Skip to content

chore: bump brace-expansion from 1.1.11 to 1.1.21 in /RNExample - #1054

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/RNExample/brace-expansion-1.1.21
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/RNExample/brace-expansion-1.1.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion from 1.1.11 to 1.1.21.

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner September 30, 2026 19:18
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 30, 2026
@cursor

cursor Bot commented Sep 30, 2026 •

Copy link
Copy Markdown

PR Summary

Low Risk
Routine dependency update in the example app lockfile with no impact on core SDK code.

Overview
Updates brace-expansion in RNExample/package-lock.json from 1.1.11 to 1.1.21 (and version 2.0.2 to 2.1.7) across transitive dependencies to incorporate bug and security fixes.

Reviewed by Cursor Bugbot for commit 558e354. Bugbot is set up for automated code reviews on this repo. Configure here.

@github-actions

Copy link
Copy Markdown

🐦 Swift Migration Progress

Production implementation code at 558e3543e4f9 compared with bb71b244a8ea.

Area Goal Progress Base This PR Swift SLOC Objective-C remaining Change
Core SDK Short term — in scope ████████░░ 80.52% 80.52% 13,410 3,244 ➖ 0.00 pp
Core SDK Long term — all Objective-C █████▉░░░░ 58.16% 58.16% 13,410 9,649 ➖ 0.00 pp
SDK kit infrastructure Short term — in scope ████████▉░ 88.49% 88.49% 2,244 292 ➖ 0.00 pp
SDK kit infrastructure Long term — all Objective-C ████▌░░░░░ 45.00% 45.00% 2,244 2,743 ➖ 0.00 pp
Standalone kits Short term — in scope ▋░░░░░░░░░ 5.87% 5.87% 897 14,392 ➖ 0.00 pp
Standalone kits Long term — all Objective-C ▋░░░░░░░░░ 5.87% 5.87% 897 14,392 ➖ 0.00 pp

Objective-C retained by design: Core SDK 6,405 · SDK kit infrastructure 2,451 · Standalone kits 0.

This PR's code movement

Area Swift lines added Objective-C lines removed
Core SDK 0 0
SDK kit infrastructure 0 0
Standalone kits 0 0
How this is measured
  • Current composition uses production source lines of code (SLOC) from cloc; comments and blank lines are excluded.
  • Short term — in scope excludes the Objective-C the migration will not delete, so 100% completes the in-scope conversions: every in-scope implementation gone. Migration continues on main after the integration branch merge.
  • Long term — all Objective-C keeps the full denominator. Reaching 100% there means the public API itself becomes Swift, which is a breaking change reserved for a future major release.
  • The gap between the two rows is the retained public/kit contract, runtime-identity, and boundary-glue surface listed in Tools/swift-migration-retained-objc.txt.
  • Retained wrappers keep their Objective-C interface but still shed logic to Swift. That thinning moves the long-term row and the retained figure, not the short-term row.
  • Both revisions are measured with the manifest from the head revision, so a manifest edit does not by itself move the reported change. A retained file this pull request renamed or deleted still counts as retained at the base.
  • Pull request movement uses physical additions/deletions from git diff base...head --numstat; it counts retained files too and is intentionally separate from SLOC totals.
  • Core excludes SDK kit infrastructure and vendored libraries. Standalone kits include only files below Kits/**/Sources.
  • Tests, examples, headers, build outputs, vendored libraries, and the MParticle/Sources Swift overlay are excluded.
  • Objective-C++ (.mm) is included in the Objective-C figures and removed counts.

Generated with cloc 2.10. This report is informational and does not gate migration direction.

@github-actions

Copy link
Copy Markdown

📦 SDK Size Impact Report

Measures how much the SDK adds to an app's size (with-SDK minus without-SDK).

Metric Target Branch This PR Change
App Bundle Impact 2.69 MB 2.69 MB +N/A
Executable Impact 848 bytes 848 bytes +N/A
Framework binary (ships) 2.96 MB 2.96 MB +N/A

➡️ SDK size impact change is minimal.

Where the bytes are

Component Target branch This PR Change
Executable code (__text) 1188.4 KB 1187.3 KB -1.1 KB
Swift metadata (__swift5_*) 55.3 KB 55.4 KB +0.0 KB
ObjC metadata (__objc_*) 401.9 KB 401.9 KB +0.0 KB
Symbol tables (__LINKEDIT) 816.0 KB 816.0 KB +0.0 KB
Mach-O images 2 2 +0
Exported symbols 6026 6026 +0
Debug symbols (not shipped to users)

The SDK is embedded as a dynamic framework, so the app's own executable barely
moves and App Bundle Impact is the number that tracks shipped code.
xcodebuild -create-xcframework folds the dSYM in beside the framework, so the
xcframework total is mostly debug symbols and is not a shipping cost.

Target Branch This PR
dSYMs 3.73 MB 3.73 MB
XCFramework total 6.70 MB 6.70 MB
Raw measurements

Target branch (main):

{"baseline_app_size_kb":84,"baseline_executable_size_bytes":75464,"with_sdk_app_size_kb":2836,"with_sdk_executable_size_bytes":76312,"sdk_impact_kb":2752,"sdk_executable_impact_bytes":848,"xcframework_size_kb":6860,"framework_size_kb":3036,"dsym_size_kb":3820}

This PR:

{"baseline_app_size_kb":84,"baseline_executable_size_bytes":75464,"with_sdk_app_size_kb":2836,"with_sdk_executable_size_bytes":76312,"sdk_impact_kb":2752,"sdk_executable_impact_bytes":848,"xcframework_size_kb":6860,"framework_size_kb":3036,"dsym_size_kb":3820}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants