No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

image.png

Hi all! I have this dependabot alert about "brace-expansion Regular Expression Denial of Service vulnerability" for a while now, anything I can do to avoid it ?

And I can't find any related issue in pulumi github

I think this comes from our arborist dependency, which we've had a long standing issue to remove but for back-compat reasons that's been hard