From f8257af2bb1b40442bdd9ca4d935a0f02fb83ac0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 16:57:43 +0000 Subject: [PATCH] deps: bump the security group across 2 directories with 2 updates Bumps the security group with 1 update in the /samples/react/token-refresh directory: [tar](https://github.com/isaacs/node-tar). Bumps the security group with 2 updates in the /samples/react/login-pkce directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [tar](https://github.com/isaacs/node-tar). Updates `tar` from 7.5.16 to 7.5.20 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.20) Updates `brace-expansion` from 5.0.6 to 5.0.7 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.6...v5.0.7) Updates `tar` from 7.5.16 to 7.5.20 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.20) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.20 dependency-type: indirect dependency-group: security - dependency-name: brace-expansion dependency-version: 5.0.7 dependency-type: indirect dependency-group: security - dependency-name: tar dependency-version: 7.5.20 dependency-type: indirect dependency-group: security ... Signed-off-by: dependabot[bot] --- samples/react/login-pkce/yarn.lock | 12 ++++++------ samples/react/token-refresh/yarn.lock | 6 +++--- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/samples/react/login-pkce/yarn.lock b/samples/react/login-pkce/yarn.lock index c9c3bf3..e817589 100644 --- a/samples/react/login-pkce/yarn.lock +++ b/samples/react/login-pkce/yarn.lock @@ -748,11 +748,11 @@ __metadata: linkType: hard "brace-expansion@npm:^5.0.5": - version: 5.0.6 - resolution: "brace-expansion@npm:5.0.6" + version: 5.0.7 + resolution: "brace-expansion@npm:5.0.7" dependencies: balanced-match: "npm:^4.0.2" - checksum: 10c0/8c919869b90f61d533b341d3340be5ee4413232ea89b8246cbc2f38eb014f1d8182785c98a006eaf6111d02dc9eeffefdc240d5ac158625b2ed084dccd4bbf9b + checksum: 10c0/4769109c3c082de178e449a371bcad50d51ab468f644bce2dd9188efe0cf0a080ed102105d7fc8577382cedc45bad7e6443a91bf3d8102264ee8cf927dbaf205 languageName: node linkType: hard @@ -1726,15 +1726,15 @@ __metadata: linkType: hard "tar@npm:^7.5.4": - version: 7.5.16 - resolution: "tar@npm:7.5.16" + version: 7.5.20 + resolution: "tar@npm:7.5.20" dependencies: "@isaacs/fs-minipass": "npm:^4.0.0" chownr: "npm:^3.0.0" minipass: "npm:^7.1.2" minizlib: "npm:^3.1.0" yallist: "npm:^5.0.0" - checksum: 10c0/4f37f3c4bd2ca2755fd736a5df1d573c1a868ec1b1e893346aeafa95ac510f9e2fd1469420bd866cc7904799e5bd4ac62b5d4f03fe27747d6e1e373b44505c5c + checksum: 10c0/4df4335c6d958b76adf1eaced55889dec3ca1c51f450658a074af80694bb0d9c154a8e93fdf4da617372d1575b121295379993961bbe4cd4b0867c0e5689846a languageName: node linkType: hard diff --git a/samples/react/token-refresh/yarn.lock b/samples/react/token-refresh/yarn.lock index 2c5e9fa..edf946e 100644 --- a/samples/react/token-refresh/yarn.lock +++ b/samples/react/token-refresh/yarn.lock @@ -1726,15 +1726,15 @@ __metadata: linkType: hard "tar@npm:^7.5.4": - version: 7.5.16 - resolution: "tar@npm:7.5.16" + version: 7.5.20 + resolution: "tar@npm:7.5.20" dependencies: "@isaacs/fs-minipass": "npm:^4.0.0" chownr: "npm:^3.0.0" minipass: "npm:^7.1.2" minizlib: "npm:^3.1.0" yallist: "npm:^5.0.0" - checksum: 10c0/4f37f3c4bd2ca2755fd736a5df1d573c1a868ec1b1e893346aeafa95ac510f9e2fd1469420bd866cc7904799e5bd4ac62b5d4f03fe27747d6e1e373b44505c5c + checksum: 10c0/4df4335c6d958b76adf1eaced55889dec3ca1c51f450658a074af80694bb0d9c154a8e93fdf4da617372d1575b121295379993961bbe4cd4b0867c0e5689846a languageName: node linkType: hard