github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-24 08:10:06 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3159 from github/oscarsj/update-brace-expansion-dep

Browse Source 
Update vulnerable dependency brace-expansion
This commit is contained in:
Óscar San José
2025-09-29 12:13:53 +02:00
committed by GitHub
parent 6a87ebe42b 2f0649510e
commit f0a08a4bf5
11 changed files with 13 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/init-action-post.js generated
View File

@@ -34391,7 +34391,7 @@ var require_brace_expansion = __commonJS({
var isSequence = isNumericSequence || isAlphaSequence;
var isOptions = m.body.indexOf(",") >= 0;
if (!isSequence && !isOptions) {
if (m.post.match(/,.*\}/)) {
if (m.post.match(/,(?!,).*\}/)) {
str2 = m.pre + "{" + m.body + escClose + m.post;
return expand(str2);
}