Skip to content

fix(fe): fixed brace-expansion vulnerability - #2330

Merged
mamartinezmejia merged 3 commits into
mainfrom
fix/fe/fix-brace-expansion-B
Jul 11, 2026
Merged

fix(fe): fixed brace-expansion vulnerability#2330
mamartinezmejia merged 3 commits into
mainfrom
fix/fe/fix-brace-expansion-B

Conversation

@mamartinezmejia

@mamartinezmejia mamartinezmejia commented Jul 10, 2026

Copy link
Copy Markdown
Collaborator

Thanks for the PR!

Deployments, as required, will be available below:
Any successful deployments (not always required) will be available here

Please create PRs in draft mode. Mark as ready to enable:

After merge, new images are deployed in:

Copilot AI review requested due to automatic review settings July 10, 2026 22:51
@github-actions

Copy link
Copy Markdown
Contributor

There is no coverage information present for the Files changed

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the frontend’s dependency overrides/lockfile to address a reported brace-expansion vulnerability by bumping the resolved versions used across the dependency tree.

Changes:

  • Updated package.json overrides to require patched brace-expansion versions for the affected major ranges.
  • Regenerated/updated package-lock.json so nested brace-expansion installations resolve to the patched versions (1.1.16, 2.1.2, 5.0.7).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
frontend/package.json Adjusts overrides entries to enforce patched brace-expansion versions.
frontend/package-lock.json Updates resolved brace-expansion package entries (and integrity/resolved URLs) to match the overrides.
Files not reviewed (1)
  • frontend/package-lock.json: Generated file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@mamartinezmejia
mamartinezmejia merged commit 505576c into main Jul 11, 2026
60 of 69 checks passed
@mamartinezmejia
mamartinezmejia deleted the fix/fe/fix-brace-expansion-B branch July 11, 2026 01:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants