From cd70013816934026d9b1daa31b5e0d0ba644f22c Mon Sep 17 00:00:00 2001 From: ignaciosantise <25931366+ignaciosantise@users.noreply.github.com> Date: Fri, 10 Apr 2026 15:30:17 -0300 Subject: [PATCH 1/2] fix: bump transitive dependency overrides to resolve Dependabot alerts MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bump hono 4.12.7→4.12.12, undici 6.24.0→6.24.1, minimatch 9.0.7→9.0.9, axios 1.13.5→1.15.0 across all 8 apps. Add missing overrides for hono (expo-wallet), elliptic and @xmldom/xmldom (W3MWagmi), undici and @xmldom/xmldom (W3MEthers5). Update addressable gem 2.8.7→2.9.0. Co-Authored-By: Claude Opus 4.6 --- Gemfile.lock | 4 +-- dapps/W3MEthers/package.json | 4 +-- dapps/W3MEthers/yarn.lock | 20 +++++------ dapps/W3MEthers5/package.json | 6 ++-- dapps/W3MEthers5/yarn.lock | 22 ++++++++---- dapps/W3MWagmi/package.json | 10 +++--- dapps/W3MWagmi/yarn.lock | 41 ++++++++++------------- dapps/appkit-expo-wagmi/package-lock.json | 14 ++++---- dapps/appkit-expo-wagmi/package.json | 6 ++-- dapps/poc-pos-app/package-lock.json | 14 ++++---- dapps/poc-pos-app/package.json | 6 ++-- dapps/pos-app/package-lock.json | 8 ++--- dapps/pos-app/package.json | 6 ++-- wallets/expo-wallet/package-lock.json | 14 ++++---- wallets/expo-wallet/package.json | 7 ++-- wallets/rn_cli_wallet/package.json | 6 ++-- wallets/rn_cli_wallet/yarn.lock | 27 +++++++++------ 17 files changed, 115 insertions(+), 100 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 66ce7f6f..edcf58fd 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -17,8 +17,8 @@ GEM minitest (>= 5.1, < 6) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - addressable (2.8.7) - public_suffix (>= 2.0.2, < 7.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) algoliasearch (1.27.5) httpclient (~> 2.8, >= 2.8.3) json (>= 1.5.1) diff --git a/dapps/W3MEthers/package.json b/dapps/W3MEthers/package.json index 5c312953..e1e1c587 100644 --- a/dapps/W3MEthers/package.json +++ b/dapps/W3MEthers/package.json @@ -71,7 +71,7 @@ "semver": "7.6.0", "tar": "7.5.11", "send": "0.19.1", - "undici": "6.24.0", + "undici": "6.24.1", "serve-static": "1.16.2", "valtio": "2.1.8", "tmp": "0.2.4", @@ -86,7 +86,7 @@ "lodash": "4.18.1", "fast-xml-parser": "5.5.7", "bn.js": "5.2.3", - "minimatch": "9.0.7", + "minimatch": "9.0.9", "flatted": "3.4.2", "yaml": "2.8.3", "picomatch": "2.3.2", diff --git a/dapps/W3MEthers/yarn.lock b/dapps/W3MEthers/yarn.lock index 27462a38..e8ee45ee 100644 --- a/dapps/W3MEthers/yarn.lock +++ b/dapps/W3MEthers/yarn.lock @@ -4007,7 +4007,7 @@ bplist-parser@^0.3.1: dependencies: big-integer "1.6.x" -brace-expansion@5.0.5, brace-expansion@^5.0.2: +brace-expansion@5.0.5, brace-expansion@^2.0.2: version "5.0.5" resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.5.tgz#dcc3a37116b79f3e1b46db994ced5d570e930fdb" integrity sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ== @@ -7875,12 +7875,12 @@ minimalistic-crypto-utils@^1.0.1: resolved "https://registry.yarnpkg.com/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz#f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a" integrity sha512-JIYlbt6g8i5jKfJ3xz7rF0LXmv2TkDxBLUkiBeZ7bAx4GnnNMr8xFpGnOxn6GhTEHx3SjRrZEoU+j04prX1ktg== -"minimatch@2 || 3", minimatch@9.0.7, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2: - version "9.0.7" - resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-9.0.7.tgz#d76c4d0b3b527877016d6cc1b9922fc8e0ffe7b0" - integrity sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg== +"minimatch@2 || 3", minimatch@9.0.9, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2: + version "9.0.9" + resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-9.0.9.tgz#9b0cb9fcb78087f6fd7eababe2511c4d3d60574e" + integrity sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg== dependencies: - brace-expansion "^5.0.2" + brace-expansion "^2.0.2" minimist@^1.2.0, minimist@^1.2.6: version "1.2.8" @@ -10096,10 +10096,10 @@ undici-types@~6.19.2: resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-6.19.8.tgz#35111c9d1437ab83a7cdc0abae2f26d88eda0a02" integrity sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw== -undici@6.24.0: - version "6.24.0" - resolved "https://registry.yarnpkg.com/undici/-/undici-6.24.0.tgz#ad36b879b4882d14addc13dd641da7ed7ac7623a" - integrity sha512-lVLNosgqo5EkGqh5XUDhGfsMSoO8K0BAN0TyJLvwNRSl4xWGZlCVYsAIpa/OpA3TvmnM01GWcoKmc3ZWo5wKKA== +undici@6.24.1: + version "6.24.1" + resolved "https://registry.yarnpkg.com/undici/-/undici-6.24.1.tgz#9df1425cede20b836d95634347946f79578b7e71" + integrity sha512-sC+b0tB1whOCzbtlx20fx3WgCXwkW627p4EA9uM+/tNNPkSS+eSEld6pAs9nDv7WbY1UUljBMYPtu9BCOrCWKA== unicode-canonical-property-names-ecmascript@^2.0.0: version "2.0.0" diff --git a/dapps/W3MEthers5/package.json b/dapps/W3MEthers5/package.json index 9f7595d8..53f54ac9 100644 --- a/dapps/W3MEthers5/package.json +++ b/dapps/W3MEthers5/package.json @@ -75,11 +75,13 @@ "tar": "7.5.11", "fast-xml-parser": "5.5.7", "bn.js": "5.2.3", - "minimatch": "9.0.7", + "minimatch": "9.0.9", "flatted": "3.4.2", "yaml": "2.8.3", "picomatch": "2.3.2", "defu": "6.1.5", - "ajv": "6.14.0" + "ajv": "6.14.0", + "undici": "6.24.1", + "@xmldom/xmldom": "0.8.12" } } diff --git a/dapps/W3MEthers5/yarn.lock b/dapps/W3MEthers5/yarn.lock index 0b795118..e78a7f89 100644 --- a/dapps/W3MEthers5/yarn.lock +++ b/dapps/W3MEthers5/yarn.lock @@ -3264,6 +3264,11 @@ "@walletconnect/window-getters" "^1.0.1" tslib "1.14.1" +"@xmldom/xmldom@0.8.12": + version "0.8.12" + resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.12.tgz#cf488a5435fa06c7374ad1449c69cea0f823624b" + integrity sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg== + abitype@^1.0.9: version "1.1.1" resolved "https://registry.yarnpkg.com/abitype/-/abitype-1.1.1.tgz#b50ed400f8bfca5452eb4033445c309d3e1117c8" @@ -3671,7 +3676,7 @@ borsh@^0.7.0: bs58 "^4.0.0" text-encoding-utf-8 "^1.0.2" -brace-expansion@5.0.5, brace-expansion@^5.0.2: +brace-expansion@5.0.5, brace-expansion@^2.0.2: version "5.0.5" resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.5.tgz#dcc3a37116b79f3e1b46db994ced5d570e930fdb" integrity sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ== @@ -6819,12 +6824,12 @@ minimalistic-crypto-utils@^1.0.1: resolved "https://registry.yarnpkg.com/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz#f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a" integrity sha512-JIYlbt6g8i5jKfJ3xz7rF0LXmv2TkDxBLUkiBeZ7bAx4GnnNMr8xFpGnOxn6GhTEHx3SjRrZEoU+j04prX1ktg== -minimatch@9.0.7, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2: - version "9.0.7" - resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-9.0.7.tgz#d76c4d0b3b527877016d6cc1b9922fc8e0ffe7b0" - integrity sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg== +minimatch@9.0.9, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2: + version "9.0.9" + resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-9.0.9.tgz#9b0cb9fcb78087f6fd7eababe2511c4d3d60574e" + integrity sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg== dependencies: - brace-expansion "^5.0.2" + brace-expansion "^2.0.2" minimist@^1.2.6: version "1.2.8" @@ -8574,6 +8579,11 @@ undici-types@~5.26.4: resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-5.26.5.tgz#bcd539893d00b56e964fd2657a4866b221a65617" integrity sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA== +undici@6.24.1: + version "6.24.1" + resolved "https://registry.yarnpkg.com/undici/-/undici-6.24.1.tgz#9df1425cede20b836d95634347946f79578b7e71" + integrity sha512-sC+b0tB1whOCzbtlx20fx3WgCXwkW627p4EA9uM+/tNNPkSS+eSEld6pAs9nDv7WbY1UUljBMYPtu9BCOrCWKA== + unicode-canonical-property-names-ecmascript@^2.0.0: version "2.0.0" resolved "https://registry.yarnpkg.com/unicode-canonical-property-names-ecmascript/-/unicode-canonical-property-names-ecmascript-2.0.0.tgz#301acdc525631670d39f6146e0e77ff6bbdebddc" diff --git a/dapps/W3MWagmi/package.json b/dapps/W3MWagmi/package.json index 6a16a187..aaeff0f3 100644 --- a/dapps/W3MWagmi/package.json +++ b/dapps/W3MWagmi/package.json @@ -88,7 +88,7 @@ "cross-spawn": "7.0.6", "nanoid": "3.3.8", "braces": "3.0.3", - "undici": "6.24.0", + "undici": "6.24.1", "serve-static": "1.16.2", "form-data": "3.0.4", "sha.js": "2.4.12", @@ -100,7 +100,7 @@ "tmp": "0.2.4", "on-headers": "1.1.0", "fast-redact": "3.5.0", - "hono": "4.12.7", + "hono": "4.12.12", "qs": "6.14.2", "ws": "8.18.1", "node-forge": "1.4.0", @@ -112,12 +112,14 @@ "lodash": "4.18.1", "fast-xml-parser": "5.5.7", "bn.js": "5.2.3", - "minimatch": "9.0.7", + "minimatch": "9.0.9", "flatted": "3.4.2", "yaml": "2.8.3", "picomatch": "2.3.2", "socket.io-parser": "4.2.6", "defu": "6.1.5", - "ajv": "6.14.0" + "ajv": "6.14.0", + "elliptic": "6.6.1", + "@xmldom/xmldom": "0.8.12" } } diff --git a/dapps/W3MWagmi/yarn.lock b/dapps/W3MWagmi/yarn.lock index 9cc1b317..808e5481 100644 --- a/dapps/W3MWagmi/yarn.lock +++ b/dapps/W3MWagmi/yarn.lock @@ -6112,17 +6112,10 @@ __metadata: languageName: node linkType: hard -"@xmldom/xmldom@npm:^0.8.8": - version: 0.8.10 - resolution: "@xmldom/xmldom@npm:0.8.10" - checksum: 4c136aec31fb3b49aaa53b6fcbfe524d02a1dc0d8e17ee35bd3bf35e9ce1344560481cd1efd086ad1a4821541482528672306d5e37cdbd187f33d7fadd3e2cf0 - languageName: node - linkType: hard - -"@xmldom/xmldom@npm:~0.7.7": - version: 0.7.13 - resolution: "@xmldom/xmldom@npm:0.7.13" - checksum: b4054078530e5fa8ede9677425deff0fce6d965f4c477ca73f8490d8a089e60b8498a15560425a1335f5ff99ecb851ed2c734b0a9a879299a5694302f212f37a +"@xmldom/xmldom@npm:0.8.12": + version: 0.8.12 + resolution: "@xmldom/xmldom@npm:0.8.12" + checksum: 609bbcd6f31fa24023f5cc836e804d49c60e3df83ca73f744da9caff7fed516221dcf2f23de44e5289d715951781ec35fa90adf57008c3eae944a7550c39e325 languageName: node linkType: hard @@ -9782,10 +9775,10 @@ __metadata: languageName: node linkType: hard -"hono@npm:4.12.7": - version: 4.12.7 - resolution: "hono@npm:4.12.7" - checksum: a1d0681320d8345c03b94e76e7c89a1b06faf7a317feecfb7b9c1f3223486fb43214ae23cf3ee5eb63c3a36ff68f808ddeff75f5506b9c8b27deff2adfbad772 +"hono@npm:4.12.12": + version: 4.12.12 + resolution: "hono@npm:4.12.12" + checksum: 1f8fda5adc9de6c604ab6a29ed5817ab969cb10a8548afe5dfbf38ff3b642721a362c64038a5ba3fe5d6f4810eef91d6d008901dbc6d4dec4717f860839d0876 languageName: node linkType: hard @@ -12171,12 +12164,12 @@ __metadata: languageName: node linkType: hard -"minimatch@npm:9.0.7": - version: 9.0.7 - resolution: "minimatch@npm:9.0.7" +"minimatch@npm:9.0.9": + version: 9.0.9 + resolution: "minimatch@npm:9.0.9" dependencies: - brace-expansion: ^5.0.2 - checksum: 03c871cdf51b643c3e12eac582f44ae7a10b2829e018f5d71376089db118fbfe16e992e16300fd0150ff3e353d58b5fe1507c9815b29fd871a97e749e7fe063d + brace-expansion: ^2.0.2 + checksum: 5292681ba1e14544ca9214ba5e412bb346214fb783354b22752f2d1e5c176e4a2c0bfcafeb1046389b816009ab73ba5410b176ce605632e8aa695db25f87f6b9 languageName: node linkType: hard @@ -15754,10 +15747,10 @@ __metadata: languageName: node linkType: hard -"undici@npm:6.24.0": - version: 6.24.0 - resolution: "undici@npm:6.24.0" - checksum: 271ae0d6dc2e9246a6e11227a0b0fbc6b1b94cc50331fc45973a6877ea04fcb75256902f1b866cf2734c0c5e1b19336f42e5d4ea57657a61ac083ccb704fc145 +"undici@npm:6.24.1": + version: 6.24.1 + resolution: "undici@npm:6.24.1" + checksum: 0baa81ede2b0deb9002692c4d614cdffb2c8c27bb41e4ce7380f95b4468ebb6fd9745b7a6da32b0cdf05b1554bd5e5a47a80babb0e5ca9d59401efe372d975ed languageName: node