From 35ec2cc118f7f33ade7bce30085a7a9bba5d985a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kamila=20=C5=9Aroda?= Date: Wed, 22 Jul 2026 10:56:28 +0200 Subject: [PATCH] deps: bump vulnerable transitive deps in RN and Vue samples Resolves 6 Dependabot alerts via in-range lockfile bumps: - brace-expansion 2.1.0 -> 2.1.2 (react-native samples, GHSA-3jxr-9vmj-r5cp) - js-yaml 4.2.0 -> 4.3.0 (react-native samples, GHSA-52cp-r559-cp3m) - brace-expansion 5.0.6 -> 5.0.7 (vue samples, GHSA-3jxr-9vmj-r5cp) Co-Authored-By: Claude Fable 5 --- samples/react-native/login-pkce/yarn.lock | 12 ++++++------ samples/react-native/token-refresh/yarn.lock | 12 ++++++------ samples/vue/login-pkce/yarn.lock | 6 +++--- samples/vue/token-refresh/yarn.lock | 6 +++--- 4 files changed, 18 insertions(+), 18 deletions(-) diff --git a/samples/react-native/login-pkce/yarn.lock b/samples/react-native/login-pkce/yarn.lock index a6f8067..79e2fe3 100644 --- a/samples/react-native/login-pkce/yarn.lock +++ b/samples/react-native/login-pkce/yarn.lock @@ -2845,11 +2845,11 @@ __metadata: linkType: hard "brace-expansion@npm:^2.0.2": - version: 2.1.0 - resolution: "brace-expansion@npm:2.1.0" + version: 2.1.2 + resolution: "brace-expansion@npm:2.1.2" dependencies: balanced-match: "npm:^1.0.0" - checksum: 10c0/439cedf3e23d7993b37919f1d6fdc653ec21a42437ec3e7460bea9ca8b17edf7a24a633273c31d61aa4335877cf29a443f1871814131c87997a1e6223e1f1502 + checksum: 10c0/5442ecab84045d21826268bc56c81a6ef4215327ee1f5ee153f67928e93f7a915d130ecec9966623143277fa3cce036ebb50020024bcc4d78853cdd6af9a19f8 languageName: node linkType: hard @@ -4956,13 +4956,13 @@ __metadata: linkType: hard "js-yaml@npm:^4.1.0": - version: 4.2.0 - resolution: "js-yaml@npm:4.2.0" + version: 4.3.0 + resolution: "js-yaml@npm:4.3.0" dependencies: argparse: "npm:^2.0.1" bin: js-yaml: bin/js-yaml.js - checksum: 10c0/1916456c118746603b067d74bbcbb0445d9a1d5e474ad4ae775e7b20525bed902e01d9d97dd0c81fcd8d4f596162309d0eb057f4aa38f3e9647f14075e9dea45 + checksum: 10c0/058b30473d6915ca5b4feb11e2f7d4d97242f98d00a798ed48dd90b46b7c640398afe9128c5db22c5300f8c6528fe2a174b9a93f351a70ebc28c6203938d8bff languageName: node linkType: hard diff --git a/samples/react-native/token-refresh/yarn.lock b/samples/react-native/token-refresh/yarn.lock index f49a698..4020ca4 100644 --- a/samples/react-native/token-refresh/yarn.lock +++ b/samples/react-native/token-refresh/yarn.lock @@ -2846,11 +2846,11 @@ __metadata: linkType: hard "brace-expansion@npm:^2.0.2": - version: 2.1.0 - resolution: "brace-expansion@npm:2.1.0" + version: 2.1.2 + resolution: "brace-expansion@npm:2.1.2" dependencies: balanced-match: "npm:^1.0.0" - checksum: 10c0/439cedf3e23d7993b37919f1d6fdc653ec21a42437ec3e7460bea9ca8b17edf7a24a633273c31d61aa4335877cf29a443f1871814131c87997a1e6223e1f1502 + checksum: 10c0/5442ecab84045d21826268bc56c81a6ef4215327ee1f5ee153f67928e93f7a915d130ecec9966623143277fa3cce036ebb50020024bcc4d78853cdd6af9a19f8 languageName: node linkType: hard @@ -4956,13 +4956,13 @@ __metadata: linkType: hard "js-yaml@npm:^4.1.0": - version: 4.2.0 - resolution: "js-yaml@npm:4.2.0" + version: 4.3.0 + resolution: "js-yaml@npm:4.3.0" dependencies: argparse: "npm:^2.0.1" bin: js-yaml: bin/js-yaml.js - checksum: 10c0/1916456c118746603b067d74bbcbb0445d9a1d5e474ad4ae775e7b20525bed902e01d9d97dd0c81fcd8d4f596162309d0eb057f4aa38f3e9647f14075e9dea45 + checksum: 10c0/058b30473d6915ca5b4feb11e2f7d4d97242f98d00a798ed48dd90b46b7c640398afe9128c5db22c5300f8c6528fe2a174b9a93f351a70ebc28c6203938d8bff languageName: node linkType: hard diff --git a/samples/vue/login-pkce/yarn.lock b/samples/vue/login-pkce/yarn.lock index 477254c..890b1eb 100644 --- a/samples/vue/login-pkce/yarn.lock +++ b/samples/vue/login-pkce/yarn.lock @@ -1075,11 +1075,11 @@ __metadata: linkType: hard "brace-expansion@npm:^5.0.5": - version: 5.0.6 - resolution: "brace-expansion@npm:5.0.6" + version: 5.0.7 + resolution: "brace-expansion@npm:5.0.7" dependencies: balanced-match: "npm:^4.0.2" - checksum: 10c0/8c919869b90f61d533b341d3340be5ee4413232ea89b8246cbc2f38eb014f1d8182785c98a006eaf6111d02dc9eeffefdc240d5ac158625b2ed084dccd4bbf9b + checksum: 10c0/4769109c3c082de178e449a371bcad50d51ab468f644bce2dd9188efe0cf0a080ed102105d7fc8577382cedc45bad7e6443a91bf3d8102264ee8cf927dbaf205 languageName: node linkType: hard diff --git a/samples/vue/token-refresh/yarn.lock b/samples/vue/token-refresh/yarn.lock index 5b236f5..9f0086c 100644 --- a/samples/vue/token-refresh/yarn.lock +++ b/samples/vue/token-refresh/yarn.lock @@ -1075,11 +1075,11 @@ __metadata: linkType: hard "brace-expansion@npm:^5.0.5": - version: 5.0.6 - resolution: "brace-expansion@npm:5.0.6" + version: 5.0.7 + resolution: "brace-expansion@npm:5.0.7" dependencies: balanced-match: "npm:^4.0.2" - checksum: 10c0/8c919869b90f61d533b341d3340be5ee4413232ea89b8246cbc2f38eb014f1d8182785c98a006eaf6111d02dc9eeffefdc240d5ac158625b2ed084dccd4bbf9b + checksum: 10c0/4769109c3c082de178e449a371bcad50d51ab468f644bce2dd9188efe0cf0a080ed102105d7fc8577382cedc45bad7e6443a91bf3d8102264ee8cf927dbaf205 languageName: node linkType: hard