From ce05c495b93862048ad7d4d7f2d5cb9557262178 Mon Sep 17 00:00:00 2001
From: "@aaronjmars" <61592645+aaronjmars@users.noreply.github.com>
Date: Fri, 3 Jul 2026 11:58:31 -0400
Subject: [PATCH] fix(deps): bump node-forge to 1.4.0 and brace-expansion to
 1.1.15 (#43)

Resolves all 8 Dependabot alerts (transitive dev deps via web-ext):
- node-forge 1.3.1 -> 1.4.0 (alerts #1-#7): signature forgery, cert
  chain bypass, ASN.1 issues, modInverse DoS
- brace-expansion 1.1.12 -> 1.1.15 (alert #8): process hang / memory
  exhaustion on zero-step sequence

Lockfile-only change; both bumps are within existing semver ranges.
npm audit reports 0 vulnerabilities.
---
 opendia-extension/package-lock.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/opendia-extension/package-lock.json b/opendia-extension/package-lock.json
index b83fa62..78178a0 100644
--- a/opendia-extension/package-lock.json
+++ b/opendia-extension/package-lock.json
@@ -805,9 +805,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
-      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
+      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2708,9 +2708,9 @@
       "license": "MIT"
     },
     "node_modules/node-forge": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.3.1.tgz",
-      "integrity": "sha512-dPEtOeMvF9VMcYV/1Wb8CPoVAXtp6MKMlcbAt4ddqmGqUJ6fQZFXkNZNkNlfevtNkGtaSoXf/vNNNSvgrdXwtA==",
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz",
+      "integrity": "sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==",
       "dev": true,
       "license": "(BSD-3-Clause OR GPL-2.0)",
       "engines": {