linkType: hard diff --git a/dapps/appkit-expo-wagmi/package-lock.json b/dapps/appkit-expo-wagmi/package-lock.json index 35fd3f94..f06d7774 100644 --- a/dapps/appkit-expo-wagmi/package-lock.json +++ b/dapps/appkit-expo-wagmi/package-lock.json @@ -11117,9 +11117,9 @@ } }, "node_modules/hono": { - "version": "4.12.7", - "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.7.tgz", - "integrity": "sha512-jq9l1DM0zVIvsm3lv9Nw9nlJnMNPOcAtsbsgiUhWcFzPE99Gvo6yRTlszSLLYacMeQ6quHD6hMfId8crVHvexw==", + "version": "4.12.12", + "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.12.tgz", + "integrity": "sha512-p1JfQMKaceuCbpJKAPKVqyqviZdS0eUxH9v82oWo1kb9xjQ5wA6iP3FNVAPDFlz5/p7d45lO+BpSk1tuSZMF4Q==", "license": "MIT", "engines": { "node": ">=16.9.0" @@ -13030,12 +13030,12 @@ } }, "node_modules/minimatch": { - "version": "9.0.7", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.7.tgz", - "integrity": "sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==", + "version": "9.0.9", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", + "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "license": "ISC", "dependencies": { - "brace-expansion": "^5.0.2" + "brace-expansion": "^2.0.2" }, "engines": { "node": ">=16 || 14 >=14.17" diff --git a/dapps/appkit-expo-wagmi/package.json b/dapps/appkit-expo-wagmi/package.json index dd4be323..3211df86 100644 --- a/dapps/appkit-expo-wagmi/package.json +++ b/dapps/appkit-expo-wagmi/package.json @@ -66,16 +66,16 @@ "valtio": "2.1.8", "viem": "2.38.5", "fast-redact": "3.5.0", - "hono": "4.12.7", + "hono": "4.12.12", "node-forge": "1.4.0", "glob": "10.5.0", "tar": "7.5.11", "js-yaml": "4.1.1", "h3": "1.15.9", - "undici": "6.24.0", + "undici": "6.24.1", "lodash": "4.18.1", "bn.js": "5.2.3", - "minimatch": "9.0.7", + "minimatch": "9.0.9", "fast-xml-parser": "5.5.7", "flatted": "3.4.2", "socket.io-parser": "4.2.6", diff --git a/dapps/poc-pos-app/package-lock.json b/dapps/poc-pos-app/package-lock.json index a6f1f94b..393b79f8 100644 --- a/dapps/poc-pos-app/package-lock.json +++ b/dapps/poc-pos-app/package-lock.json @@ -11014,12 +11014,12 @@ } }, "node_modules/minimatch": { - "version": "9.0.7", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.7.tgz", - "integrity": "sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==", + "version": "9.0.9", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", + "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "license": "ISC", "dependencies": { - "brace-expansion": "^5.0.2" + "brace-expansion": "^2.0.2" }, "engines": { "node": ">=16 || 14 >=14.17" @@ -14596,9 +14596,9 @@ } }, "node_modules/undici": { - "version": "6.24.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-6.24.0.tgz", - "integrity": "sha512-lVLNosgqo5EkGqh5XUDhGfsMSoO8K0BAN0TyJLvwNRSl4xWGZlCVYsAIpa/OpA3TvmnM01GWcoKmc3ZWo5wKKA==", + "version": "6.24.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-6.24.1.tgz", + "integrity": "sha512-sC+b0tB1whOCzbtlx20fx3WgCXwkW627p4EA9uM+/tNNPkSS+eSEld6pAs9nDv7WbY1UUljBMYPtu9BCOrCWKA==", "license": "MIT", "engines": { "node": ">=18.17" diff --git a/dapps/poc-pos-app/package.json b/dapps/poc-pos-app/package.json index 74e971f5..ab62828a 100644 --- a/dapps/poc-pos-app/package.json +++ b/dapps/poc-pos-app/package.json @@ -76,14 +76,14 @@ "typescript": "5.9.3" }, "overrides": { - "hono": "4.12.7", + "hono": "4.12.12", "tar": "7.5.11", "node-forge": "1.4.0", "glob": "10.5.0", "js-yaml": "4.1.1", - "undici": "6.24.0", + "undici": "6.24.1", "h3": "1.15.9", - "minimatch": "9.0.7", + "minimatch": "9.0.9", "fast-xml-parser": "5.5.7", "flatted": "3.4.2", "picomatch": "2.3.2", diff --git a/dapps/pos-app/package-lock.json b/dapps/pos-app/package-lock.json index 7f53ea4a..c176847c 100644 --- a/dapps/pos-app/package-lock.json +++ b/dapps/pos-app/package-lock.json @@ -12459,12 +12459,12 @@ } }, "node_modules/minimatch": { - "version": "9.0.7", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.7.tgz", - "integrity": "sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==", + "version": "9.0.9", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", + "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "license": "ISC", "dependencies": { - "brace-expansion": "^5.0.2" + "brace-expansion": "^2.0.2" }, "engines": { "node": ">=16 || 14 >=14.17" diff --git a/dapps/pos-app/package.json b/dapps/pos-app/package.json index 1c841eb8..75cdff26 100644 --- a/dapps/pos-app/package.json +++ b/dapps/pos-app/package.json @@ -83,7 +83,7 @@ "typescript": "5.9.3" }, "overrides": { - "hono": "4.12.7", + "hono": "4.12.12", "tar": "7.5.11", "node-forge": "1.4.0", "glob": "10.5.0", @@ -92,7 +92,7 @@ "@vercel/node": { "undici": "5.29.0" }, - "minimatch": "9.0.7", + "minimatch": "9.0.9", "h3": "1.15.9", "fast-xml-parser": "5.5.7", "flatted": "3.4.2", @@ -105,7 +105,7 @@ "path-to-regexp": "6.3.0", "lodash": "4.18.1", "defu": "6.1.5", - "undici": "6.24.0" + "undici": "6.24.1" }, "private": true } diff --git a/wallets/expo-wallet/package-lock.json b/wallets/expo-wallet/package-lock.json index d6ef3fc6..51408043 100644 --- a/wallets/expo-wallet/package-lock.json +++ b/wallets/expo-wallet/package-lock.json @@ -10636,12 +10636,12 @@ } }, "node_modules/minimatch": { - "version": "9.0.7", - "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.7.tgz", - "integrity": "sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==", + "version": "9.0.9", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", + "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "license": "ISC", "dependencies": { - "brace-expansion": "^5.0.2" + "brace-expansion": "^2.0.2" }, "engines": { "node": ">=16 || 14 >=14.17" @@ -14256,9 +14256,9 @@ "license": "MIT" }, "node_modules/undici": { - "version": "6.24.