Skip to content

chore(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 - #3544

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/brace-expansion-1.1.21
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/brace-expansion-1.1.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps brace-expansion from 1.1.18 to 1.1.21.

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 3, 2026

@numbers-official numbers-official left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Code Review (Heartbeat Deep Check)

Reviewed the diff: pure package-lock.json bump of transitive brace-expansion across 8 nested node_modules/* chains — 1.1.18 → 1.1.21 (minimatch v3 line) and 5.0.9 → 5.0.12 (minimatch v10 line). All occurrences are under devDependencies (@eslint/*, eslint, eslint-plugin-import, glob, karma, karma-coverage). No source code changes; no production bundle impact.

Findings

  • No regression risks, bugs, or security concerns identified. All GitHub Actions checks (build/android, build/changes, test, lint, dependabot-lockfile-normalize, CodeQL) are green on head c7b6369. mergeStateStatus=CLEAN.

Summary

LGTM from automated review. Safe to merge once a human approves. PR has been open ~32h and is still within the 72h grace window. Note: PR #3541 covers an unrelated prod ip-address bump — reviewed separately; this PR has no overlap.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/brace-expansion-1.1.21 branch 2 times, most recently from a87409e to 4dde60d Compare October 28, 2026 09:54
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.18 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.18...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/brace-expansion-1.1.21 branch from 4dde60d to 7b1259e Compare October 28, 2026 10:29

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants