chore(deps): bump the npm_and_yarn group across 1 directory with 1 update - #1295
chore(deps): bump the npm_and_yarn group across 1 directory with 1 update#1295dependabot[bot] wants to merge 1 commit into
Conversation
There was a problem hiding this comment.
LGTM — mechanical lockfile-only dependency bump.
Extended reasoning...
Overview
This PR only modifies package-lock.json, bumping the transitive dependency brace-expansion (a sub-dependency of @fastify/otel and other packages) from 5.0.8 to 5.0.9 and from 2.1.2 to 2.1.4. No application source files are touched.
Security risks
None identified. This is a patch-level bump of a transitive dependency used for glob/brace pattern parsing. The changes are limited to test coverage and documentation fixes upstream per the changelog; there is no indication of a security advisory driving this bump, and the integrity hashes in the lockfile are updated consistently with the new versions.
Level of scrutiny
Minimal scrutiny is warranted. This is an auto-generated Dependabot lockfile-only PR with no logic changes, no new files, and no risk of behavioral regression in the storage service itself.
Other factors
No prior reviews exist on this PR. The change is small, mechanical, and matches the standard Dependabot pattern seen in other recent merged PRs in this repo history (e.g. the @fastify/static bump).
Coverage Report for CI Build 30853908022Coverage decreased (-0.1%) to 80.395%Details
Uncovered ChangesNo uncovered changes found. Coverage Regressions19 previously-covered lines in 2 files lost coverage.
Coverage Stats💛 - Coveralls |
…date Bumps the npm_and_yarn group with 1 update in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion). Updates `brace-expansion` from 5.0.8 to 5.0.9 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v5.0.8...v5.0.9) Updates `brace-expansion` from 2.1.2 to 2.1.4 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v5.0.8...v5.0.9) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 2.1.4 dependency-type: indirect - dependency-name: brace-expansion dependency-version: 5.0.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
4922c52 to
d56e86c
Compare
Bumps the npm_and_yarn group with 1 update in the / directory: brace-expansion.
Updates
brace-expansionfrom 5.0.8 to 5.0.9Commits
fbcf8ec5.0.9f6f3939test: cover dropping empties when only some prefixes are empty688a99eMerge commit from forkc66e5f9docs: make the maxLength example produce a non-empty result (#137)473d3e9Bump linkify-it from 5.0.1 to 5.0.2 (#128)Updates
brace-expansionfrom 2.1.2 to 2.1.4Commits
fbcf8ec5.0.9f6f3939test: cover dropping empties when only some prefixes are empty688a99eMerge commit from forkc66e5f9docs: make the maxLength example produce a non-empty result (#137)473d3e9Bump linkify-it from 5.0.1 to 5.0.2 (#128)