4f1ead9652667580319e1c83f31baea675060 Mon Sep 17 00:00:00 2001 From: Anso Date: Fri, 24 Jul 2026 21:36:29 -0400 Subject: [PATCH] fix: bump brace-expansion override to 5.0.8 to clear high-severity audit (#1702) A new advisory flags brace-expansion <=5.0.7 (GHSA-mh99-v99m-4gvg); the existing override pin resolved to exactly that version in both lockfiles. --- backend/package-lock.json | 8 ++++---- backend/package.json | 2 +- frontend/package-lock.json | 8 ++++---- frontend/package.json | 2 +- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/backend/package-lock.json b/backend/package-lock.json index 756d7fa9..7cc65f43 100644 --- a/backend/package-lock.json +++ b/backend/package-lock.json @@ -2490,16 +2490,16 @@ "optional": true }, "node_modules/brace-expansion": { - "version": "5.0.7", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz", - "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==", + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz", + "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==", "dev": true, "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" }, "engines": { - "node": "18 || 20 || >=22" + "node": "20 || >=22" } }, "node_modules/braces": { diff --git a/backend/package.json b/backend/package.json index 467de07d..8e11cff2 100644 --- a/backend/package.json +++ b/backend/package.json @@ -30,7 +30,7 @@ "node": ">=26.0.0" }, "overrides": { - "brace-expansion": "^5.0.7", + "brace-expansion": "^5.0.8", "postcss": "^8.5.23" }, "devDependencies": { diff --git a/frontend/package-lock.json b/frontend/package-lock.json index 624f98e4..86c1ddcc 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -4004,16 +4004,16 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.7", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz", - "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==", + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz", + "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==", "dev": true, "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" }, "engines": { - "node": "18 || 20 || >=22" + "node": "20 || >=22" } }, "node_modules/brace-expansion/node_modules/balanced-match": { diff --git a/frontend/package.json b/frontend/package.json index 1c79e79e..c41c755d 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -65,7 +65,7 @@ "overrides": { "dompurify": "^3.4.11", "@babel/core": "^7.29.6", - "brace-expansion": "^5.0.7" + "brace-expansion": "^5.0.8" }, "devDependencies": { "@eslint/js": "^10.0.1",