Skip to content

chore: bump brace-expansion from 1.1.12 to 1.1.15 in /example#91

Merged
jamesnrokt merged 1 commit into
mainfrom
dependabot/npm_and_yarn/example/brace-expansion-1.1.15
Jun 9, 2026
Merged

chore: bump brace-expansion from 1.1.12 to 1.1.15 in /example#91
jamesnrokt merged 1 commit into
mainfrom
dependabot/npm_and_yarn/example/brace-expansion-1.1.15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 27, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion from 1.1.12 to 1.1.15.

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner May 27, 2026 20:52
@cursor

cursor Bot commented May 27, 2026

Copy link
Copy Markdown

PR Summary

Low Risk
Lockfile-only dependency patch with no runtime or application logic changes.

Overview
Updates example/package-lock.json to resolve brace-expansion from 1.1.12 to 1.1.15 (transitive dependency, e.g. via minimatch). The newer release backports mitigations from the v5 line, including fixes for known brace-expansion security advisories.

No changes to package.json or application source—only the lockfile entry (version, resolved URL, integrity, and MIT license metadata).

Reviewed by Cursor Bugbot for commit 80f98db. Bugbot is set up for automated code reviews on this repo. Configure here.

@jamesnrokt

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.15.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.15)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.15
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/example/brace-expansion-1.1.15 branch from e32fe94 to 80f98db Compare June 5, 2026 18:25
@jamesnrokt
jamesnrokt merged commit 6c08c95 into main Jun 9, 2026
10 of 11 checks passed
@jamesnrokt
jamesnrokt deleted the dependabot/npm_and_yarn/example/brace-expansion-1.1.15 branch June 9, 2026 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant