fix(security): raise brace-expansion and undici override floors #127

Merged

maximus merged 1 commit from issue-124-125-brace-expansion-undici-floors into master

2026-10-02 18:14:27 +00:00

Author	SHA1	Message	Date
le king fu	84d04184ae	fix(security): raise brace-expansion and undici override floors brace-expansion: nine new DoS advisories outdate the floors set in #103. Raise the three version-scoped overrides to the patched head of each major (1.1.21, 2.1.7, 5.0.12). undici: raise the @expo/cli scoped override to ^6.28.1 (resolves to 6.29.0). Add smoke checks locking the floors and the minimatch brace/glob behaviour for every installed minimatch major, so a return to a blanket override fails the suite. npm audit: 12 -> 10 entries. The rest is tracked in #123 and #126. Fixes #124 Fixes #125 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-02 14:11:34 -04:00

Author

SHA1

Message

Date

le king fu

84d04184ae

fix(security): raise brace-expansion and undici override floors

brace-expansion: nine new DoS advisories outdate the floors set in #103.
Raise the three version-scoped overrides to the patched head of each
major (1.1.21, 2.1.7, 5.0.12). undici: raise the @expo/cli scoped
override to ^6.28.1 (resolves to 6.29.0).

Add smoke checks locking the floors and the minimatch brace/glob
behaviour for every installed minimatch major, so a return to a blanket
override fails the suite.

npm audit: 12 -> 10 entries. The rest is tracked in #123 and #126.

Fixes #124
Fixes #125

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-02 14:11:34 -04:00