chore(deps): update dependency brace-expansion to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
brace-expansion	2.0.2 -> 4.0.1

---

Release Notes

juliangruber/brace-expansion (brace-expansion)

v4.0.1

Compare Source

• fmt 5a5cc17
• Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#​65) 0b6a978

---

v4.0.0

Compare Source

• feat: use string replaces instead of splits (#​64) 278132b
• fmt dd72a59
• add tea.yaml 70e4c1b

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

v3.0.1

Compare Source

• pkg: publish on tag 3.x 3059c07
• fmt 8229e6f
• Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#​65) 15f9b3c

---

v3.0.0

Compare Source

• Switch to ES Modules and balanced-match 3.0.0 (#​62) c0360e8
• added jsdoc (#​55) 68c0e37
• node 16 is EOL 9e781e9
• add standard 3494c4d
• use const and let (#​57) dd5a4cb
• docs 6dad209
• remove test e3dd8ae
• ci: update node versions d23ede9
• docs: add @​lanodan to contributors 1eb3fa4
• docs 1e7c9cd
• switch from tape to test module (#​60) 2520537
• Bump minimist from 1.2.5 to 1.2.6 (#​59) 61a94f1
• Bump path-parse from 1.0.6 to 1.0.7 (#​51) dc741cf
• docs: add back ci badge 8ee5626
• Add github actions, remove travis. Closes #​52 (#​53) 5c8756a
• CI: Drop unused sudo: false Travis directive (#​50) 05978a7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Join our Discord community for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

• Visit our Status Page to check the current availability of CodeRabbit.
• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[github-actions]

Apollo Federation Subgraph Compatibility Results

Federation 1 Support	Federation 2 Support
_service 🟢 @key (single) 🟢 @key (multi) 🟢 @key (composite) 🟢 repeatable @key 🟢 @requires 🟢 @provides 🟢 federated tracing 🟢	@link 🟢 @shareable 🟢 @tag 🟢 @override 🟢 @inaccessible 🟢 @composeDirective 🟢 @interfaceObject 🟢

Learn more:

• Apollo Federation Subgraph Specification
• Compatibility Tests

[github-actions]

💻 Website Preview

The latest changes are available as preview in:

[github-actions]

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
@graphql-mesh/compose-cli	1.4.12-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/fusion-composition	0.8.11-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/apollo-link	0.106.7-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/cli	0.100.8-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/config	0.108.8-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/openapi	0.109.14-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/http	0.106.7-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/migrate-config-cli	1.6.13-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/runtime	0.106.7-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/urql-exchange	0.106.7-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@omnigraph/openapi	0.109.14-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-live-query	0.104.7-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-newrelic	0.104.8-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-operation-field-permissions	0.104.7-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-rate-limit	0.104.7-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-response-cache	0.104.8-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-statsd	0.104.8-alpha-20250721172031-9a95fe0d53b2ec0086b35584a20e8f400712e4eb	npm ↗︎ unpkg ↗︎