v5.1.4

Dependency security update — transitive devDependency only, no consumer-facing changes:

• brace-expansion → 1.1.21 / 2.1.7

npm audit reports 0 vulnerabilities. See #37.