[Aikido] Fix security issue in braces via minor version upgrade from 3.0.2 to 3.0.3

[aikido-autofix]

Upgrade braces to fix Memory Exhaustion vulnerability (CVE-2024-4068) caused by uncontrolled character handling in imbalanced brace parsing.

✅ There are no breaking changes

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
CVE-2024-4068	HIGH	[braces] A parsing vulnerability allows attackers to cause memory exhaustion and denial of service by sending imbalanced braces as input, triggering an infinite loop that continuously allocates heap memory without freeing it until the process crashes.

🤖 Remediation details

Fix CVE-2024-4068: upgrade transitive braces to 3.0.3

What was fixed: The transitive dependency braces was resolved at a vulnerable version (3.0.2) in the root yarn.lock. This PR refreshes the lockfile so braces resolves to the patched version 3.0.3. No package.json manifest changes were required or retained.

braces

braces@3.0.2 was pulled in transitively by micromatch@4.0.4 via the selector braces@^3.0.1. Because the existing range already admitted 3.0.3, no manifest edit was needed — running yarn upgrade 'braces@^3.0.1' was sufficient to refresh the lockfile entry to the patched version. yarn upgrade (Yarn Classic) incidentally added braces as a direct dependency in package.json; that accidental entry was removed immediately and a final yarn install confirmed the fix is lockfile-only, with braces remaining a transitive-only dependency under micromatch.

Version changes

Package	From	To	Why updated
braces	3.0.2	3.0.3	Direct CVE fix (lockfile refresh only; transitive via micromatch)

[gitstream-cm]

🚨 gitStream Monthly Automation Limit Reached 🚨

Your organization has exceeded the number of pull requests allowed for automation with gitStream.
Monthly PRs automated: 250/250

To continue automating your PR workflows and unlock additional features, please contact LinearB.

[pr-auditor]

✅ Security Analysis Results

Great news! No security issues found in this pull request.

Analysis Summary:

• 📁 Files reviewed: 1
• ✅ No security vulnerabilities detected

---

💡 Trigger a new security scan by commenting @pr-auditor rescan on this PR.

Security analysis powered by Claude Sonnet 4.6 via pr-auditor | Questions? Contact #dx-team or check out this page