Security: 1 high/critical advisory(ies) in dependencies #38

• brace-expansion (high, transitive)
  • fix: yes
  • brace-expansion: Quadratic-time expansion of the {a},b} rewrite causes CPU denial of service
  • brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
  • brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

Found by Security Audit. Updated automatically; closes itself when npm audit --audit-level=high is clean.

If a fix needs a transitive pin Dependabot cannot express, add an overrides entry to package.json.