From 901d2eab416732f7344acfc7fd94163aa528033b Mon Sep 17 00:00:00 2001 From: "ugo.bechameil" Date: Tue, 4 Aug 2026 10:22:33 +0200 Subject: [PATCH] chore: address Trivy production dependency vulnerabilities Bump vulnerable production dependencies/overrides and refresh package-lock.json to clear Plugins released Trivy findings. Co-authored-by: Cursor --- package-lock.json | 10 +++++----- package.json | 4 ++-- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9bc7b4e..59ed9d2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "BigQuery", - "version": "0.2.29", + "version": "0.2.30", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "BigQuery", - "version": "0.2.29", + "version": "0.2.30", "hasInstallScript": true, "dependencies": { "@google-cloud/bigquery": "8.1.1", @@ -1605,9 +1605,9 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.8", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz", - "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==", + "version": "5.0.9", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz", + "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==", "license": "MIT", "dependencies": { "balanced-match": "^4.0.2" diff --git a/package.json b/package.json index af7598c..2a88039 100644 --- a/package.json +++ b/package.json @@ -85,10 +85,10 @@ }, "overrides": { "@tootallnate/once": "3.0.1", - "brace-expansion": "5.0.8", + "brace-expansion": "5.0.9", "node-fetch": { ".": "npm:@hackolade/fetch@1.3.0" }, "minimatch": "10.2.4" } -} \ No newline at end of file +}