From e72a78cc09cef0df4c630d056fdf019bf9fc8e89 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 4 Aug 2026 10:18:41 +0000
Subject: [PATCH] chore(deps): update dependency nx>brace-expansion to v5.0.9
 [security]

---
 pnpm-lock.yaml      | 12 ++++++++++--
 pnpm-workspace.yaml |  5 ++++-
 2 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 80c6bb85..0793e7e0 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -63,7 +63,7 @@ overrides:
   fast-uri: '>=4.1.1'
   postcss: '>=8.5.18'
   minimatch@10>brace-expansion: 5.0.8
-  nx>brace-expansion: 5.0.8
+  nx>brace-expansion: 5.0.9
   '@trivago/prettier-plugin-sort-imports>minimatch': ^10.0.0
 
 importers:
@@ -2187,6 +2187,10 @@ packages:
     resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
     engines: {node: 20 || >=22}
 
+  brace-expansion@5.0.9:
+    resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
+    engines: {node: 20 || >=22}
+
   browserslist@4.28.1:
     resolution: {integrity: sha512-ZC5Bd0LgJXgwGqUknZY/vkUQ04r8NXnJZ3yYi4vDmSiZmC/pdSN0NbNRPxZpbtO4uAfDUAFffO8IZoM3Gj8IkA==}
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
@@ -5679,6 +5683,10 @@ snapshots:
     dependencies:
       balanced-match: 4.0.4
 
+  brace-expansion@5.0.9:
+    dependencies:
+      balanced-match: 4.0.4
+
   browserslist@4.28.1:
     dependencies:
       baseline-browser-mapping: 2.10.38
@@ -6564,7 +6572,7 @@ snapshots:
       balanced-match: 4.0.3
       base64-js: 1.5.1
       bl: 4.1.0
-      brace-expansion: 5.0.8
+      brace-expansion: 5.0.9
       buffer: 5.7.1
       call-bind-apply-helpers: 1.0.2
       chalk: 4.1.2
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index d95e72d9..1d834f33 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -43,7 +43,7 @@ overrides:
   fast-uri: '>=4.1.1'
   postcss: '>=8.5.18'
   'minimatch@10>brace-expansion': '5.0.8'
-  'nx>brace-expansion': '5.0.8'
+  'nx>brace-expansion': '5.0.9'
   # @trivago/prettier-plugin-sort-imports pins minimatch@^9, which drags in the
   # unpatched brace-expansion@2.x line (GHSA-mh99-v99m-4gvg). Force it onto minimatch@10
   # instead, which already resolves to the patched brace-expansion@5.0.8.
@@ -59,3 +59,6 @@ allowBuilds:
   esbuild: true
   less: false
   nx: true
+minimumReleaseAgeExclude:
+  # Renovate security update: brace-expansion@5.0.9
+  - brace-expansion@5.0.9