Skip to content

build(deps): bump brace-expansion from 5.0.6 to 5.0.7#2834

Open
sinchubhat wants to merge 1 commit into
mainfrom
vul87-rps-jul23
Open

build(deps): bump brace-expansion from 5.0.6 to 5.0.7#2834
sinchubhat wants to merge 1 commit into
mainfrom
vul87-rps-jul23

Conversation

@sinchubhat

@sinchubhat sinchubhat commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Fixed the below
https://github.com/device-management-toolkit/rps/security/code-scanning/87
https://github.com/device-management-toolkit/rps/security/dependabot/86
https://github.com/device-management-toolkit/rps/security/dependabot/85

PR Checklist

  • Unit Tests have been added for new changes
  • API tests have been updated if applicable
  • All commented code has been removed
  • If you've added a dependency, you've ensured license is compatible with Apache 2.0 and clearly outlined the added dependency.

What are you changing?

Anything the reviewer should know when reviewing this PR?

If the there are associated PRs in other repositories, please link them here (i.e. device-management-toolkit/repo#365 )

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses security alerts by forcing brace-expansion to a patched version via npm’s overrides, updating the resolved dependency tree in the lockfile.

Changes:

  • Added an npm overrides entry to pin brace-expansion to 5.0.7.
  • Updated package-lock.json to resolve brace-expansion to 5.0.7 (and adjust nested dependencies accordingly).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
package.json Adds an overrides pin for brace-expansion to remediate dependency alerts.
package-lock.json Updates the lockfile to reflect the new resolved brace-expansion version and dependency layout.

Comment thread package.json

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.

@sinchubhat
sinchubhat marked this pull request as ready for review July 23, 2026 04:10
@sinchubhat sinchubhat self-assigned this Jul 23, 2026
@sinchubhat sinchubhat moved this to In Review in Sprint Planning Jul 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: In Review

Development

Successfully merging this pull request may close these issues.

2 participants