Bump brace-expansion@2 to 5.0.12 - autoclosed by code-infra-renovate[bot] · Pull Request #5691 · mui/base-ui

code-infra-renovate · 2026-09-11T06:32:40Z

This PR contains the following updates:

Package	Change	Age	Confidence
brace-expansion@2	`2.1.7` → `5.0.12`

Release Notes

juliangruber/brace-expansion (brace-expansion@2)

fmt 5a5cc17
Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

`v4.0.0`

Compare Source

feat: use string replaces instead of splits (#64) 278132b
fmt dd72a59
add tea.yaml 70e4c1b

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

`v3.0.9`

Compare Source

`v3.0.8`

Compare Source

`v3.0.7`

Compare Source

`v3.0.6`

Compare Source

`v3.0.5`

Compare Source

`v3.0.4`

Compare Source

`v3.0.3`

Compare Source

`v3.0.2`

Compare Source

`v3.0.1`

Compare Source

pkg: publish on tag 3.x 3059c07
fmt 8229e6f
Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

`v3.0.0`

Compare Source

Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
added jsdoc (#55) 68c0e37
node 16 is EOL 9e781e9
add standard 3494c4d
use const and let (#57) dd5a4cb
docs 6dad209
remove test e3dd8ae
ci: update node versions d23ede9
docs: add @lanodan to contributors 1eb3fa4
docs 1e7c9cd
switch from tape to test module (#60) 2520537
Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
docs: add back ci badge 8ee5626
Add github actions, remove travis. Closes #52 (#53) 5c8756a
CI: Drop unused sudo: false Travis directive (#50) 05978a7

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- Between 02:00 AM and 06:59 AM, only on Friday (* 2-6 * * 5)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by self-hosted Renovate.

pkg-pr-new · 2026-09-11T06:34:15Z

base-ui-tanstack-start

vite-css-base-ui-example

pnpm add https://pkg.pr.new/mui/base-ui/@base-ui/react@5691

pnpm add https://pkg.pr.new/mui/base-ui/@base-ui/utils@5691

commit: bde22ad

code-infra-dashboard · 2026-09-11T06:35:49Z

Bundle size

Bundle	Parsed size	Gzip size
@base-ui/react	0B^(0.00%)	0B^(0.00%)

Details of bundle changes

Performance

Total duration: 1,217.21 ms +78.23 ms^(+6.9%) | Renders: 76 ⁽⁺⁰⁾ | Paint: 2,009.75 ms +110.38 ms^(+5.8%)

Test	Duration	Renders
Popover mount (300 instances)	54.57 ms 🔺+15.91 ms^(+41.1%)	1 ⁽⁺⁰⁾
Dialog mount (300 instances)	34.12 ms 🔺+9.27 ms^(+37.3%)	1 ⁽⁺⁰⁾
Combobox type — 500 items, all stay mounted (type "Row ")	31.33 ms 🔺+8.67 ms^(+38.2%)	11 ⁽⁺⁰⁾
Combobox open — 500 items	29.35 ms 🔺+7.93 ms^(+37.0%)	4 ⁽⁺⁰⁾
Combobox type — 500 items, narrows to ~11 (type "Row 25")	35.04 ms 🔺+7.86 ms^(+28.9%)	15 ⁽⁺⁰⁾

10 tests within noise — details

Metric alarms

Test	Metric	Change
Popover mount (300 instances)	bench:paint	🔺 +24.84 ms
Dialog mount (300 instances)	bench:paint	🔺 +18.23 ms
Combobox type — 500 items, all stay mounted (type "Row ")	bench:paint#combobox-open	🔺 +18.07 ms
Combobox type — 500 items, all stay mounted (type "Row ")	bench:paint	🔺 +18.07 ms
Combobox open — 500 items	bench:paint#combobox-open	🔺 +15.48 ms

…and 3 more metric alarms — details

Check out the code infra dashboard for more information about this PR.

netlify · 2026-09-11T06:40:15Z

✅ Deploy Preview for base-ui ready!

