Skip to content

Update vulnerable npm dependencies #1104

Description

Component Governance reports this npm dependency update is available in the VS Code feed:

  • brace-expansion: 2.0.3 -> 2.1.3

Update the applicable direct or transitive dependency and validate the change with the repository's relevant tests, linting, and build. Do not use dependency overrides, resolutions, --force, --legacy-peer-deps, or equivalent force flags to resolve the vulnerability.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

triage-neededNeeds assignment to the proper sub-team

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions