Skip to content

Bump brace-expansion from 1.1.18 to 1.1.21 - #1032

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/brace-expansion-1.1.21
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/brace-expansion-1.1.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps brace-expansion from 1.1.18 to 1.1.21.

Commits

@dependabot dependabot Bot added dependencies Dependency updates desktop Desktop app and build tooling labels Sep 30, 2026

@sridharkalaibala sridharkalaibala left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the brace-expansion security update. The change is scoped to the generated lockfile, whitespace checks pass, and all required CI and CodeQL checks are green.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/brace-expansion-1.1.21 branch from e3aad13 to 1d68999 Compare September 30, 2026 11:20

@sridharkalaibala sridharkalaibala left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-reviewed the refreshed brace-expansion security update. The lockfile change is limited to the intended dependency update and all required checks are green.

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.18 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.18...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/brace-expansion-1.1.21 branch from 1d68999 to 066059f Compare September 30, 2026 15:06

@sridharkalaibala sridharkalaibala left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The refreshed brace-expansion lockfile update is limited in scope, but its current head is behind develop and the Desktop job fails tests that pass on current develop. Please refresh onto current develop and rerun CI before approval.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates desktop Desktop app and build tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant