Update dependencies with actionable security alerts

Dependency updates

Please update the dependencies listed above to at least the required versions.

Requirements

• Do not use force flags, dependency-resolution overrides, or equivalent mechanisms to bypass
  compatibility or security checks.
• For package-lock.json files, use npm 11.10.0 or newer, and run every npm install and npm update command with --min-release-age 7.
• Do not create or update .npmrc files.
• Keep the changes focused on these dependency updates and any directly required lockfile changes.
• Run the repository's relevant tests and validation after making the updates.

先从仓库提到的依赖清单和 package-lock.json 文件开始，然后检查当前的 brace-expansion 条目及其依赖上下文。使用 npm 11.10.0 或更高版本，并设置所需的七天发布时长，将 brace-expansion 更新到至少 2.1.3，随后运行仓库相关的测试和验证。