Skip to content

Bump brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6#877

Merged
HarithaVattikuti merged 4 commits into
mainfrom
dependabot/npm_and_yarn/brace-expansion-1.1.12
Sep 16, 2025
Merged

Bump brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6#877
HarithaVattikuti merged 4 commits into
mainfrom
dependabot/npm_and_yarn/brace-expansion-1.1.12

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 11, 2025

Bumps brace-expansion from 1.1.11 to 1.1.12 and added documentation covering the breaking changes introduced in the latest major release (v6).

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 11, 2025
@dependabot dependabot Bot requested a review from a team as a code owner June 11, 2025 21:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 11, 2025
chiranjib-swain
chiranjib-swain previously approved these changes Aug 5, 2025
@aparnajyothi-y
Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/brace-expansion-1.1.12 branch from 9991ada to 8876673 Compare September 5, 2025 14:10
@aparnajyothi-y aparnajyothi-y changed the title Bump brace-expansion from 1.1.11 to 1.1.12 Bump brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v10 Sep 10, 2025
@aparnajyothi-y aparnajyothi-y changed the title Bump brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v10 Bump brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 Sep 10, 2025
@HarithaVattikuti HarithaVattikuti merged commit 395c8cf into main Sep 16, 2025
7 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/brace-expansion-1.1.12 branch September 16, 2025 18:25
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request May 6, 2026
…v6.0.1 → v6.1.0) (#384)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [https://github.com/actions/labeler](https://github.com/actions/labeler) | action | minor | `v6.0.1` → `v6.1.0` |

---

### Release Notes

<details>
<summary>actions/labeler (https://github.com/actions/labeler)</summary>

### [`v6.1.0`](https://github.com/actions/labeler/releases/tag/v6.1.0)

[Compare Source](actions/labeler@v6.0.1...v6.1.0)

#### Enhancements

- Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by [@&#8203;bluca](https://github.com/bluca) in [#&#8203;923](actions/labeler#923)

#### Bug Fixes

- Improve Labeler Action documentation and permission error handling by [@&#8203;chiranjib-swain](https://github.com/chiranjib-swain) in [#&#8203;897](actions/labeler#897)
- Preserve manually added labels during workflow runs and refine label synchronization logic by [@&#8203;chiranjib-swain](https://github.com/chiranjib-swain) in [#&#8203;917](actions/labeler#917)

#### Dependency Updates

- Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;877](actions/labeler#877)
- Upgrade minimatch from 10.0.1 to 10.2.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;926](actions/labeler#926)
- Upgrade dependencies ([@&#8203;actions/core](https://github.com/actions/core), [@&#8203;actions/github](https://github.com/actions/github), js-yaml, minimatch, [@&#8203;typescript-eslint](https://github.com/typescript-eslint)) by [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;934](actions/labeler#934)

#### New Contributors

- [@&#8203;chiranjib-swain](https://github.com/chiranjib-swain) made their first contribution in [#&#8203;897](actions/labeler#897)
- [@&#8203;bluca](https://github.com/bluca) made their first contribution in [#&#8203;923](actions/labeler#923)
- [@&#8203;Copilot](https://github.com/Copilot) made their first contribution in [#&#8203;934](actions/labeler#934)

**Full Changelog**: <actions/labeler@v6...v6.1.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwidHlwZS9taW5vciJdfQ==-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/384
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants