From 547533a8c6859aaa5c04a1d410bd2f3c9a734ab3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 09:29:43 +0000
Subject: [PATCH] chore(deps): update dependency brace-expansion@>=1.0.0
 <1.1.13 to v5 [security]

---
 pnpm-lock.yaml      | 28 +++++++++-------------------
 pnpm-workspace.yaml |  4 +++-
 2 files changed, 12 insertions(+), 20 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 471e28beb..cb7cd31d2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -16,7 +16,7 @@ overrides:
   defu@<6.1.5: 6.1.7
   devalue@<5.8.1: 5.8.1
   ajv@>=8.0.0 <8.18.0: 8.20.0
-  brace-expansion@>=1.0.0 <1.1.13: 1.1.16
+  brace-expansion@>=1.0.0 <1.1.13: 5.0.7
   js-yaml@>=4.0.0 <=4.1.1: 4.3.0
   postcss@>=8.0.0 <8.5.10: 8.5.20
   smol-toml@>=1.0.0 <1.6.1: 1.7.0
@@ -1984,9 +1984,6 @@ packages:
       react-native-b4a:
         optional: true
 
-  balanced-match@1.0.2:
-    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
-
   balanced-match@4.0.4:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
     engines: {node: 18 || 20 || >=22}
@@ -2005,13 +2002,14 @@ packages:
   bindings@1.5.0:
     resolution: {integrity: sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==}
 
-  brace-expansion@1.1.16:
-    resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==}
-
   brace-expansion@5.0.6:
     resolution: {integrity: sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==}
     engines: {node: 18 || 20 || >=22}
 
+  brace-expansion@5.0.7:
+    resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
+    engines: {node: 18 || 20 || >=22}
+
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
     engines: {node: '>=8'}
@@ -2074,9 +2072,6 @@ packages:
   commander@2.20.3:
     resolution: {integrity: sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==}
 
-  concat-map@0.0.1:
-    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
-
   confbox@0.2.2:
     resolution: {integrity: sha512-1NB+BKqhtNipMsov4xI/NnhCKp9XG9NamYp5PVm9klAT0fsrNPjaFICsCFhNhwZJKNh7zB/3q8qXz0E9oaMNtQ==}
 
@@ -5659,8 +5654,6 @@ snapshots:
 
   b4a@1.8.1: {}
 
-  balanced-match@1.0.2: {}
-
   balanced-match@4.0.4: {}
 
   bare-events@2.9.1: {}
@@ -5673,12 +5666,11 @@ snapshots:
     dependencies:
       file-uri-to-path: 1.0.0
 
-  brace-expansion@1.1.16:
+  brace-expansion@5.0.6:
     dependencies:
-      balanced-match: 1.0.2
-      concat-map: 0.0.1
+      balanced-match: 4.0.4
 
-  brace-expansion@5.0.6:
+  brace-expansion@5.0.7:
     dependencies:
       balanced-match: 4.0.4
 
@@ -5741,8 +5733,6 @@ snapshots:
 
   commander@2.20.3: {}
 
-  concat-map@0.0.1: {}
-
   confbox@0.2.2: {}
 
   consola@3.4.2: {}
@@ -6602,7 +6592,7 @@ snapshots:
 
   minimatch@3.1.5:
     dependencies:
-      brace-expansion: 1.1.16
+      brace-expansion: 5.0.7
 
   minipass@7.1.3: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 94a9c628e..04197d705 100755
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -28,6 +28,8 @@ minimumReleaseAgeExclude:
   # Vercel: To use in a CI/CD environment
   - vercel
   - '@vercel/*'
+  # Renovate security update: brace-expansion@5.0.7
+  - brace-expansion@5.0.7
 
 # Prevent transitive dependencies from Git/Tarball sources (enhanced security)
 blockExoticSubdeps: true
@@ -48,7 +50,7 @@ overrides:
   'devalue@<5.8.1': '5.8.1'
   # moderate
   'ajv@>=8.0.0 <8.18.0': '8.20.0'
-  'brace-expansion@>=1.0.0 <1.1.13': '1.1.16'
+  'brace-expansion@>=1.0.0 <1.1.13': '5.0.7'
   'js-yaml@>=4.0.0 <=4.1.1': '4.3.0'
   'postcss@>=8.0.0 <8.5.10': '8.5.20'
   'smol-toml@>=1.0.0 <1.6.1': '1.7.0'