Fix brace-expansion version pinning

pnpm-lock.yaml

@@ -7,8 +7,8 @@ settings:
 
 overrides:
   '@electron/rebuild>node-gyp': 12.4.0
+  brace-expansion@5: ^5.0.8
   builder-util-runtime: 9.7.0
-  brace-expansion: 5.0.8
   canvas: '-'
   danger@13.0.10>undici: 6.27.0
   jsdom: '-'
@@ -5742,6 +5742,9 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0
 
+  balanced-match@1.0.2:
+    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==, tarball: https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz}
+
   balanced-match@4.0.4:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==, tarball: https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz}
     engines: {node: 18 || 20 || >=22}
@@ -5805,6 +5808,12 @@ packages:
     resolution: {integrity: sha512-TNPjfTr432qx7yOjQyaXm3dSR0MH9vXp7eT1BFSl/C51g+EFnOR9hTg1IreahGBmDNCehscshe45f+C1TBZbLw==, tarball: https://registry.npmjs.org/boxen/-/boxen-1.3.0.tgz}
     engines: {node: '>=4'}
 
+  brace-expansion@1.1.16:
+    resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz}
+
+  brace-expansion@2.1.2:
+    resolution: {integrity: sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz}
+
   brace-expansion@5.0.8:
     resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==, tarball: https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz}
     engines: {node: 20 || >=22}
@@ -6174,6 +6183,9 @@ packages:
     resolution: {integrity: sha512-pJDh5/4wrEnXX/VWRZvruAGHkzKdr46z11OlTPN+VrATlWWhSKewNCJ1futCO5C7eJB3nPMFZA1LeYtcFboZ2A==, tarball: https://registry.npmjs.org/compare-version/-/compare-version-0.1.2.tgz}
     engines: {node: '>=0.10.0'}
 
+  concat-map@0.0.1:
+    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==, tarball: https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz}
+
   config@4.4.1:
     resolution: {integrity: sha512-XfN4Q4+wBKkGtgMyQ+5ayjepdb0MrdiGKfBr0G1PTLx9rnqsX+Xiw03LEUtSALZU0UVfcFp6+xYV0NL8HLF94g==, tarball: https://registry.npmjs.org/config/-/config-4.4.1.tgz}
     engines: {node: '>= 20.0.0'}
@@ -16785,6 +16797,8 @@ snapshots:
       babel-plugin-jest-hoist: 29.6.3
       babel-preset-current-node-syntax: 1.1.0(@babel/core@7.29.0)
 
+  balanced-match@1.0.2: {}
+
   balanced-match@4.0.4: {}
 
   base64-js@1.5.1: {}
@@ -16842,6 +16856,15 @@ snapshots:
       term-size: 1.2.0
       widest-line: 2.0.1
 
+  brace-expansion@1.1.16:
+    dependencies:
+      balanced-match: 1.0.2
+      concat-map: 0.0.1
+
+  brace-expansion@2.1.2:
+    dependencies:
+      balanced-match: 1.0.2
+
   brace-expansion@5.0.8:
     dependencies:
       balanced-match: 4.0.4
@@ -17202,6 +17225,8 @@ snapshots:
 
   compare-version@0.1.2: {}
 
+  concat-map@0.0.1: {}
+
   config@4.4.1:
     dependencies:
       json5: 2.2.3
@@ -20317,15 +20342,15 @@ snapshots:
 
   minimatch@3.1.5:
     dependencies:
-      brace-expansion: 5.0.8
+      brace-expansion: 1.1.16
 
   minimatch@5.1.9:
     dependencies:
-      brace-expansion: 5.0.8
+      brace-expansion: 2.1.2
 
   minimatch@9.0.9:
     dependencies:
-      brace-expansion: 5.0.8
+      brace-expansion: 2.1.2
 
   minimist@1.2.8: {}
 

pnpm-workspace.yaml

@@ -53,10 +53,11 @@ auditConfig:
     - GHSA-v2hh-gcrm-f6hx # fast-uri, only used at dev-time
     - GHSA-4c8g-83qw-93j6 # fast-uri, only used at dev-time
     - GHSA-7g7r-gx96-252g # electron-builder > app-builder-lib
+    - GHSA-mh99-v99m-4gvg # minimatch <10 > brace-expansion (DESKTOP-10418)
 
 overrides:
   '@electron/rebuild>node-gyp': '12.4.0'
-  'brace-expansion': '5.0.8'
+  'brace-expansion@5': '^5.0.8'
   'builder-util-runtime': '9.7.0'
   'canvas': '-'
   'danger@13.0.10>undici': '6.27.0'