From 42ecaf3786da7291894b70a26671ffc5a52aae17 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Oct 2026 19:37:01 +0000
Subject: [PATCH] Bump brace-expansion from 1.1.11 to 1.1.21 in
 /dependabot-sandbox

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 dependabot-sandbox/package-lock.json | 8 ++++----
 dependabot-sandbox/package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/dependabot-sandbox/package-lock.json b/dependabot-sandbox/package-lock.json
index 1e43d6f0..c10b9982 100644
--- a/dependabot-sandbox/package-lock.json
+++ b/dependabot-sandbox/package-lock.json
@@ -8,7 +8,7 @@
       "name": "dependabot-severity-filter-sandbox",
       "version": "0.0.0",
       "dependencies": {
-        "brace-expansion": "1.1.11",
+        "brace-expansion": "1.1.21",
         "lodash": "4.17.11"
       }
     },
@@ -19,9 +19,9 @@
       "license": "MIT"
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
-      "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0",
diff --git a/dependabot-sandbox/package.json b/dependabot-sandbox/package.json
index c5347041..8b38d04d 100644
--- a/dependabot-sandbox/package.json
+++ b/dependabot-sandbox/package.json
@@ -5,6 +5,6 @@
   "description": "Temporary fixture: vulnerable dependencies used to exercise the Dependabot severity filter workflow. Removed after the test.",
   "dependencies": {
     "lodash": "4.17.11",
-    "brace-expansion": "1.1.11"
+    "brace-expansion": "1.1.21"
   }
 }