Skip to content

chore(deps): Bump brace-expansion from 1.1.14 to 5.0.6#658

Merged
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/brace-expansion-5.0.6
May 22, 2026
Merged

chore(deps): Bump brace-expansion from 1.1.14 to 5.0.6#658
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/brace-expansion-5.0.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion from 1.1.14 to 5.0.6.

Release notes

Sourced from brace-expansion's releases.

v4.0.1

  • fmt 5a5cc17
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

juliangruber/brace-expansion@v4.0.0...v4.0.1

v4.0.0

  • feat: use string replaces instead of splits (#64) 278132b
  • fmt dd72a59
  • add tea.yaml 70e4c1b

juliangruber/brace-expansion@v3.0.0...v4.0.0

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

v3.0.1

  • pkg: publish on tag 3.x 3059c07
  • fmt 8229e6f
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

juliangruber/brace-expansion@v3.0.0...v3.0.1

v3.0.0

  • Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
  • added jsdoc (#55) 68c0e37
  • node 16 is EOL 9e781e9
  • add standard 3494c4d
  • use const and let (#57) dd5a4cb
  • docs 6dad209
  • remove test e3dd8ae
  • ci: update node versions d23ede9
  • docs: add @​lanodan to contributors 1eb3fa4
  • docs 1e7c9cd
  • switch from tape to test module (#60) 2520537
  • Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
  • Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
  • docs: add back ci badge 8ee5626
  • Add github actions, remove travis. Closes #52 (#53) 5c8756a
  • CI: Drop unused sudo: false Travis directive (#50) 05978a7

juliangruber/brace-expansion@v2.0.1...v3.0.0

v2.0.2

  • pkg: publish on tag 2.x 14f1d91
  • fmt ed7780a
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 36603d5

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@crazy-max

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.14 to 5.0.6.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.14...v5.0.6)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): Bump brace-expansion from 2.0.2 to 5.0.6 May 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/brace-expansion-5.0.6 branch from 741ed2f to 792ab49 Compare May 22, 2026 12:13
@crazy-max crazy-max merged commit e49e0aa into master May 22, 2026
41 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/brace-expansion-5.0.6 branch May 22, 2026 12:16
hoodnoah added a commit to hoodnoah/certmanager-porkbun-webhook that referenced this pull request Jun 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/metadata-action](https://github.com/docker/metadata-action) | action | major | `v5` → `v6` |

---

### Release Notes

<details>
<summary>docker/metadata-action (docker/metadata-action)</summary>

### [`v6.1.0`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

[Compare Source](docker/metadata-action@v6...v6.1.0)

- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#&#8203;613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#&#8203;658](docker/metadata-action#658) [#&#8203;630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#&#8203;617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#&#8203;620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#&#8203;623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#&#8203;621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#&#8203;629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#&#8203;639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#&#8203;619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#&#8203;626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#&#8203;649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#&#8203;657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#&#8203;614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#&#8203;637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

### [`v6.0.0`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

[Compare Source](docker/metadata-action@v6...v6)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#&#8203;588](docker/metadata-action#588)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#&#8203;599](docker/metadata-action#599)
- Bump [@&#8203;actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#&#8203;597](docker/metadata-action#597)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#&#8203;604](docker/metadata-action#604)
- Bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#&#8203;600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#&#8203;603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

### [`v6`](docker/metadata-action@v5.10.0...v6)

[Compare Source](docker/metadata-action@v5.10.0...v6)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTcuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIxNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: hoodn <hood.noah@gmail.com>
Reviewed-on: https://gitea.k3s.noah-hood.io/hoodn/certmanager-porkbun-webhook/pulls/10
Co-authored-by: renovate-bot <renovate-bot@example.local>
Co-committed-by: renovate-bot <renovate-bot@example.local>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jun 11, 2026
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6.0.0)
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jun 18, 2026
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

1 participant