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-6.24.0.tgz", - "integrity": "sha512-lVLNosgqo5EkGqh5XUDhGfsMSoO8K0BAN0TyJLvwNRSl4xWGZlCVYsAIpa/OpA3TvmnM01GWcoKmc3ZWo5wKKA==", + "version": "6.24.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-6.24.1.tgz", + "integrity": "sha512-sC+b0tB1whOCzbtlx20fx3WgCXwkW627p4EA9uM+/tNNPkSS+eSEld6pAs9nDv7WbY1UUljBMYPtu9BCOrCWKA==", "license": "MIT", "engines": { "node": ">=18.17" diff --git a/wallets/expo-wallet/package.json b/wallets/expo-wallet/package.json index 35828d3d..213ae556 100644 --- a/wallets/expo-wallet/package.json +++ b/wallets/expo-wallet/package.json @@ -76,9 +76,9 @@ "js-yaml": "4.1.1", "glob": "10.5.0", "h3": "1.15.9", - "undici": "6.24.0", + "undici": "6.24.1", "tar": "7.5.11", - "minimatch": "9.0.7", + "minimatch": "9.0.9", "fast-xml-parser": "5.5.7", "flatted": "3.4.2", "yaml": "2.8.3", @@ -88,7 +88,8 @@ "@xmldom/xmldom": "0.8.12", "cross-spawn": "7.0.6", "brace-expansion": "5.0.5", - "lodash": "4.18.1" + "lodash": "4.18.1", + "hono": "4.12.12" }, "private": true } diff --git a/wallets/rn_cli_wallet/package.json b/wallets/rn_cli_wallet/package.json index eb917faa..e2c3829e 100644 --- a/wallets/rn_cli_wallet/package.json +++ b/wallets/rn_cli_wallet/package.json @@ -125,9 +125,9 @@ "js-yaml": "4.1.1", "lodash": "4.18.1", "qs": "6.14.2", - "axios": "1.13.5", + "axios": "1.15.0", "bn.js": "5.2.3", - "minimatch": "9.0.7", + "minimatch": "9.0.9", "h3": "1.15.9", "flatted": "3.4.2", "yaml": "2.8.3", @@ -136,7 +136,7 @@ "ajv": "6.14.0", "@xmldom/xmldom": "0.8.12", "node-forge": "1.4.0", - "undici": "6.24.0" + "undici": "6.24.1" }, "packageManager": "yarn@3.8.7" } diff --git a/wallets/rn_cli_wallet/yarn.lock b/wallets/rn_cli_wallet/yarn.lock index d01e4a61..2e4d9a0e 100644 --- a/wallets/rn_cli_wallet/yarn.lock +++ b/wallets/rn_cli_wallet/yarn.lock @@ -4975,14 +4975,14 @@ __metadata: languageName: node linkType: hard -"axios@npm:1.13.5": - version: 1.13.5 - resolution: "axios@npm:1.13.5" +"axios@npm:1.15.0": + version: 1.15.0 + resolution: "axios@npm:1.15.0" dependencies: follow-redirects: ^1.15.11 form-data: ^4.0.5 - proxy-from-env: ^1.1.0 - checksum: 985024c4a32f837053f198f02a308fd6f8bfb4053a2f21e39e37992bc6d06917f008679c36b3e7f0f0c9060c85ffe37c61e58d2ac662595d68dc1b89cef78de8 + proxy-from-env: ^2.1.0 + checksum: 95a8455554867a083ab3772fcadba42a22ec4bb546dccc66011556d837a07e544ae006675a30a5c43453f3e37e7c0982e934cec482c06b75abead2a2c157448a languageName: node linkType: hard @@ -9511,12 +9511,12 @@ __metadata: languageName: node linkType: hard -"minimatch@npm:9.0.7": - version: 9.0.7 - resolution: "minimatch@npm:9.0.7" +"minimatch@npm:9.0.9": + version: 9.0.9 + resolution: "minimatch@npm:9.0.9" dependencies: - brace-expansion: ^5.0.2 - checksum: 03c871cdf51b643c3e12eac582f44ae7a10b2829e018f5d71376089db118fbfe16e992e16300fd0150ff3e353d58b5fe1507c9815b29fd871a97e749e7fe063d + brace-expansion: ^2.0.2 + checksum: 5292681ba1e14544ca9214ba5e412bb346214fb783354b22752f2d1e5c176e4a2c0bfcafeb1046389b816009ab73ba5410b176ce605632e8aa695db25f87f6b9 languageName: node linkType: hard @@ -10454,6 +10454,13 @@ __metadata: languageName: node linkType: hard +"proxy-from-env@npm:^2.1.0": + version: 2.1.0 + resolution: "proxy-from-env@npm:2.1.0" + checksum: b106ad790f26d47ba4791af3fe8cba5c8d35d85020119c82c05b413eb11b3ab97d2393ecaed51bca97c2788fa256408283dfeb4d970b2ebcae6702310f064e7e + languageName: node + linkType: hard + "pump@npm:^3.0.0": version: 3.0.3 resolution: "pump@npm:3.0.3" From 058953da84c6b4a52c548d0921d3601218086862 Mon Sep 17 00:00:00 2001 From: ignaciosantise <25931366+ignaciosantise@users.noreply.github.com> Date: Fri, 10 Apr 2026 16:00:10 -0300 Subject: [PATCH 2/2] fix: bump picomatch to 4.0.4 and remove ESM-only brace-expansion override MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Upgrade picomatch 2.3.2→4.0.4 to fix POSIX Character Classes vulnerability. Remove brace-expansion 5.0.5 override from all 8 apps — v5 is ESM-only and breaks React Native codegen during pod install. Co-Authored-By: Claude Opus 4.6 --- dapps/W3MEthers/package.json | 3 +- dapps/W3MEthers/yarn.lock | 26 +++--- dapps/W3MEthers5/package.json | 3 +- dapps/W3MEthers5/yarn.lock | 26 +++--- dapps/W3MWagmi/package.json | 3 +- dapps/W3MWagmi/yarn.lock | 26 +++--- dapps/appkit-expo-wagmi/package-lock.json | 68 +++++----------- dapps/appkit-expo-wagmi/package.json | 5 +- dapps/poc-pos-app/package-lock.json | 58 +++++--------- dapps/poc-pos-app/package.json | 3 +- dapps/pos-app/package-lock.json | 96 +++++------------------ dapps/pos-app/package.json | 3 +- wallets/expo-wallet/package-lock.json | 58 +++++--------- wallets/expo-wallet/package.json | 3 +- wallets/rn_cli_wallet/package.json | 3 +- wallets/rn_cli_wallet/yarn.lock | 26 +++--- 16 files changed, 137 insertions(+), 273 deletions(-) diff --git a/dapps/W3MEthers/package.json b/dapps/W3MEthers/package.json index e1e1c587..fc7eb39a 100644 --- a/dapps/W3MEthers/package.json +++ b/dapps/W3MEthers/package.json @@ -77,7 +77,6 @@ "tmp": "0.2.4", "form-data": "3.0.4", "on-headers": "1.1.0", - "brace-expansion": "5.0.5", "fast-redact": "3.5.0", "node-forge": "1.4.0", "valibot": "1.2.0", @@ -89,7 +88,7 @@ "minimatch": "9.0.9", "flatted": "3.4.2", "yaml": "2.8.3", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "defu": "6.1.5", "ajv": "6.14.0" } diff --git a/dapps/W3MEthers/yarn.lock b/dapps/W3MEthers/yarn.lock index e8ee45ee..0592d334 100644 --- a/dapps/W3MEthers/yarn.lock +++ b/dapps/W3MEthers/yarn.lock @@ -3859,10 +3859,10 @@ babel-preset-jest@^29.6.3: babel-plugin-jest-hoist "^29.6.3" babel-preset-current-node-syntax "^1.0.0" -balanced-match@^4.0.2: - version "4.0.4" - resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-4.0.4.tgz#bfb10662feed8196a2c62e7c68e17720c274179a" - integrity sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA== +balanced-match@^1.0.0: + version "1.0.2" + resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.2.tgz#e83e3a7e3f300b34cb9d87f615fa0cbf357690ee" + integrity sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw== base-x@^3.0.2: version "3.0.11" @@ -4007,12 +4007,12 @@ bplist-parser@^0.3.1: dependencies: big-integer "1.6.x" -brace-expansion@5.0.5, brace-expansion@^2.0.2: - version "5.0.5" - resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.5.tgz#dcc3a37116b79f3e1b46db994ced5d570e930fdb" - integrity sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ== +brace-expansion@^2.0.2: + version "2.0.3" + resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-2.0.3.tgz#0493338bdd58e319b1039c67cf7ee439892c01d9" + integrity sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA== dependencies: - balanced-match "^4.0.2" + balanced-match "^1.0.0" braces@3.0.3, braces@^3.0.3, braces@~3.0.2: version "3.0.3" @@ -8517,10 +8517,10 @@ picocolors@^1.0.0: resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.0.0.tgz#cb5bdc74ff3f51892236eaf79d68bc44564ab81c" integrity sha512-1fygroTLlHu66zi26VoTDv8yRgm0Fccecssto+MhsZ0D/DGW2sm8E8AjW7NU5VVTRt5GxbeZ5qBuJr+HyLYkjQ== -picomatch@2.3.2, picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1, picomatch@^3.0.1: - version "2.3.2" - resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.2.tgz#5a942915e26b372dc0f0e6753149a16e6b1c5601" - integrity sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA== +picomatch@4.0.4, picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1, picomatch@^3.0.1: + version "4.0.4" + resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-4.0.4.tgz#fd6f5e00a143086e074dffe4c924b8fb293b0589" + integrity sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A== pify@^4.0.1: version "4.0.1" diff --git a/dapps/W3MEthers5/package.json b/dapps/W3MEthers5/package.json index 53f54ac9..5de061b9 100644 --- a/dapps/W3MEthers5/package.json +++ b/dapps/W3MEthers5/package.json @@ -66,7 +66,6 @@ "braces": "3.0.3", "valtio": "2.1.8", "on-headers": "1.1.0", - "brace-expansion": "5.0.5", "fast-redact": "3.5.0", "node-forge": "1.4.0", "js-yaml": "4.1.1", @@ -78,7 +77,7 @@ "minimatch": "9.0.9", "flatted": "3.4.2", "yaml": "2.8.3", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "defu": "6.1.5", "ajv": "6.14.0", "undici": "6.24.1", diff --git a/dapps/W3MEthers5/yarn.lock b/dapps/W3MEthers5/yarn.lock index e78a7f89..6ffebe62 100644 --- a/dapps/W3MEthers5/yarn.lock +++ b/dapps/W3MEthers5/yarn.lock @@ -3587,10 +3587,10 @@ babel-preset-jest@^29.6.3: babel-plugin-jest-hoist "^29.6.3" babel-preset-current-node-syntax "^1.0.0" -balanced-match@^4.0.2: - version "4.0.4" - resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-4.0.4.tgz#bfb10662feed8196a2c62e7c68e17720c274179a" - integrity sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA== +balanced-match@^1.0.0: + version "1.0.2" + resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.2.tgz#e83e3a7e3f300b34cb9d87f615fa0cbf357690ee" + integrity sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw== base-x@^3.0.2: version "3.0.11" @@ -3676,12 +3676,12 @@ borsh@^0.7.0: bs58 "^4.0.0" text-encoding-utf-8 "^1.0.2" -brace-expansion@5.0.5, brace-expansion@^2.0.2: - version "5.0.5" - resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.5.tgz#dcc3a37116b79f3e1b46db994ced5d570e930fdb" - integrity sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ== +brace-expansion@^2.0.2: + version "2.0.3" + resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-2.0.3.tgz#0493338bdd58e319b1039c67cf7ee439892c01d9" + integrity sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA== dependencies: - balanced-match "^4.0.2" + balanced-match "^1.0.0" braces@3.0.3, braces@^3.0.3, braces@~3.0.2: version "3.0.3" @@ -7315,10 +7315,10 @@ picocolors@^1.0.0: resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.1.tgz#3d321af3eab939b083c8f929a1d12cda81c26b6b" integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA== -picomatch@2.3.2, picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1: - version "2.3.2" - resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.2.tgz#5a942915e26b372dc0f0e6753149a16e6b1c5601" - integrity sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA== +picomatch@4.0.4, picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1: + version "4.0.4" + resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-4.0.4.tgz#fd6f5e00a143086e074dffe4c924b8fb293b0589" + integrity sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A== pify@^4.0.1: version "4.0.1" diff --git a/dapps/W3MWagmi/package.json b/dapps/W3MWagmi/package.json index aaeff0f3..e6eb5b99 100644 --- a/dapps/W3MWagmi/package.json +++ b/dapps/W3MWagmi/package.json @@ -92,7 +92,6 @@ "serve-static": "1.16.2", "form-data": "3.0.4", "sha.js": "2.4.12", - "brace-expansion": "5.0.5", "@walletconnect/ethereum-provider": "2.23.0", "@walletconnect/universal-provider": "2.23.0", "viem": "2.38.5", @@ -115,7 +114,7 @@ "minimatch": "9.0.9", "flatted": "3.4.2", "yaml": "2.8.3", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "socket.io-parser": "4.2.6", "defu": "6.1.5", "ajv": "6.14.0", diff --git a/dapps/W3MWagmi/yarn.lock b/dapps/W3MWagmi/yarn.lock index 808e5481..6b2dd05d 100644 --- a/dapps/W3MWagmi/yarn.lock +++ b/dapps/W3MWagmi/yarn.lock @@ -6762,10 +6762,10 @@ __metadata: languageName: node linkType: hard -"balanced-match@npm:^4.0.2": - version: 4.0.4 - resolution: "balanced-match@npm:4.0.4" - checksum: fb07bb66a0959c2843fc055838047e2a95ccebb837c519614afb067ebfdf2fa967ca8d712c35ced07f2cd26fc6f07964230b094891315ad74f11eba3d53178a0 +"balanced-match@npm:^1.0.0": + version: 1.0.2 + resolution: "balanced-match@npm:1.0.2" + checksum: 9706c088a283058a8a99e0bf91b0a2f75497f185980d9ffa8b304de1d9e58ebda7c72c07ebf01dadedaac5b2907b2c6f566f660d62bd336c3468e960403b9d65 languageName: node linkType: hard @@ -6993,12 +6993,12 @@ __metadata: languageName: node linkType: hard -"brace-expansion@npm:5.0.5": - version: 5.0.5 - resolution: "brace-expansion@npm:5.0.5" +"brace-expansion@npm:^2.0.2": + version: 2.0.3 + resolution: "brace-expansion@npm:2.0.3" dependencies: - balanced-match: ^4.0.2 - checksum: 4481b7ffa467b34c14e258167dbd8d9485a2d31d03060e8e8b38142dcde32cdc89c8f55b04d3ae7aae9304fa7eac1dfafd602787cf09c019cc45de3bb6950ffc + balanced-match: ^1.0.0 + checksum: e9dd66caaf0784126e1654f1bc19adb28f3ef86f39f2226f833f7700ec727c141f6cd85eaa47bacf3426beda01c9fbc3a2f28174cf59330dc9b58ffaf9e09d96 languageName: node linkType: hard @@ -13146,10 +13146,10 @@ __metadata: languageName: node linkType: hard -"picomatch@npm:2.3.2": - version: 2.3.2 - resolution: "picomatch@npm:2.3.2" - checksum: 0a3f5b9ff28faf022e1429b66e47c122e19e7b31cbd098095d29e949684e7ff1d9b83a2133d931326a53ec6ec11c7c59b1850c27fde2f26ca1d5f35861e9701a +"picomatch@npm:4.0.4": + version: 4.0.4 + resolution: "picomatch@npm:4.0.4" + checksum: 76b387b5157951422fa6049a96bdd1695e39dd126cd99df34d343638dc5cdb8bcdc83fff288c23eddcf7c26657c35e3173d4d5f488c4f28b889b314472e0a662 languageName: node linkType: hard diff --git a/dapps/appkit-expo-wagmi/package-lock.json b/dapps/appkit-expo-wagmi/package-lock.json index f06d7774..93f2bd5f 100644 --- a/dapps/appkit-expo-wagmi/package-lock.json +++ b/dapps/appkit-expo-wagmi/package-lock.json @@ -2235,18 +2235,6 @@ "hermes-estree": "0.32.1" } }, - "node_modules/@expo/metro-config/node_modules/picomatch": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", - "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "license": "MIT", - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/@expo/metro-runtime": { "version": "55.0.6", "resolved": "https://registry.npmjs.org/@expo/metro-runtime/-/metro-runtime-55.0.6.tgz", @@ -7855,15 +7843,6 @@ "@babel/core": "^7.0.0" } }, - "node_modules/balanced-match": { - "version": "4.0.4", - "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", - "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", - "license": "MIT", - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/base-x": { "version": "5.0.1", "license": "MIT" @@ -8040,18 +8019,6 @@ "node": ">= 5.10.0" } }, - "node_modules/brace-expansion": { - "version": "5.0.5", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", - "integrity": "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==", - "license": "MIT", - "dependencies": { - "balanced-match": "^4.0.2" - }, - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/braces": { "version": "3.0.3", "license": "MIT", @@ -13044,6 +13011,21 @@ "url": "https://github.com/sponsors/isaacs" } }, + "node_modules/minimatch/node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "license": "MIT" + }, + "node_modules/minimatch/node_modules/brace-expansion": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz", + "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==", + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, "node_modules/minimist": { "version": "1.2.8", "dev": true, @@ -13793,12 +13775,12 @@ "license": "ISC" }, "node_modules/picomatch": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", - "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz", + "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==", "license": "MIT", "engines": { - "node": ">=8.6" + "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/jonschlinkert" @@ -15916,18 +15898,6 @@ } } }, - "node_modules/tinyglobby/node_modules/picomatch": { - "version": "4.0.3", - "dev": true, - "license": "MIT", - "peer": true, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/tmpl": { "version": "1.0.5", "license": "BSD-3-Clause" diff --git a/dapps/appkit-expo-wagmi/package.json b/dapps/appkit-expo-wagmi/package.json index 3211df86..25f95eda 100644 --- a/dapps/appkit-expo-wagmi/package.json +++ b/dapps/appkit-expo-wagmi/package.json @@ -79,13 +79,12 @@ "fast-xml-parser": "5.5.7", "flatted": "3.4.2", "socket.io-parser": "4.2.6", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "yaml": "2.8.3", "defu": "6.1.5", "ajv": "6.14.0", "@xmldom/xmldom": "0.8.12", - "cross-spawn": "7.0.6", - "brace-expansion": "5.0.5" + "cross-spawn": "7.0.6" }, "private": true } diff --git a/dapps/poc-pos-app/package-lock.json b/dapps/poc-pos-app/package-lock.json index 393b79f8..70d0ff81 100644 --- a/dapps/poc-pos-app/package-lock.json +++ b/dapps/poc-pos-app/package-lock.json @@ -5196,15 +5196,6 @@ "@babel/core": "^7.0.0" } }, - "node_modules/balanced-match": { - "version": "4.0.4", - "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", - "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", - "license": "MIT", - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/base64-js": { "version": "1.5.1", "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", @@ -5293,18 +5284,6 @@ "node": ">= 5.10.0" } }, - "node_modules/brace-expansion": { - "version": "5.0.5", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", - "integrity": "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==", - "license": "MIT", - "dependencies": { - "balanced-match": "^4.0.2" - }, - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/braces": { "version": "3.0.3", "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz", @@ -11028,6 +11007,21 @@ "url": "https://github.com/sponsors/isaacs" } }, + "node_modules/minimatch/node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "license": "MIT" + }, + "node_modules/minimatch/node_modules/brace-expansion": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz", + "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==", + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, "node_modules/minimist": { "version": "1.2.8", "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", @@ -11787,12 +11781,12 @@ "license": "ISC" }, "node_modules/picomatch": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", - "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz", + "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==", "license": "MIT", "engines": { - "node": ">=8.6" + "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/jonschlinkert" @@ -14318,20 +14312,6 @@ } } }, - "node_modules/tinyglobby/node_modules/picomatch": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", - "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "dev": true, - "license": "MIT", - "peer": true, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/tmp": { "version": "0.2.5", "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz", diff --git a/dapps/poc-pos-app/package.json b/dapps/poc-pos-app/package.json index ab62828a..b6df7b29 100644 --- a/dapps/poc-pos-app/package.json +++ b/dapps/poc-pos-app/package.json @@ -86,11 +86,10 @@ "minimatch": "9.0.9", "fast-xml-parser": "5.5.7", "flatted": "3.4.2", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "yaml": "2.8.3", "@xmldom/xmldom": "0.8.12", "cross-spawn": "7.0.6", - "brace-expansion": "5.0.5", "lodash": "4.18.1", "ajv": "6.14.0", "defu": "6.1.5" diff --git a/dapps/pos-app/package-lock.json b/dapps/pos-app/package-lock.json index c176847c..64a0462f 100644 --- a/dapps/pos-app/package-lock.json +++ b/dapps/pos-app/package-lock.json @@ -2499,18 +2499,6 @@ "hermes-estree": "0.32.1" } }, - "node_modules/@expo/metro-config/node_modules/picomatch": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", - "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "license": "MIT", - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/@expo/metro-runtime": { "version": "55.0.6", "resolved": "https://registry.npmjs.org/@expo/metro-runtime/-/metro-runtime-55.0.6.tgz", @@ -4247,19 +4235,6 @@ } } }, - "node_modules/@rollup/pluginutils/node_modules/picomatch": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", - "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "dev": true, - "license": "MIT", - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/@rtsao/scc": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/@rtsao/scc/-/scc-1.1.0.tgz", @@ -5567,19 +5542,6 @@ "node": ">=20" } }, - "node_modules/@vercel/nft/node_modules/picomatch": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", - "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "dev": true, - "license": "MIT", - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/@vercel/node": { "version": "5.5.16", "resolved": "https://registry.npmjs.org/@vercel/node/-/node-5.5.16.tgz", @@ -6395,15 +6357,6 @@ "@babel/core": "^7.0.0" } }, - "node_modules/balanced-match": { - "version": "4.0.4", - "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", - "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", - "license": "MIT", - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/base64-js": { "version": "1.5.1", "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", @@ -6505,18 +6458,6 @@ "node": ">= 5.10.0" } }, - "node_modules/brace-expansion": { - "version": "5.0.5", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", - "integrity": "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==", - "license": "MIT", - "dependencies": { - "balanced-match": "^4.0.2" - }, - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/braces": { "version": "3.0.3", "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz", @@ -12473,6 +12414,21 @@ "url": "https://github.com/sponsors/isaacs" } }, + "node_modules/minimatch/node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "license": "MIT" + }, + "node_modules/minimatch/node_modules/brace-expansion": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz", + "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==", + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, "node_modules/minimist": { "version": "1.2.8", "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", @@ -13295,12 +13251,12 @@ "license": "ISC" }, "node_modules/picomatch": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", - "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz", + "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==", "license": "MIT", "engines": { - "node": ">=8.6" + "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/jonschlinkert" @@ -15763,20 +15719,6 @@ } } }, - "node_modules/tinyglobby/node_modules/picomatch": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", - "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "dev": true, - "license": "MIT", - "peer": true, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/tmp": { "version": "0.2.5", "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz", diff --git a/dapps/pos-app/package.json b/dapps/pos-app/package.json index 75cdff26..8962253c 100644 --- a/dapps/pos-app/package.json +++ b/dapps/pos-app/package.json @@ -96,11 +96,10 @@ "h3": "1.15.9", "fast-xml-parser": "5.5.7", "flatted": "3.4.2", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "yaml": "2.8.3", "@xmldom/xmldom": "0.8.12", "cross-spawn": "7.0.6", - "brace-expansion": "5.0.5", "diff": "4.0.4", "path-to-regexp": "6.3.0", "lodash": "4.18.1", diff --git a/wallets/expo-wallet/package-lock.json b/wallets/expo-wallet/package-lock.json index 51408043..a8a4b085 100644 --- a/wallets/expo-wallet/package-lock.json +++ b/wallets/expo-wallet/package-lock.json @@ -5337,15 +5337,6 @@ "@babel/core": "^7.0.0" } }, - "node_modules/balanced-match": { - "version": "4.0.4", - "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", - "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", - "license": "MIT", - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/base-x": { "version": "5.0.1", "resolved": "https://registry.npmjs.org/base-x/-/base-x-5.0.1.tgz", @@ -5461,18 +5452,6 @@ "node": ">= 5.10.0" } }, - "node_modules/brace-expansion": { - "version": "5.0.5", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", - "integrity": "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==", - "license": "MIT", - "dependencies": { - "balanced-match": "^4.0.2" - }, - "engines": { - "node": "18 || 20 || >=22" - } - }, "node_modules/braces": { "version": "3.0.3", "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz", @@ -10650,6 +10629,21 @@ "url": "https://github.com/sponsors/isaacs" } }, + "node_modules/minimatch/node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "license": "MIT" + }, + "node_modules/minimatch/node_modules/brace-expansion": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.3.tgz", + "integrity": "sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==", + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, "node_modules/minimist": { "version": "1.2.8", "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", @@ -11484,12 +11478,12 @@ "license": "ISC" }, "node_modules/picomatch": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", - "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz", + "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==", "license": "MIT", "engines": { - "node": ">=8.6" + "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/jonschlinkert" @@ -13957,20 +13951,6 @@ } } }, - "node_modules/tinyglobby/node_modules/picomatch": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", - "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "dev": true, - "license": "MIT", - "peer": true, - "engines": { - "node": ">=12" - }, - "funding": { - "url": "https://github.com/sponsors/jonschlinkert" - } - }, "node_modules/tmp": { "version": "0.2.5", "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz", diff --git a/wallets/expo-wallet/package.json b/wallets/expo-wallet/package.json index 213ae556..f5d1b98c 100644 --- a/wallets/expo-wallet/package.json +++ b/wallets/expo-wallet/package.json @@ -82,12 +82,11 @@ "fast-xml-parser": "5.5.7", "flatted": "3.4.2", "yaml": "2.8.3", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "defu": "6.1.5", "ajv": "6.14.0", "@xmldom/xmldom": "0.8.12", "cross-spawn": "7.0.6", - "brace-expansion": "5.0.5", "lodash": "4.18.1", "hono": "4.12.12" }, diff --git a/wallets/rn_cli_wallet/package.json b/wallets/rn_cli_wallet/package.json index e2c3829e..2b1157e0 100644 --- a/wallets/rn_cli_wallet/package.json +++ b/wallets/rn_cli_wallet/package.json @@ -113,7 +113,6 @@ "sha.js": "2.4.12", "tmp": "0.2.4", "on-headers": "1.1.0", - "brace-expansion": "5.0.5", "eslint-plugin-react/minimatch": "5.1.6", "@ton/crypto-primitives@2.1.0": "patch:@ton/crypto-primitives@npm%3A2.1.0#./.yarn/patches/@ton-crypto-primitives-npm-2.1.0-3d1ea62176.patch", "@ethersproject/pbkdf2@5.8.0": "patch:@ethersproject/pbkdf2@npm%3A5.8.0#./.yarn/patches/@ethersproject-pbkdf2-npm-5.8.0-b720e81bcc.patch", @@ -131,7 +130,7 @@ "h3": "1.15.9", "flatted": "3.4.2", "yaml": "2.8.3", - "picomatch": "2.3.2", + "picomatch": "4.0.4", "defu": "6.1.5", "ajv": "6.14.0", "@xmldom/xmldom": "0.8.12", diff --git a/wallets/rn_cli_wallet/yarn.lock b/wallets/rn_cli_wallet/yarn.lock index 2e4d9a0e..7c4a37ca 100644 --- a/wallets/rn_cli_wallet/yarn.lock +++ b/wallets/rn_cli_wallet/yarn.lock @@ -5168,10 +5168,10 @@ __metadata: languageName: node linkType: hard -"balanced-match@npm:^4.0.2": - version: 4.0.4 - resolution: "balanced-match@npm:4.0.4" - checksum: fb07bb66a0959c2843fc055838047e2a95ccebb837c519614afb067ebfdf2fa967ca8d712c35ced07f2cd26fc6f07964230b094891315ad74f11eba3d53178a0 +"balanced-match@npm:^1.0.0": + version: 1.0.2 + resolution: "balanced-match@npm:1.0.2" + checksum: 9706c088a283058a8a99e0bf91b0a2f75497f185980d9ffa8b304de1d9e58ebda7c72c07ebf01dadedaac5b2907b2c6f566f660d62bd336c3468e960403b9d65 languageName: node linkType: hard @@ -5297,12 +5297,12 @@ __metadata: languageName: node linkType: hard -"brace-expansion@npm:5.0.5": - version: 5.0.5 - resolution: "brace-expansion@npm:5.0.5" +"brace-expansion@npm:^2.0.1, brace-expansion@npm:^2.0.2": + version: 2.0.3 + resolution: "brace-expansion@npm:2.0.3" dependencies: - balanced-match: ^4.0.2 - checksum: 4481b7ffa467b34c14e258167dbd8d9485a2d31d03060e8e8b38142dcde32cdc89c8f55b04d3ae7aae9304fa7eac1dfafd602787cf09c019cc45de3bb6950ffc + balanced-match: ^1.0.0 + checksum: e9dd66caaf0784126e1654f1bc19adb28f3ef86f39f2226f833f7700ec727c141f6cd85eaa47bacf3426beda01c9fbc3a2f28174cf59330dc9b58ffaf9e09d96 languageName: node linkType: hard @@ -10200,10 +10200,10 @@ __metadata: languageName: node linkType: hard -"picomatch@npm:2.3.2": - version: 2.3.2 - resolution: "picomatch@npm:2.3.2" - checksum: 0a3f5b9ff28faf022e1429b66e47c122e19e7b31cbd098095d29e949684e7ff1d9b83a2133d931326a53ec6ec11c7c59b1850c27fde2f26ca1d5f35861e9701a +"picomatch@npm:4.0.4": + version: 4.0.4 + resolution: "picomatch@npm:4.0.4" + checksum: 76b387b5157951422fa6049a96bdd1695e39dd126cd99df34d343638dc5cdb8bcdc83fff288c23eddcf7c26657c35e3173d4d5f488c4f28b889b314472e0a662 languageName: node linkType: hard