Skip to content

[pull] main from aws-amplify:main - #678

Merged
pull[bot] merged 2 commits into
MLH-Fellowship:mainfrom
aws-amplify:main
Jul 27, 2026
Merged

[pull] main from aws-amplify:main#678
pull[bot] merged 2 commits into
MLH-Fellowship:mainfrom
aws-amplify:main

Conversation

@pull

@pull pull Bot commented Jul 27, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

bobbor and others added 2 commits July 27, 2026 11:49
chore: bump transitive brace-expansion to patched versions (closes dependabot alerts 269, 270)

Lockfile-only refresh of transitive dev dependency brace-expansion:
- brace-expansion@^2.0.1/^2.0.2: 2.0.2 -> 2.1.2 (alert #270, CVE-2026-13149 / GHSA-3jxr-9vmj-r5cp)
- brace-expansion@^1.1.7: 1.1.12 -> 1.1.16 (sibling alert #269)

Both caret ranges already permit the patched versions; no package.json
or resolutions changes needed.

https://github.com/aws-amplify/amplify-js/security/dependabot/270
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.2...v3.1.4)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Jul 27, 2026
@pull pull Bot added the ⤵️ pull label Jul 27, 2026
@pull
pull Bot merged commit dd5a429 into MLH-Fellowship:main Jul 27, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant