From 4ece6c9fb8186e8a70df2c3cd5807d246b55a415 Mon Sep 17 00:00:00 2001
From: "devin-ai-integration[bot]"
 <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 07:55:14 -0700
Subject: [PATCH] build(deps): suppress unfixed braces GHSA-vfj7-8cjw-p6xm to
 clear osv-scan (#44347)

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 osv-scanner.toml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/osv-scanner.toml b/osv-scanner.toml
index b3b6bb17d97..7ca42e91bf4 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -7,3 +7,8 @@ reason = "diskcache has no fixed release published; remove this entry once one e
 id = "GHSA-h7x2-h6g9-p789"
 ignoreUntil = 2026-10-14
 reason = "mlflow has no fixed release published (3.16.0, 2026-09-04, and master still store gateway secret api_base unvalidated); remove this entry once one exists"
+
+[[IgnoredVulns]]
+id = "GHSA-vfj7-8cjw-p6xm"
+ignoreUntil = 2026-11-03
+reason = "braces has no fixed release published (3.0.3, 2024-05-21, is latest and last_affected); dev-only via knip > fast-glob > micromatch; remove this entry once one exists"