From 97b9f0e413b5e49a9bf7a0eaeed483ee10e0d277 Mon Sep 17 00:00:00 2001
From: Rob Konsdorf <rob@facings.io>
Date: Tue, 18 Aug 2026 22:07:14 -0400
Subject: [PATCH] chore(deps): clear the brace-expansion advisory in the test
 toolchain

brace-expansion below 1.1.16 expands consecutive empty groups in
exponential time, so a crafted pattern stalls the parser. It arrives under
jest's glob matching, and minimatch's own range already admitted the fix,
so this is a lockfile re-resolution.
---
 yarn.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index 02ba473..6966962 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1068,9 +1068,9 @@ bn.js@^5.2.0:
   integrity sha512-Vq886eXykuP5E6HcKSSStP3bJgrE6In5WKxVUvJ8XGpWWYs2xZHWqUwzCtGgEtBcxyd57KBFDPFoUfNzdaHCNg==
 
 brace-expansion@^1.1.7:
-  version "1.1.12"
-  resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.12.tgz#ab9b454466e5a8cc3a187beaad580412a9c5b843"
-  integrity sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==
+  version "1.1.18"
+  resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.18.tgz#3ce74d89885136be1535341f8c3d4425c29a5cab"
+  integrity sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==
   dependencies:
     balanced-match "^1.0.0"
     concat-map "0.0.1"