cloudstructs 0.12.10 → 0.12.11

package/node_modules/axios/lib/adapters/fetch.js

@@ -66,8 +66,10 @@ const factory = (env) => {
     test(() => {
       let duplexAccessed = false;
 
+      const body = new ReadableStream();
+
       const hasContentType = new Request(platform.origin, {
-        body: new ReadableStream(),
+        body,
         method: 'POST',
         get duplex() {
           duplexAccessed = true;
@@ -75,6 +77,8 @@ const factory = (env) => {
         },
       }).headers.has('Content-Type');
 
+      body.cancel();
+
       return duplexAccessed && !hasContentType;
     });
 

package/node_modules/axios/lib/adapters/http.js

@@ -2,7 +2,7 @@ import utils from '../utils.js';
 import settle from '../core/settle.js';
 import buildFullPath from '../core/buildFullPath.js';
 import buildURL from '../helpers/buildURL.js';
-import proxyFromEnv from 'proxy-from-env';
+import { getProxyForUrl } from 'proxy-from-env';
 import http from 'http';
 import https from 'https';
 import http2 from 'http2';
@@ -23,6 +23,7 @@ import formDataToStream from '../helpers/formDataToStream.js';
 import readBlob from '../helpers/readBlob.js';
 import ZlibHeaderTransformStream from '../helpers/ZlibHeaderTransformStream.js';
 import callbackify from '../helpers/callbackify.js';
+import shouldBypassProxy from '../helpers/shouldBypassProxy.js';
 import {
   progressEventReducer,
   progressEventDecorator,
@@ -108,6 +109,9 @@ class Http2Sessions {
           } else {
             entries.splice(i, 1);
           }
+          if (!session.closed) {
+            session.close();
+          }
           return;
         }
       }
@@ -187,9 +191,11 @@ function dispatchBeforeRedirect(options, responseDetails) {
 function setProxy(options, configProxy, location) {
   let proxy = configProxy;
   if (!proxy && proxy !== false) {
-    const proxyUrl = proxyFromEnv.getProxyForUrl(location);
+    const proxyUrl = getProxyForUrl(location);
     if (proxyUrl) {
-      proxy = new URL(proxyUrl);
+      if (!shouldBypassProxy(location)) {
+        proxy = new URL(proxyUrl);
+      }
     }
   }
   if (proxy) {
@@ -665,7 +671,6 @@ export default isHttpAdapterSupported &&
           protocol + '//' + parsed.hostname + (parsed.port ? ':' + parsed.port : '') + options.path
         );
       }
-
       let transport;
       const isHttpsRequest = isHttps.test(options.protocol);
       options.agent = isHttpsRequest ? config.httpsAgent : config.httpAgent;

package/node_modules/axios/lib/core/Axios.js

@@ -46,13 +46,29 @@ class Axios {
         Error.captureStackTrace ? Error.captureStackTrace(dummy) : (dummy = new Error());
 
         // slice off the Error: ... line
-        const stack = dummy.stack ? dummy.stack.replace(/^.+\n/, '') : '';
+        const stack = (() => {
+          if (!dummy.stack) {
+            return '';
+          }
+
+          const firstNewlineIndex = dummy.stack.indexOf('\n');
+
+          return firstNewlineIndex === -1 ? '' : dummy.stack.slice(firstNewlineIndex + 1);
+        })();
         try {
           if (!err.stack) {
             err.stack = stack;
             // match without the 2 top stack lines
-          } else if (stack && !String(err.stack).endsWith(stack.replace(/^.+\n.+\n/, ''))) {
-            err.stack += '\n' + stack;
+          } else if (stack) {
+            const firstNewlineIndex = stack.indexOf('\n');
+            const secondNewlineIndex =
+              firstNewlineIndex === -1 ? -1 : stack.indexOf('\n', firstNewlineIndex + 1);
+            const stackWithoutTwoTopLines =
+              secondNewlineIndex === -1 ? '' : stack.slice(secondNewlineIndex + 1);
+
+            if (!String(err.stack).endsWith(stackWithoutTwoTopLines)) {
+              err.stack += '\n' + stack;
+            }
           }
         } catch (e) {
           // ignore the case where "stack" is an un-writable property
@@ -236,8 +252,6 @@ utils.forEach(['delete', 'get', 'head', 'options'], function forEachMethodNoData
 });
 
 utils.forEach(['post', 'put', 'patch'], function forEachMethodWithData(method) {
-  /*eslint func-names:0*/
-
   function generateHTTPMethod(isForm) {
     return function httpMethod(url, data, config) {
       return this.request(

package/node_modules/axios/lib/core/AxiosHeaders.js

@@ -5,16 +5,49 @@ import parseHeaders from '../helpers/parseHeaders.js';
 
 const $internals = Symbol('internals');
 
