GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump brace-expansion from 1.1.12 to 1.1.13 by dependabot[bot] · Pull Request #3780 · github/codeql-action

Conversation

dependabot Bot commented on behalf of github Mar 27, 2026

Copy link

Copy Markdown

Contributor

Bumps brace-expansion from 1.1.12 to 1.1.13.

Commits

6c353ca 1.1.13
7fd684f Backport fix for GHSA-f886-m6hf-6m8v (#95)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump brace-expansion from 1.1.12 to 1.1.13

f13c600

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label

Mar 27, 2026

dependabot Bot requested a review from a team as a code owner

March 27, 2026 13:58

dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label

Mar 27, 2026

github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels

Mar 27, 2026


          Rebuild

999119b

github-actions Bot commented Mar 27, 2026

Copy link

Copy Markdown

Contributor

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

github-actions Bot marked this pull request as draft

March 27, 2026 14:01

henrymercer marked this pull request as ready for review

March 27, 2026 14:01

Copilot AI review requested due to automatic review settings

March 27, 2026 14:01

henrymercer approved these changes

Mar 27, 2026

View reviewed changes

Copilot started reviewing on behalf of henrymercer

March 27, 2026 14:02

View session

henrymercer enabled auto-merge

March 27, 2026 14:02

Copilot AI reviewed

Mar 27, 2026

View reviewed changes

Copilot AI left a comment

Copy link

Copy Markdown

Contributor

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s npm lockfile to pull in brace-expansion patch releases (including the 1.1.12 → 1.1.13 security/backport fix), and refreshes generated action bundles under lib/ accordingly.

Changes:

Bump brace-expansion from 1.1.12 to 1.1.13 in package-lock.json.
Refresh transitive brace-expansion 5.x entries to 5.0.5 in the lockfile.
Update generated lib/* bundles to reflect the updated dependency code.

Reviewed changes

Copilot reviewed 12 out of 13 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
package-lock.json	Updates locked `brace-expansion` versions/resolution metadata (incl. `1.1.13` and transitive `5.0.5`).
lib/upload-sarif-action.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/upload-sarif-action-post.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/upload-lib.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/start-proxy-action.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/start-proxy-action-post.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/setup-codeql-action.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/resolve-environment-action.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/init-action.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/init-action-post.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/autobuild-action.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/analyze-action.js	Generated bundle update incorporating new `brace-expansion` behavior.
lib/analyze-action-post.js	Generated bundle update incorporating new `brace-expansion` behavior.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions

henrymercer added this pull request to the merge queue

Mar 27, 2026

github-merge-queue Bot removed this pull request from the merge queue due to failed status checks

Mar 27, 2026

Uh oh!

There was an error while loading. Please reload this page.

henrymercer added this pull request to the merge queue

Mar 27, 2026

Merged via the queue into main with commit fe775da

Mar 27, 2026

221 checks passed

Uh oh!

There was an error while loading. Please reload this page.

henrymercer deleted the dependabot/npm_and_yarn/brace-expansion-1.1.13 branch

March 27, 2026 17:28

This was referenced Apr 15, 2026

Merge main into releases/v4 #3824

Merged

Merge releases/v4 into releases/v3 #3826

Merged

Reviewers

Copilot code review Copilot

Copilot review effort

Applies to this pull request for everyone.Learn more about Copilot code review.

Copilot left review comments

henrymercer

henrymercer approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

size/XS

Should be very easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.