From 2ddb40fcd71ad170e86f845deb5f301be0b87c15 Mon Sep 17 00:00:00 2001
From: automated-signal <37887102+automated-signal@users.noreply.github.com>
Date: Mon, 3 Aug 2026 14:17:20 -0500
Subject: [PATCH] Update brace-expansion libraries

Co-authored-by: trevor-signal <131492920+trevor-signal@users.noreply.github.com>
---
 pnpm-lock.yaml      | 30 ++++++++++++++++--------------
 pnpm-workspace.yaml |  5 +++--
 2 files changed, 19 insertions(+), 16 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 59ea1ac629..309b13c909 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -7,7 +7,9 @@ settings:
 
 overrides:
   '@electron/rebuild>node-gyp': 12.4.0
-  brace-expansion@5: ^5.0.8
+  brace-expansion@5: ^5.0.9
+  brace-expansion@2: ^2.1.4
+  brace-expansion@1: ^1.1.18
   builder-util-runtime: 9.7.0
   canvas: '-'
   danger@13.0.10>undici: 6.27.0
@@ -5808,14 +5810,14 @@ packages:
     resolution: {integrity: sha512-TNPjfTr432qx7yOjQyaXm3dSR0MH9vXp7eT1BFSl/C51g+EFnOR9hTg1IreahGBmDNCehscshe45f+C1TBZbLw==, tarball: https://registry.npmjs.org/boxen/-/boxen-1.3.0.tgz}
     engines: {node: '>=4'}
 
-  brace-expansion@1.1.16:
-    resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz}
+  brace-expansion@1.1.18:
+    resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz}
 
-  brace-expansion@2.1.2:
-    resolution: {integrity: sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz}
+  brace-expansion@2.1.4:
+    resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz}
 
-  brace-expansion@5.0.8:
-    resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz}
+  brace-expansion@5.0.9:
+    resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz}
     engines: {node: 20 || >=22}
 
   braces@3.0.3:
@@ -16856,16 +16858,16 @@ snapshots:
       term-size: 1.2.0
       widest-line: 2.0.1
 
-  brace-expansion@1.1.16:
+  brace-expansion@1.1.18:
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
 
-  brace-expansion@2.1.2:
+  brace-expansion@2.1.4:
     dependencies:
       balanced-match: 1.0.2
 
-  brace-expansion@5.0.8:
+  brace-expansion@5.0.9:
     dependencies:
       balanced-match: 4.0.4
 
@@ -20338,19 +20340,19 @@ snapshots:
 
   minimatch@10.2.4:
     dependencies:
-      brace-expansion: 5.0.8
+      brace-expansion: 5.0.9
 
   minimatch@3.1.5:
     dependencies:
-      brace-expansion: 1.1.16
+      brace-expansion: 1.1.18
 
   minimatch@5.1.9:
     dependencies:
-      brace-expansion: 2.1.2
+      brace-expansion: 2.1.4
 
   minimatch@9.0.9:
     dependencies:
-      brace-expansion: 2.1.2
+      brace-expansion: 2.1.4
 
   minimist@1.2.8: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 5681f1b1d9..7ce20f84c3 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -53,11 +53,12 @@ auditConfig:
     - GHSA-v2hh-gcrm-f6hx # fast-uri, only used at dev-time
     - GHSA-4c8g-83qw-93j6 # fast-uri, only used at dev-time
     - GHSA-7g7r-gx96-252g # electron-builder > app-builder-lib
-    - GHSA-mh99-v99m-4gvg # minimatch <10 > brace-expansion (DESKTOP-10418)
 
 overrides:
   '@electron/rebuild>node-gyp': '12.4.0'
-  'brace-expansion@5': '^5.0.8'
+  'brace-expansion@5': '^5.0.9'
+  'brace-expansion@2': '^2.1.4'
+  'brace-expansion@1': '^1.1.18'
   'builder-util-runtime': '9.7.0'
   'canvas': '-'
   'danger@13.0.10>undici': '6.27.0'