From f2ca0a149b54a37c0fe211ae3c66795b1b1f095a Mon Sep 17 00:00:00 2001 From: Yuneng Jiang Date: Mon, 20 Jul 2026 17:46:20 -0700 Subject: [PATCH] build(deps-dev): bump js-yaml to 4.3.0 and brace-expansion to 5.0.7 Both are dev-only build and lint tooling in the dashboard, not part of the browser bundle. The bumps pull in upstream maintenance releases that address inefficient handling of certain inputs js-yaml is force-pinned through the overrides block because @redocly/openapi-core exact-pins an older copy; a plain lockfile change would not hold since the tree re-spawns a nested stale version on re-resolution, so the override moves from 4.2.0 to 4.3.0. brace-expansion is added to overrides at 5.0.7 so npm install does not leave the previously resolved 5.0.6 in place. Both resolve to a single deduped copy after the change --- ui/litellm-dashboard/package-lock.json | 12 ++++++------ ui/litellm-dashboard/package.json | 3 ++- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/ui/litellm-dashboard/package-lock.json b/ui/litellm-dashboard/package-lock.json index 91cf705060e..7a65b63b33c 100644 --- a/ui/litellm-dashboard/package-lock.json +++ b/ui/litellm-dashboard/package-lock.json @@ -5413,9 +5413,9 @@ } }, "node_modules/brace-expansion": { - "version": "5.0.6", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz", - "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==", + "version": "5.0.7", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz", + "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==", "dev": true, "license": "MIT", "dependencies": { @@ -8513,9 +8513,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz", - "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==", + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", + "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", "dev": true, "funding": [ { diff --git a/ui/litellm-dashboard/package.json b/ui/litellm-dashboard/package.json index 7aea571ea8b..b5e93d175bf 100644 --- a/ui/litellm-dashboard/package.json +++ b/ui/litellm-dashboard/package.json @@ -91,7 +91,8 @@ }, "overrides": { "prismjs": "1.30.0", - "js-yaml": "4.2.0", + "js-yaml": "4.3.0", + "brace-expansion": "5.0.7", "glob": "13.0.0", "minimatch": "10.2.4", "ws": "8.21.0",