Skip to content

Update brace-expansion to patched versions - #159

Merged
mvirgil merged 1 commit into
mainfrom
codex/security-brace-expansion
Aug 20, 2026
Merged

mvirgil merged 1 commit into
mainfrom
codex/security-brace-expansion

Conversation

@mvirgil

@mvirgil mvirgil commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

Summary

  • refresh package-lock.json using npm's transitive dependency update path
  • update vulnerable brace-expansion release lines to their patched versions
  • resolve GHSA-rgw5-rvv9-x895 / CVE-2026-69152

Validation

  • npm ci
  • npm run build
  • npm run lint
  • npm run test:unit -- --runInBand (13 suites, 63 tests passed)
  • npm audit no longer reports brace-expansion

@mvirgil
mvirgil requested review from a team as code owners August 20, 2026 00:30
@mvirgil
mvirgil force-pushed the codex/security-brace-expansion branch from 0a4b95f to d694d2f Compare August 20, 2026 16:49
@mvirgil
mvirgil merged commit d193c83 into main Aug 20, 2026
2 checks passed
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants