Fix vulnerable brace-expansion lockfile entries

[tembo]

Summary

• update transitive brace-expansion 1.x from 1.1.11 to 1.1.21
• update transitive brace-expansion 2.x from 2.0.1 to 2.1.7
• resolve the Dependabot security update that failed on master

Verification

• pnpm install --frozen-lockfile
• pnpm build
• pnpm test (74 passing)
• pnpm audit --json reports no brace-expansion advisories

pnpm lint still reports four pre-existing array-spacing violations in lib/index.spec.js; this PR does not modify that file.

Failed run: https://github.com/beyonk/http/actions/runs/36722664001

Want tembo to make any changes? Add a comment with @tembo and i'll get back to work!

      

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@beyonk/http@49

commit: 5cc5851

[tembo]

Resolved the failed master Dependabot update in this follow-up PR by updating the vulnerable transitive brace-expansion lockfile entries to 1.1.21 and 2.1.7. Build and all 74 tests pass; no direct branch push was made.