fix(coding-agent): pin brace-expansion 5.0.12

minimatch 10.2.6 (latest) still allows brace-expansion ^5.0.8, so pin the
patched version directly to keep the shrinkwrap off vulnerable releases.

closes #10288
This commit is contained in:
Armin Ronacher 2026-10-02 10:40:58 +02:00
parent 28eaccb8e8
commit 0495646a83
5 changed files with 17 additions and 9 deletions

View file

@ -56,6 +56,7 @@
"@earendil-works/pi-mcp": "^1.0.0",
"@earendil-works/pi-tui": "^1.0.0",
"@silvia-odwyer/photon-node": "0.3.4",
"brace-expansion": "5.0.12",
"chalk": "6.0.0",
"cross-spawn": "7.0.6",
"diff": "8.0.4",