Name	Link
🔨 Latest commit	`bde22ad`
🔍 Latest deploy log	https://app.netlify.com/projects/base-ui/deploys/6aad112f4589a6000825f6be
😎 Deploy Preview	https://deploy-preview-5691--base-ui.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

brijeshb42 · 2026-09-16T03:56:19Z

not compatible. same as #5690: the brace-expansion@2 override exists for GHSA-3jxr-9vmj-r5cp, which 2.1.4 already patches. v5 has no default export, minimatch 9 (via eslint) does import expand from "brace-expansion" -

SyntaxError: The requested module 'brace-expansion' does not provide an export named 'default'

keep the override on 2.x

code-infra-renovate Bot requested review from atomiks and michaldudak as code owners September 11, 2026 06:32

code-infra-renovate Bot added the dependencies Update of dependencies. label Sep 11, 2026

code-infra-renovate Bot requested review from flaviendelangle and jjenzz as code owners September 11, 2026 06:32

github-actions Bot added the PR: out-of-date The pull request has merge conflicts and can't be merged. label Sep 16, 2026

code-infra-renovate Bot force-pushed the renovate/brace-expansion2-5.x branch from a30071b to 26e737e Compare September 16, 2026 07:22

github-actions Bot removed the PR: out-of-date The pull request has merge conflicts and can't be merged. label Sep 16, 2026

code-infra-renovate Bot force-pushed the renovate/brace-expansion2-5.x branch from 26e737e to 9eb5e50 Compare September 17, 2026 22:17

code-infra-renovate Bot changed the title ~~Bump brace-expansion@2 to 5.0.9~~ Bump brace-expansion@2 to 5.0.10 Sep 17, 2026

code-infra-renovate Bot force-pushed the renovate/brace-expansion2-5.x branch from 9eb5e50 to 6639d7e Compare September 17, 2026 23:15

code-infra-renovate Bot changed the title ~~Bump brace-expansion@2 to 5.0.10~~ Bump brace-expansion@2 to 5.0.12 Sep 17, 2026

github-actions Bot added the PR: out-of-date The pull request has merge conflicts and can't be merged. label Sep 18, 2026

Bump brace-expansion@2 to 5.0.12

bde22ad

code-infra-renovate Bot force-pushed the renovate/brace-expansion2-5.x branch from 6639d7e to bde22ad Compare September 18, 2026 10:23

github-actions Bot removed the PR: out-of-date The pull request has merge conflicts and can't be merged. label Sep 18, 2026

This was referenced Oct 2, 2026

[code-infra] Cap brace-expansion override majors mui/mui-public#1914

Closed

[code-infra] Cap brace-expansion override majors #5690

Merged

code-infra-renovate Bot changed the title ~~Bump brace-expansion@2 to 5.0.12~~ Bump brace-expansion@2 to 5.0.12 - autoclosed Oct 2, 2026

code-infra-renovate Bot closed this Oct 2, 2026

code-infra-renovate Bot deleted the renovate/brace-expansion2-5.x branch October 2, 2026 08:27

Navigation Menu

Repository navigation

Bump brace-expansion@2 to 5.0.12 - autoclosed - #5691

Bump brace-expansion@2 to 5.0.12 - autoclosed#5691
code-infra-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/brace-expansion2-5.x

code-infra-renovate Bot commented Sep 11, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Sep 11, 2026 •

edited

Loading

Uh oh!

code-infra-dashboard Bot commented Sep 11, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 11, 2026 •

edited

Loading

Uh oh!

brijeshb42 commented Sep 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

code-infra-renovate Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

pkg-pr-new Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

code-infra-dashboard Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bundle size

Performance

Uh oh!

netlify Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for base-ui ready!

Uh oh!

brijeshb42 commented Sep 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

code-infra-renovate Bot commented Sep 11, 2026 •

edited

Loading

pkg-pr-new Bot commented Sep 11, 2026 •

edited

Loading

code-infra-dashboard Bot commented Sep 11, 2026 •

edited

Loading

netlify Bot commented Sep 11, 2026 •

edited

Loading