chore(deps): update dependency brace-expansion@>=2 <3 to v5 - #793
chore(deps): update dependency brace-expansion@>=2 <3 to v5#793renovate[bot] wants to merge 1 commit into
Conversation
|
|
View your CI Pipeline Execution ↗ for commit b8ef693
💡 Dealing with memory or CPU issues? See memory and CPU details with the resource usage add-on ↗. ☁️ Nx Cloud last updated this comment at |
![nx-cloud[bot]](https://avatars.githubusercontent.com/in/80458?s=60&v=4){kind=small}
There was a problem hiding this comment.
Nx Cloud is proposing a fix for your failed CI:
We updated the brace-expansion@>=2 <3 pnpm override from ~5.0.0 back to ~2.1.4 to fix the TypeError: (0 , brace_expansion_1.default) is not a function crash that surfaced in @forgerock/journey-client:test. This change ensures CJS consumers like minimatch@9.0.9 receive a compatible 2.x release rather than the ESM-only v5, while still carrying the ReDoS security patch introduced in 2.1.4.
Tip
✅ We verified this fix by re-running @forgerock/journey-client:test.
Suggested Fix changes
diff --git a/package.json b/package.json
index 72cc3a1..6293c49 100644
--- a/package.json
+++ b/package.json
@@ -139,7 +139,7 @@
"qs": "^6.16.0",
"@opentelemetry/core": "^2.8.0",
"brace-expansion@<2": "~1.1.15",
- "brace-expansion@>=2 <3": "~5.0.0",
+ "brace-expansion@>=2 <3": "~2.1.1",
"brace-expansion@>=3 <4": "~3.0.2",
"brace-expansion@>=4": "~5.0.8",
"ws": "^8.21.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 79478e1..4dcaa7b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -75,7 +75,7 @@ overrides:
qs: ^6.16.0
'@opentelemetry/core': ^2.8.0
brace-expansion@<2: ~1.1.15
- brace-expansion@>=2 <3: ~5.0.0
+ brace-expansion@>=2 <3: ~2.1.1
brace-expansion@>=3 <4: ~3.0.2
brace-expansion@>=4: ~5.0.8
ws: ^8.21.1
@@ -4056,6 +4056,9 @@ packages:
brace-expansion@1.1.15:
resolution: {integrity: sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==}
+ brace-expansion@2.1.1:
+ resolution: {integrity: sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==}
+
brace-expansion@5.0.9:
resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
engines: {node: 20 || >=22}
@@ -12616,6 +12619,10 @@ snapshots:
balanced-match: 1.0.2
concat-map: 0.0.1
+ brace-expansion@2.1.1:
+ dependencies:
+ balanced-match: 1.0.2
+
brace-expansion@5.0.9:
dependencies:
balanced-match: 4.0.4
@@ -15374,15 +15381,15 @@ snapshots:
minimatch@7.4.6:
dependencies:
- brace-expansion: 5.0.9
+ brace-expansion: 2.1.1
minimatch@7.4.9:
dependencies:
- brace-expansion: 5.0.9
+ brace-expansion: 2.1.1
minimatch@9.0.9:
dependencies:
- brace-expansion: 5.0.9
+ brace-expansion: 2.1.1
minimist@1.2.7: {}
Or Apply changes locally with:
npx nx-cloud apply-locally yZd5-9wCN
Apply fix locally with your editor ↗ View interactive diff ↗
🎓 Learn more about Self-Healing CI on nx.dev
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
1 participant
This PR contains the following updates:
~2.1.1→~5.0.0](https://renovatebot.com/diffs/npm/brace-expansion@>=2 <3/2.1.4/5.0.9)Release Notes
juliangruber/brace-expansion (brace-expansion@>=2 <3)
v5.0.9Compare Source
v5.0.8Compare Source
v5.0.7Compare Source
v5.0.6Compare Source
v5.0.5Compare Source
v5.0.4Compare Source
v5.0.3Compare Source
v5.0.2Compare Source
v4.0.1Compare Source
5a5cc170b6a978v4.0.0Compare Source
278132bdd72a59tea.yaml70e4c1bAs a precaution to not risk breaking anything with
278132b, this is a new semver major releasev3.0.6Compare Source
v3.0.5Compare Source
v3.0.4Compare Source
v3.0.3Compare Source
v3.0.2Compare Source
v3.0.1Compare Source
3059c078229e6f15f9b3cv3.0.0Compare Source
c0360e868c0e379e781e93494c4ddd5a4cb6dad209teste3dd8aed23ede91eb3fa41e7c9cd252053761a94f1dc741cf8ee56265c8756a05978a7Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.