Skip to content

chore(deps): bump brace-expansion from 1.1.11 to 1.1.14 in /workspaces/bitrise - #1132

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspaces/bitrise/brace-expansion-5.0.6
Open

chore(deps): bump brace-expansion from 1.1.11 to 1.1.14 in /workspaces/bitrise#1132
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspaces/bitrise/brace-expansion-5.0.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown

Bumps brace-expansion from 1.1.11 to 1.1.14.

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 18, 2026
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.14.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.14)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump brace-expansion from 1.1.11 to 5.0.6 in /workspaces/bitrise chore(deps): bump brace-expansion from 1.1.11 to 1.1.14 in /workspaces/bitrise May 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/workspaces/bitrise/brace-expansion-5.0.6 branch from 4a332ca to 32552e3 Compare May 23, 2026 02:06
@github-actions

Copy link
Copy Markdown

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

@github-actions github-actions Bot added the stale label Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants