(fix): Bad react native build from forced package upgrades

Author: markharding

pnpm-lock.yaml

@@ -18,9 +18,13 @@ overrides:
   '@babel/plugin-transform-modules-systemjs@>=7.12.0 <=7.29.3': '>=7.29.4'
   '@xmldom/xmldom@<0.8.12': '>=0.8.12'
   '@xmldom/xmldom@<0.8.13': '>=0.8.13'
-  brace-expansion@<1.1.13: '>=1.1.13'
-  brace-expansion@>=2.0.0 <2.0.3: '>=2.0.3'
-  brace-expansion@>=4.0.0 <5.0.5: '>=5.0.5'
+  # Keep brace-expansion upgrades inside the original major: v2 is a
+  # CJS function export, v5 is ESM with a `default` named export. An
+  # unbounded `>=` override lets pnpm resolve `^2.0.2` to 5.x and breaks
+  # any CJS consumer (e.g. minimatch@9 compiled with esModuleInterop).
+  brace-expansion@<1.1.13: '>=1.1.13 <2.0.0'
+  brace-expansion@>=2.0.0 <2.0.3: '>=2.0.3 <3.0.0'
+  brace-expansion@>=4.0.0 <5.0.5: '>=5.0.5 <6.0.0'
   fast-uri@<=3.1.0: '>=3.1.1'
   fast-uri@<=3.1.1: '>=3.1.2'
   flatted@<=3.4.1: '>=3.4.2'