chore: upgrade brace-expansion to 5.0.9, 2.1.4, 1.1.18 [release-1.10]

[Omar-AlJaljuli]

Description

brace-expansion vulnerable due to CVE-2026-69152. Fix by upgrading brace-expansion to versions 5.0.9, 2.1.4, 1.1.18.

Upgrade done using simple 'yarn up -R ...'

Which issue(s) does this PR fix

• Fixes RHIDP-15981

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5219
• quay.io/rhdh-community/rhdh:pr-5219-b86b7214

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.24%. Comparing base (c7baf11) to head (b86b721).
⚠️ Report is 1 commits behind head on release-1.10.

Additional details and impacted files

@@                Coverage Diff                @@
##           release-1.10    #5219       +/-   ##
=================================================
+ Coverage         41.03%   69.24%   +28.21%     
=================================================
  Files               121      123        +2     
  Lines              2220     4920     +2700     
  Branches            563      563               
=================================================
+ Hits                911     3407     +2496     
- Misses             1304     1507      +203     
- Partials              5        6        +1     

Flag	Coverage Δ
install-dynamic-plugins	92.44% <ø> (?)
rhdh	41.03% <ø> (ø)

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c7baf11...b86b721. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.