GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Update dependency brace-expansion to v5 by renovate[bot] · Pull Request #1392 · sourcegraph/src-cli

Conversation

renovate Bot commented Nov 3, 2026

Copy link

Copy Markdown

Contributor

This PR contains the following updates:

Package	Change	Age	Confidence
brace-expansion	`^2.0.2` → `^5.0.12`

Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.

Release Notes

juliangruber/brace-expansion (brace-expansion)

`v4.0.1`

Compare Source

fmt 5a5cc17
Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

`v4.0.0`

Compare Source

feat: use string replaces instead of splits (#64) 278132b
fmt dd72a59
add tea.yaml 70e4c1b

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

`v3.0.1`

Compare Source

pkg: publish on tag 3.x 3059c07
fmt 8229e6f
Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

`v3.0.0`

Compare Source

Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
added jsdoc (#55) 68c0e37
node 16 is EOL 9e781e9
add standard 3494c4d
use const and let (#57) dd5a4cb
docs 6dad209
remove test e3dd8ae
ci: update node versions d23ede9
docs: add @lanodan to contributors 1eb3fa4
docs 1e7c9cd
switch from tape to test module (#60) 2520537
Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
docs: add back ci badge 8ee5626
Add github actions, remove travis. Closes #52 (#53) 5c8756a
CI: Drop unused sudo: false Travis directive (#50) 05978a7

`v2.1.1`

Compare Source

Backport v5.0.6 change to v2 (#109) c3a817c

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions

renovate Bot added bot npm labels

Nov 3, 2026

renovate Bot enabled auto-merge (squash)

November 3, 2026 22:15

github-actions Bot commented Nov 3, 2026 •

edited

Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link

Copy Markdown

Open the Diff Tour for this PR in Sourcegraph

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

renovate Bot force-pushed the renovate/brace-expansion-5.x branch from 411c4e7 to 78b5a00 Compare

November 3, 2026 22:33


          Update dependency brace-expansion to v5

6b3f684

renovate Bot force-pushed the renovate/brace-expansion-5.x branch from 78b5a00 to 6b3f684 Compare

November 3, 2026 23:05

marcleblanc2 mentioned this pull request

Nov 3, 2026

npm: drop unused dependencies #1397

Merged

marcleblanc2 added a commit that referenced this pull request

Nov 4, 2026


          npm: drop stale overrides and the unused @types/tar devDependency

94f09e2

The overrides block was added in #1218 and #1219 to force patched
versions of cross-spawn, glob, and brace-expansion, which tar 7.1
pulled in through rimraf. tar 7.5 (#1319, #1357) dropped rimraf, so
none of those packages are in the dependency tree anymore and the
overrides have no effect. Renovate still reads them as declared
dependencies and keeps opening PRs to bump them (#1389, #1390, #1392,
#1393).

@types/tar is unused: npm-distribution has no TypeScript, and tar 7
ships its own types (#1391 would have replaced it with a deprecated
stub).

Co-authored-by: Amp <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a1a37e-8603-775d-bc85-c5677817f7a8

marcleblanc2 closed this

Nov 4, 2026

auto-merge was automatically disabled

November 4, 2026 04:08

Pull request was closed

renovate Bot commented Nov 4, 2026

Copy link

Copy Markdown

Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 5.x releases. But if you manually upgrade to 5.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

renovate Bot deleted the renovate/brace-expansion-5.x branch

November 4, 2026 04:08

marcleblanc2 added a commit that referenced this pull request

Nov 10, 2026


          npm: drop stale overrides and the unused @types/tar devDependency

92846e0

The overrides block was added in #1218 and #1219 to force patched
versions of cross-spawn, glob, and brace-expansion, which tar 7.1
pulled in through rimraf. tar 7.5 (#1319, #1357) dropped rimraf, so
none of those packages are in the dependency tree anymore and the
overrides have no effect. Renovate still reads them as declared
dependencies and keeps opening PRs to bump them (#1389, #1390, #1392,
#1393).

@types/tar is unused: npm-distribution has no TypeScript, and tar 7
ships its own types (#1391 would have replaced it with a deprecated
stub).

Co-authored-by: Amp <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a1a37e-8603-775d-bc85-c5677817f7a8

marcleblanc2 added a commit that referenced this pull request

Nov 10, 2026


          npm: drop stale overrides and the unused @types/tar devDependency (#1397

9b493d6

)

The overrides block was added in #1218 and #1219 to force patched
versions of cross-spawn, glob, and brace-expansion, which tar 7.1
pulled in through rimraf. tar 7.5 (#1319, #1357) dropped rimraf, so
none of those packages are in the dependency tree anymore and the
overrides have no effect. Renovate still reads them as declared
dependencies and keeps opening PRs to bump them (#1389, #1390, #1392,
#1393).

@types/tar is unused: npm-distribution has no TypeScript, and tar 7
ships its own types (#1391 would have replaced it with a deprecated
stub).


Amp-Thread-ID: https://ampcode.com/threads/T-01a1a37e-8603-775d-bc85-c5677817f7a8

Co-authored-by: Amp <[email protected]>

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

bot npm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

1 participant

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.

Conversation

renovate Bot commented Nov 3, 2026

Release Notes

Configuration

Uh oh!

github-actions Bot commented Nov 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented Nov 4, 2026

Renovate Ignore Notification

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Nov 3, 2026 •

edited

Loading

Uh oh!

There was an error while loading. Please reload this page.