This is an automated email from the ASF dual-hosted git repository.
thiagoelg pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-tools.git
The following commit(s) were added to refs/heads/main by this push:
new 5bee055f95a [NO-ISSUE] upgrade brace-expansion from 1.1.18 to 1.1.21
and from 2.1.4 to 2.1.7 (#4048)
5bee055f95a is described below
commit 5bee055f95a70fd45dc0ea2068b2fae15e85af37
Author: TonyOlaCodes <[email protected]>
AuthorDate: Wed Nov 4 21:20:56 2026 +0000
[NO-ISSUE] upgrade brace-expansion from 1.1.18 to 1.1.21 and from 2.1.4 to
2.1.7 (#4048)
Co-authored-by: Tony Olajide <[email protected]>
---
pnpm-lock.yaml | 20 ++++++++++----------
pnpm-workspace.yaml | 4 ++--
2 files changed, 12 insertions(+), 12 deletions(-)
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b9026aa1d75..6a24a93131c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,8 +9,8 @@ overrides:
cross-spawn: ^7.0.6
d3-color: 3.1.0
graphql: 14.3.1
- minimatch@^3>brace-expansion: 1.1.18
- minimatch@^5>brace-expansion: 2.1.4
+ minimatch@^3>brace-expansion: 1.1.21
+ minimatch@^5>brace-expansion: 2.1.7
openapi-types: 7.2.3
qs: ^6.16.0
path-to-regexp@^0: 0.1.13
@@ -14994,11 +14994,11 @@ packages:
resolution: {integrity:
sha512-z0M+byMThzQmD9NILRniCUXYsYpjwnlO8N5uCFaCqIOpqRsJCrQL9NK3JsD67CN5a08nF5oIL2bD6loTdHOuKw==}
engines: {node: '>= 5.10.0'}
- [email protected]:
- resolution: {integrity:
sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==}
+ [email protected]:
+ resolution: {integrity:
sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==}
- [email protected]:
- resolution: {integrity:
sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==}
+ [email protected]:
+ resolution: {integrity:
sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==}
[email protected]:
resolution: {integrity:
sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
@@ -32316,12 +32316,12 @@ snapshots:
dependencies:
big-integer: 1.6.52
- [email protected]:
+ [email protected]:
dependencies:
balanced-match: 1.0.2
concat-map: 0.0.1
- [email protected]:
+ [email protected]:
dependencies:
balanced-match: 1.0.2
@@ -37727,11 +37727,11 @@ snapshots:
[email protected]:
dependencies:
- brace-expansion: 1.1.18
+ brace-expansion: 1.1.21
[email protected]:
dependencies:
- brace-expansion: 2.1.4
+ brace-expansion: 2.1.7
[email protected]:
dependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index d4c46800da5..a46f4e1ab98 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -10,8 +10,8 @@ overrides:
"graphql": "14.3.1"
# CVE-2026-33750: Fix security vulnerability in brace-expansion
# Overriding transitive dependency until minimatch updates to patched
brace-expansion version
- "minimatch@^3>brace-expansion": "1.1.18"
- "minimatch@^5>brace-expansion": "2.1.4"
+ "minimatch@^3>brace-expansion": "1.1.21"
+ "minimatch@^5>brace-expansion": "2.1.7"
"openapi-types": "7.2.3"
# CVE-2026-82417, CVE-2026-82562: TypeError in qs.stringify on a
non-callable constructor.isBuffer
# Overriding transitive dependency until all parents update to patched qs
version
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
