From e6fb196b7e8e8b3c037b515649ac90c2bbf14b7f Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Thu, 23 Jul 2026 09:38:58 -0400 Subject: [PATCH 1/2] chore: resolve open dependabot security alerts - brace-expansion 2.1.1 -> 2.1.2 (high, CVE-2026-13149, alert #67) --- package.json | 1 + yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index b8886fc..c68060e 100644 --- a/package.json +++ b/package.json @@ -38,6 +38,7 @@ }, "resolutions": { "@babel/core": ">=7.29.6 <8", + "brace-expansion": ">=2.1.2 <3", "js-yaml": ">=3.15.0 <4", "minimatch": "^9.0.7", "tar": ">=7.5.16 <8", diff --git a/yarn.lock b/yarn.lock index 4dd5b69..6078eb7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1400,12 +1400,12 @@ __metadata: languageName: node linkType: hard -"brace-expansion@npm:^2.0.2": - version: 2.1.1 - resolution: "brace-expansion@npm:2.1.1" +"brace-expansion@npm:>=2.1.2 <3": + version: 2.1.2 + resolution: "brace-expansion@npm:2.1.2" dependencies: balanced-match: "npm:^1.0.0" - checksum: 10c0/63b5ddce608b70b50a76817c0526faf8ea67a9180073d88bb402f6bbc22a22da6b1dfac4f65efc53e5faa80222fb7d44bbf2fc638c3f55365975573f671d0ccb + checksum: 10c0/5442ecab84045d21826268bc56c81a6ef4215327ee1f5ee153f67928e93f7a915d130ecec9966623143277fa3cce036ebb50020024bcc4d78853cdd6af9a19f8 languageName: node linkType: hard From 81fb2043b8080faea25e761a706267363396f051 Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Wed, 5 Aug 2026 09:36:45 -0400 Subject: [PATCH 2/2] chore: resolve open dependabot security alerts - ip-address 10.2.0 -> 10.4.0 (high/medium, alerts #69, #70, #71) - brace-expansion 2.1.2 -> 2.1.4 (high, alert #68) --- package.json | 3 ++- yarn.lock | 16 ++++++++-------- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/package.json b/package.json index c68060e..32749dd 100644 --- a/package.json +++ b/package.json @@ -38,7 +38,8 @@ }, "resolutions": { "@babel/core": ">=7.29.6 <8", - "brace-expansion": ">=2.1.2 <3", + "brace-expansion": ">=2.1.3 <3", + "ip-address": ">=10.3.1 <11", "js-yaml": ">=3.15.0 <4", "minimatch": "^9.0.7", "tar": ">=7.5.16 <8", diff --git a/yarn.lock b/yarn.lock index 6078eb7..02717de 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1400,12 +1400,12 @@ __metadata: languageName: node linkType: hard -"brace-expansion@npm:>=2.1.2 <3": - version: 2.1.2 - resolution: "brace-expansion@npm:2.1.2" +"brace-expansion@npm:>=2.1.3 <3": + version: 2.1.4 + resolution: "brace-expansion@npm:2.1.4" dependencies: balanced-match: "npm:^1.0.0" - checksum: 10c0/5442ecab84045d21826268bc56c81a6ef4215327ee1f5ee153f67928e93f7a915d130ecec9966623143277fa3cce036ebb50020024bcc4d78853cdd6af9a19f8 + checksum: 10c0/6c0a0e2573eac1dc565b52b1e1bfbeba39bf1830d106ebbc61ff1eaefcf610e9111cd3baa091addd18e33292135c99e019d3184d966389d85dc958fdcdc1449f languageName: node linkType: hard @@ -2134,10 +2134,10 @@ __metadata: languageName: node linkType: hard -"ip-address@npm:^10.1.1": - version: 10.2.0 - resolution: "ip-address@npm:10.2.0" - checksum: 10c0/5a00aada6e922c9c69dfc800ed5d0fa3348675ebdeed0e1575f503f27ca385b5f534363c9af7ad1daf64c1f1409388cdd3cc2e9b9b0fe1c924a431378d55075a +"ip-address@npm:>=10.3.1 <11": + version: 10.4.0 + resolution: "ip-address@npm:10.4.0" + checksum: 10c0/d7b0bd2624fd861afbae6e49036a9b56f9506eaff7ff38592b7b4492dd5c272b53f5356dc8cc019e318acf29a96c90a3d1af1df761960267d23efa96858270fa languageName: node linkType: hard