From 4b426c8db6704d5149a5d1b6e5652ab9199c9218 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 4 Mar 2026 08:43:56 +0000 Subject: [PATCH 1/2] Initial plan From 76e3b95d99de99e3d1ec06f1a5d92bf653c111f1 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 4 Mar 2026 08:46:48 +0000 Subject: [PATCH 2/2] Fix braces vulnerability: add override for braces >= 3.0.3 and regenerate lockfiles Co-authored-by: leestott <2511341+leestott@users.noreply.github.com> --- .../solution/package.json | 3 +- .../starter/package-lock.json | 44 +++++++------------ .../starter/package.json | 3 +- 3 files changed, 21 insertions(+), 29 deletions(-) diff --git a/3-Data-Visualization/13-meaningful-visualizations/solution/package.json b/3-Data-Visualization/13-meaningful-visualizations/solution/package.json index 10f26625c..5d8f08b8f 100644 --- a/3-Data-Visualization/13-meaningful-visualizations/solution/package.json +++ b/3-Data-Visualization/13-meaningful-visualizations/solution/package.json @@ -41,6 +41,7 @@ "not dead" ], "overrides": { - "qs": "6.14.2" + "qs": "6.14.2", + "braces": ">=3.0.3" } } diff --git a/3-Data-Visualization/13-meaningful-visualizations/starter/package-lock.json b/3-Data-Visualization/13-meaningful-visualizations/starter/package-lock.json index 2bf991c90..5dece0c37 100644 --- a/3-Data-Visualization/13-meaningful-visualizations/starter/package-lock.json +++ b/3-Data-Visualization/13-meaningful-visualizations/starter/package-lock.json @@ -5068,6 +5068,19 @@ "concat-map": "0.0.1" } }, + "node_modules/braces": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz", + "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==", + "dev": true, + "license": "MIT", + "dependencies": { + "fill-range": "^7.1.1" + }, + "engines": { + "node": ">=8" + } + }, "node_modules/browserslist": { "version": "4.28.1", "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.1.tgz", @@ -7338,10 +7351,11 @@ } }, "node_modules/fill-range": { - "version": "7.0.1", - "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz", - "integrity": "sha512-qOo9F+dMUmC2Lcb4BbVvnKJxTPjCm+RRpe4gDuGrzkL7mEVl/djYSu2OdQ2Pa302N4oqkSg9ir6jaLWJ2USVpQ==", + "version": "7.1.1", + "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz", + "integrity": "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==", "dev": true, + "license": "MIT", "dependencies": { "to-regex-range": "^5.0.1" }, @@ -9011,18 +9025,6 @@ "node": ">=8.6" } }, - "node_modules/micromatch/node_modules/braces": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz", - "integrity": "sha512-b8um+L1RzM3WDSzvhm6gIz1yfTbBt6YTlcEKAvsmqCZZFw46z626lVj9j1yEPW33H5H+lBQpZMP1k8l+78Ha0A==", - "dev": true, - "dependencies": { - "fill-range": "^7.0.1" - }, - "engines": { - "node": ">=8" - } - }, "node_modules/micromatch/node_modules/picomatch": { "version": "2.3.1", "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz", @@ -12661,18 +12663,6 @@ "node": ">= 8" } }, - "node_modules/webpack-dev-server/node_modules/braces": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz", - "integrity": "sha512-b8um+L1RzM3WDSzvhm6gIz1yfTbBt6YTlcEKAvsmqCZZFw46z626lVj9j1yEPW33H5H+lBQpZMP1k8l+78Ha0A==", - "dev": true, - "dependencies": { - "fill-range": "^7.0.1" - }, - "engines": { - "node": ">=8" - } - }, "node_modules/webpack-dev-server/node_modules/chokidar": { "version": "3.5.3", "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz", diff --git a/3-Data-Visualization/13-meaningful-visualizations/starter/package.json b/3-Data-Visualization/13-meaningful-visualizations/starter/package.json index bec1e919c..90dfe1003 100644 --- a/3-Data-Visualization/13-meaningful-visualizations/starter/package.json +++ b/3-Data-Visualization/13-meaningful-visualizations/starter/package.json @@ -41,6 +41,7 @@ "not dead" ], "overrides": { - "qs": "6.14.2" + "qs": "6.14.2", + "braces": ">=3.0.3" } }