From f306a935906a3dbc48661f58ebc449069cece211 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Oct 2026 09:55:58 +0000 Subject: [PATCH 1/3] Bump brace-expansion from 1.1.18 to 1.1.21 Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.18 to 1.1.21. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.21 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/package-lock.json b/package-lock.json index 73389570e..cd18608ef 100644 --- a/package-lock.json +++ b/package-lock.json @@ -374,9 +374,9 @@ "license": "Apache-2.0" }, "node_modules/@actions/artifact/node_modules/brace-expansion": { - "version": "2.1.4", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", - "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", + "version": "2.1.7", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.7.tgz", + "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==", "license": "MIT", "dependencies": { "balanced-match": "^1.0.0" @@ -4034,9 +4034,9 @@ "license": "MIT" }, "node_modules/brace-expansion": { - "version": "1.1.18", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", - "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", + "version": "1.1.21", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz", + "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==", "license": "MIT", "dependencies": { "balanced-match": "^1.0.0", @@ -5344,9 +5344,9 @@ } }, "node_modules/eslint-plugin-import-x/node_modules/brace-expansion": { - "version": "5.0.9", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", - "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", + "version": "5.0.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz", + "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==", "dev": true, "license": "MIT", "dependencies": { @@ -6266,9 +6266,9 @@ } }, "node_modules/glob/node_modules/brace-expansion": { - "version": "5.0.9", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", - "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", + "version": "5.0.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz", + "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==", "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" @@ -8766,9 +8766,9 @@ } }, "node_modules/readdir-glob/node_modules/brace-expansion": { - "version": "5.0.9", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", - "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", + "version": "5.0.12", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz", + "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==", "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" From d036b81d9562ffee2a1fd957489473cc7f12a773 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 2 Oct 2026 09:57:43 +0000 Subject: [PATCH 2/3] Rebuild --- lib/entry-points.js | 193 ++++++++++++++++++++++++++++---------------- 1 file changed, 124 insertions(+), 69 deletions(-) diff --git a/lib/entry-points.js b/lib/entry-points.js index a8ff39259..d106883fa 100644 --- a/lib/entry-points.js +++ b/lib/entry-points.js @@ -31672,6 +31672,8 @@ var require_brace_expansion = __commonJS({ var escPeriod2 = "\0PERIOD" + Math.random() + "\0"; var EXPANSION_MAX2 = 1e5; var EXPANSION_MAX_LENGTH2 = 4e6; + var EXPANSION_MAX_DEPTH2 = 1e3; + var EXPANSION_MAX_REWRITES2 = 1e3; function numeric2(str) { return parseInt(str, 10) == str ? parseInt(str, 10) : str.charCodeAt(0); } @@ -31681,25 +31683,36 @@ var require_brace_expansion = __commonJS({ function unescapeBraces2(str) { return str.split(escSlash2).join("\\").split(escOpen2).join("{").split(escClose2).join("}").split(escComma2).join(",").split(escPeriod2).join("."); } - function parseCommaParts2(str) { - if (!str) - return [""]; - var parts = []; - var m = balanced2("{", "}", str); - if (!m) - return str.split(","); - var pre = m.pre; - var body = m.body; - var post = m.post; - var p = pre.split(","); - p[p.length - 1] += "{" + body + "}"; - var postParts = parseCommaParts2(post); - if (post.length) { - p[p.length - 1] += postParts.shift(); - p.push.apply(p, postParts); + function pushAll2(target, items) { + for (var i = 0; i < items.length; i++) { + target.push(items[i]); + } + } + function parseCommaParts2(str) { + var parts = []; + var carry = ""; + for (; ; ) { + var m = balanced2("{", "}", str); + if (!m) { + var tail = str.split(","); + tail[0] = carry + tail[0]; + pushAll2(parts, tail); + return parts; + } + var pre = m.pre; + var body = m.body; + var post = m.post; + var p = pre.split(","); + p[0] = carry + p[0]; + p[p.length - 1] += "{" + body + "}"; + if (!post.length) { + pushAll2(parts, p); + return parts; + } + carry = p.pop(); + pushAll2(parts, p); + str = post; } - parts.push.apply(parts, p); - return parts; } function expandTop(str, options) { if (!str) @@ -31707,10 +31720,12 @@ var require_brace_expansion = __commonJS({ options = options || {}; var max = options.max == null ? EXPANSION_MAX2 : options.max; var maxLength = options.maxLength == null ? EXPANSION_MAX_LENGTH2 : options.maxLength; + var maxDepth = options.maxDepth == null ? EXPANSION_MAX_DEPTH2 : options.maxDepth; + var maxRewrites = options.maxRewrites == null ? EXPANSION_MAX_REWRITES2 : options.maxRewrites; if (str.substr(0, 2) === "{}") { str = "\\{\\}" + str.substr(2); } - return expand3(escapeBraces2(str), max, maxLength, true).map(unescapeBraces2); + return expand3(escapeBraces2(str), max, maxLength, maxDepth, 0, maxRewrites, true).map(unescapeBraces2); } function embrace2(str) { return "{" + str + "}"; @@ -31785,9 +31800,13 @@ var require_brace_expansion = __commonJS({ } return N; } - function expand3(str, max, maxLength, isTop) { + function expand3(str, max, maxLength, maxDepth, depth, maxRewrites, isTop) { + if (depth > maxDepth) { + return [str]; + } var acc = [""]; var accBase = [0]; + var rewrites = 0; var dropEmpties = false; var firstGroup = true; var nextBase; @@ -31805,7 +31824,8 @@ var require_brace_expansion = __commonJS({ var isSequence = isNumericSequence || isAlphaSequence; var isOptions = m.body.indexOf(",") >= 0; if (!isSequence && !isOptions) { - if (m.post.match(/,(?!,).*\}/)) { + if (rewrites < maxRewrites && m.post.match(/,(?!,).*\}/)) { + rewrites++; str = m.pre + "{" + m.body + escClose2 + m.post; isTop = true; firstGroup = true; @@ -31837,7 +31857,7 @@ var require_brace_expansion = __commonJS({ } else { var n = parseCommaParts2(m.body); if (n.length === 1 && n[0] !== void 0) { - n = expand3(n[0], max, maxLength, false).map(embrace2); + n = expand3(n[0], max, maxLength, maxDepth, depth + 1, maxRewrites, false).map(embrace2); if (n.length === 1) { nextBase = []; acc = combine2( @@ -31865,7 +31885,7 @@ var require_brace_expansion = __commonJS({ values = []; var valuesLength = 0; outer: for (var j = 0; j < n.length; j++) { - var expanded = expand3(n[j], max, maxLength, false); + var expanded = expand3(n[j], max, maxLength, maxDepth, depth + 1, maxRewrites, false); for (var k = 0; k < expanded.length; k++) { var v = expanded[k]; if (dropsEmpties && !v) continue; @@ -113486,6 +113506,8 @@ var require_brace_expansion2 = __commonJS({ var escPeriod2 = "\0PERIOD" + Math.random() + "\0"; var EXPANSION_MAX2 = 1e5; var EXPANSION_MAX_LENGTH2 = 4e6; + var EXPANSION_MAX_DEPTH2 = 1e3; + var EXPANSION_MAX_REWRITES2 = 1e3; function numeric2(str) { return parseInt(str, 10) == str ? parseInt(str, 10) : str.charCodeAt(0); } @@ -113495,25 +113517,36 @@ var require_brace_expansion2 = __commonJS({ function unescapeBraces2(str) { return str.split(escSlash2).join("\\").split(escOpen2).join("{").split(escClose2).join("}").split(escComma2).join(",").split(escPeriod2).join("."); } - function parseCommaParts2(str) { - if (!str) - return [""]; - var parts = []; - var m = balanced2("{", "}", str); - if (!m) - return str.split(","); - var pre = m.pre; - var body = m.body; - var post = m.post; - var p = pre.split(","); - p[p.length - 1] += "{" + body + "}"; - var postParts = parseCommaParts2(post); - if (post.length) { - p[p.length - 1] += postParts.shift(); - p.push.apply(p, postParts); + function pushAll2(target, items) { + for (var i = 0; i < items.length; i++) { + target.push(items[i]); + } + } + function parseCommaParts2(str) { + var parts = []; + var carry = ""; + for (; ; ) { + var m = balanced2("{", "}", str); + if (!m) { + var tail = str.split(","); + tail[0] = carry + tail[0]; + pushAll2(parts, tail); + return parts; + } + var pre = m.pre; + var body = m.body; + var post = m.post; + var p = pre.split(","); + p[0] = carry + p[0]; + p[p.length - 1] += "{" + body + "}"; + if (!post.length) { + pushAll2(parts, p); + return parts; + } + carry = p.pop(); + pushAll2(parts, p); + str = post; } - parts.push.apply(parts, p); - return parts; } function expandTop(str, options) { if (!str) @@ -113521,10 +113554,12 @@ var require_brace_expansion2 = __commonJS({ options = options || {}; var max = options.max == null ? EXPANSION_MAX2 : options.max; var maxLength = options.maxLength == null ? EXPANSION_MAX_LENGTH2 : options.maxLength; + var maxDepth = options.maxDepth == null ? EXPANSION_MAX_DEPTH2 : options.maxDepth; + var maxRewrites = options.maxRewrites == null ? EXPANSION_MAX_REWRITES2 : options.maxRewrites; if (str.substr(0, 2) === "{}") { str = "\\{\\}" + str.substr(2); } - return expand3(escapeBraces2(str), max, maxLength, true).map(unescapeBraces2); + return expand3(escapeBraces2(str), max, maxLength, maxDepth, 0, maxRewrites, true).map(unescapeBraces2); } function embrace2(str) { return "{" + str + "}"; @@ -113598,8 +113633,12 @@ var require_brace_expansion2 = __commonJS({ } return N; } - function expand3(str, max, maxLength, isTop) { + function expand3(str, max, maxLength, maxDepth, depth, maxRewrites, isTop) { + if (depth > maxDepth) { + return [str]; + } var acc = [""]; + var rewrites = 0; var dropEmpties = false; var firstGroup = true; for (; ; ) { @@ -113627,7 +113666,8 @@ var require_brace_expansion2 = __commonJS({ var isSequence = isNumericSequence || isAlphaSequence; var isOptions = m.body.indexOf(",") >= 0; if (!isSequence && !isOptions) { - if (m.post.match(/,(?!,).*\}/)) { + if (rewrites < maxRewrites && m.post.match(/,(?!,).*\}/)) { + rewrites++; str = m.pre + "{" + m.body + escClose2 + m.post; isTop = true; continue; @@ -113651,7 +113691,7 @@ var require_brace_expansion2 = __commonJS({ } else { var n = parseCommaParts2(m.body); if (n.length === 1 && n[0] !== void 0) { - n = expand3(n[0], max, maxLength, false).map(embrace2); + n = expand3(n[0], max, maxLength, maxDepth, depth + 1, maxRewrites, false).map(embrace2); if (n.length === 1) { acc = combine2( acc, @@ -113675,7 +113715,7 @@ var require_brace_expansion2 = __commonJS({ values = []; var valuesLength = 0; outer: for (var j = 0; j < n.length; j++) { - var expanded = expand3(n[j], max, maxLength, false); + var expanded = expand3(n[j], max, maxLength, maxDepth, depth + 1, maxRewrites, false); for (var k = 0; k < expanded.length; k++) { var v = expanded[k]; if (dropsEmpties && !v) continue; @@ -180888,6 +180928,8 @@ var commaPattern = /\\,/g; var periodPattern = /\\\./g; var EXPANSION_MAX = 1e5; var EXPANSION_MAX_LENGTH = 4e6; +var EXPANSION_MAX_DEPTH = 1e3; +var EXPANSION_MAX_REWRITES = 1e3; function numeric(str) { return !isNaN(str) ? parseInt(str, 10) : str.charCodeAt(0); } @@ -180897,36 +180939,44 @@ function escapeBraces(str) { function unescapeBraces(str) { return str.replace(escSlashPattern, "\\").replace(escOpenPattern, "{").replace(escClosePattern, "}").replace(escCommaPattern, ",").replace(escPeriodPattern, "."); } +function pushAll(target, items) { + for (let i = 0; i < items.length; i++) { + target.push(items[i]); + } +} function parseCommaParts(str) { - if (!str) { - return [""]; - } const parts = []; - const m = balanced("{", "}", str); - if (!m) { - return str.split(","); + let carry = ""; + for (; ; ) { + const m = balanced("{", "}", str); + if (!m) { + const tail = str.split(","); + tail[0] = carry + tail[0]; + pushAll(parts, tail); + return parts; + } + const { pre, body, post } = m; + const p = pre.split(","); + p[0] = carry + p[0]; + p[p.length - 1] += "{" + body + "}"; + if (!post.length) { + pushAll(parts, p); + return parts; + } + carry = p.pop(); + pushAll(parts, p); + str = post; } - const { pre, body, post } = m; - const p = pre.split(","); - p[p.length - 1] += "{" + body + "}"; - const postParts = parseCommaParts(post); - if (post.length) { - ; - p[p.length - 1] += postParts.shift(); - p.push.apply(p, postParts); - } - parts.push.apply(parts, p); - return parts; } function expand2(str, options = {}) { if (!str) { return []; } - const { max = EXPANSION_MAX, maxLength = EXPANSION_MAX_LENGTH } = options; + const { max = EXPANSION_MAX, maxLength = EXPANSION_MAX_LENGTH, maxDepth = EXPANSION_MAX_DEPTH, maxRewrites = EXPANSION_MAX_REWRITES } = options; if (str.slice(0, 2) === "{}") { str = "\\{\\}" + str.slice(2); } - return expand_(escapeBraces(str), max, maxLength, true).map(unescapeBraces); + return expand_(escapeBraces(str), max, maxLength, maxDepth, 0, maxRewrites, true).map(unescapeBraces); } function embrace(str) { return "{" + str + "}"; @@ -181004,8 +181054,12 @@ function expandSequence(body, isAlphaSequence, max, maxLength) { } return N; } -function expand_(str, max, maxLength, isTop) { +function expand_(str, max, maxLength, maxDepth, depth, maxRewrites, isTop) { + if (depth > maxDepth) { + return [str]; + } let acc = [""]; + let rewrites = 0; let dropEmpties = false; let firstGroup = true; for (; ; ) { @@ -181027,7 +181081,8 @@ function expand_(str, max, maxLength, isTop) { const isSequence = isNumericSequence || isAlphaSequence; const isOptions = m.body.indexOf(",") >= 0; if (!isSequence && !isOptions) { - if (m.post.match(/,(?!,).*\}/)) { + if (rewrites < maxRewrites && m.post.match(/,(?!,).*\}/)) { + rewrites++; str = m.pre + "{" + m.body + escClose + m.post; isTop = true; continue; @@ -181044,7 +181099,7 @@ function expand_(str, max, maxLength, isTop) { } else { let n = parseCommaParts(m.body); if (n.length === 1 && n[0] !== void 0) { - n = expand_(n[0], max, maxLength, false).map(embrace); + n = expand_(n[0], max, maxLength, maxDepth, depth + 1, maxRewrites, false).map(embrace); if (n.length === 1) { acc = combine(acc, pre + n[0], [""], max, maxLength, dropEmpties && !m.post.length); if (!m.post.length) @@ -181062,7 +181117,7 @@ function expand_(str, max, maxLength, isTop) { values = []; let valuesLength = 0; outer: for (let j = 0; j < n.length; j++) { - const expanded = expand_(n[j], max, maxLength, false); + const expanded = expand_(n[j], max, maxLength, maxDepth, depth + 1, maxRewrites, false); for (let k = 0; k < expanded.length; k++) { const v = expanded[k]; if (dropsEmpties && !v) From 05d2a1a6fb0bb3cabb9875af405235f05063aebe Mon Sep 17 00:00:00 2001 From: "Michael B. Gale" Date: Fri, 2 Oct 2026 15:09:03 +0100 Subject: [PATCH 3/3] Trigger workflows