chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Bumped brace-expansion to 2.1.4 via yarn resolution to fix high-severity DoS vulnerability (alert Bump @typescript-eslint/eslint-plugin from 6.10.0 to 6.21.0 #50)

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#50	brace-expansion	high	Added "brace-expansion": "^2.1.2" to resolutions in package.json; resolves to 2.1.4

Vulnerability: brace-expansion DoS via exponential-time expansion of consecutive non-expanding {} groups (vulnerable range >= 2.0.0, < 2.1.2)

[Copilot]

Pull request overview

Resolves a high-severity Dependabot security alert by forcing brace-expansion to a non-vulnerable version range via Yarn resolutions, and updating the lockfile accordingly.

Changes:

• Added a Yarn resolutions entry for brace-expansion to require ^2.1.2.
• Updated yarn.lock to resolve brace-expansion to 2.1.4.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Adds a resolutions override for brace-expansion to ensure installs use a non-vulnerable version.
yarn.lock	Updates the resolved brace-expansion package entry to 2.1.4 to reflect the new resolution.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.