From 47bde2e574f3e5de63cf02f9d7ffe89db0b8fd7c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 2 Apr 2026 02:46:10 +0000
Subject: [PATCH] chore(deps): update dependency brace-expansion@>=1.0.0
 <=1.1.11 to v5 [security]

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 package.json        | 2 +-
 pnpm-workspace.yaml | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 8a2f0c55..d26d5ff0 100644
--- a/package.json
+++ b/package.json
@@ -142,7 +142,7 @@
       "elliptic@<=6.6.0": ">=6.6.1",
       "@babel/helpers@<7.26.10": ">=7.29.2",
       "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.6",
-      "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12",
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.5",
       "brace-expansion@>=2.0.0 <=2.0.1": ">=2.0.2",
       "pbkdf2@<=3.1.2": ">=3.1.5",
       "sha.js@<=2.4.11": ">=2.4.12",
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 0ce6b8d6..529d2f08 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -4,5 +4,7 @@ minimumReleaseAgeExclude:
   - '@kong/*'
   - '@kong-ui/*'
   - '@kong-ui-public/*'
+  # Renovate security update: brace-expansion@>=1.0.0 <=1.1.11@5.0.5
+  - brace-expansion@>=1.0.0 <=1.1.11@5.0.5
 # When set to no-downgrade, pnpm will fail if a package's trust level has decreased compared to previous releases
 trustPolicy: no-downgrade