+const isValidHeaderValue = (value) => !/[\r\n]/.test(value);
+
+function assertValidHeaderValue(value, header) {
+  if (value === false || value == null) {
+    return;
+  }
+
+  if (utils.isArray(value)) {
+    value.forEach((v) => assertValidHeaderValue(v, header));
+    return;
+  }
+
+  if (!isValidHeaderValue(String(value))) {
+    throw new Error(`Invalid character in header content ["${header}"]`);
+  }
+}
+
 function normalizeHeader(header) {
   return header && String(header).trim().toLowerCase();
 }
 
+function stripTrailingCRLF(str) {
+  let end = str.length;
+
+  while (end > 0) {
+    const charCode = str.charCodeAt(end - 1);
+
+    if (charCode !== 10 && charCode !== 13) {
+      break;
+    }
+
+    end -= 1;
+  }
+
+  return end === str.length ? str : str.slice(0, end);
+}
+
 function normalizeValue(value) {
   if (value === false || value == null) {
     return value;
   }
 
-  return utils.isArray(value) ? value.map(normalizeValue) : String(value);
+  return utils.isArray(value) ? value.map(normalizeValue) : stripTrailingCRLF(String(value));
 }
 
 function parseTokens(str) {
@@ -96,6 +129,7 @@ class AxiosHeaders {
         _rewrite === true ||
         (_rewrite === undefined && self[key] !== false)
       ) {
+        assertValidHeaderValue(_value, _header);
         self[key || _header] = normalizeValue(_value);
       }
     }

package/node_modules/axios/lib/env/data.js

@@ -1 +1 @@
-export const VERSION = "1.13.6";
+export const VERSION = "1.15.0";

package/node_modules/axios/lib/helpers/buildURL.js

@@ -4,8 +4,8 @@ import utils from '../utils.js';
 import AxiosURLSearchParams from '../helpers/AxiosURLSearchParams.js';
 
 /**
- * It replaces all instances of the characters `:`, `$`, `,`, `+`, `[`, and `]` with their
- * URI encoded counterparts
+ * It replaces URL-encoded forms of `:`, `$`, `,`, and spaces with
+ * their plain counterparts (`:`, `$`, `,`, `+`).
  *
  * @param {string} val The value to be encoded.
  *

package/node_modules/axios/lib/helpers/shouldBypassProxy.js

@@ -0,0 +1,106 @@
+const DEFAULT_PORTS = {
+  http: 80,
+  https: 443,
+  ws: 80,
+  wss: 443,
+  ftp: 21,
+};
+
+const parseNoProxyEntry = (entry) => {
+  let entryHost = entry;
+  let entryPort = 0;
+
+  if (entryHost.charAt(0) === '[') {
+    const bracketIndex = entryHost.indexOf(']');
+
+    if (bracketIndex !== -1) {
+      const host = entryHost.slice(1, bracketIndex);
+      const rest = entryHost.slice(bracketIndex + 1);
+
+      if (rest.charAt(0) === ':' && /^\d+$/.test(rest.slice(1))) {
+        entryPort = Number.parseInt(rest.slice(1), 10);
+      }
+
+      return [host, entryPort];
+    }
+  }
+
+  const firstColon = entryHost.indexOf(':');
+  const lastColon = entryHost.lastIndexOf(':');
+
+  if (
+    firstColon !== -1 &&
+    firstColon === lastColon &&
+    /^\d+$/.test(entryHost.slice(lastColon + 1))
+  ) {
+    entryPort = Number.parseInt(entryHost.slice(lastColon + 1), 10);
+    entryHost = entryHost.slice(0, lastColon);
+  }
+
+  return [entryHost, entryPort];
+};
+
+const normalizeNoProxyHost = (hostname) => {
+  if (!hostname) {
+    return hostname;
+  }
+
+  if (hostname.charAt(0) === '[' && hostname.charAt(hostname.length - 1) === ']') {
+    hostname = hostname.slice(1, -1);
+  }
+
+  return hostname.replace(/\.+$/, '');
+};
+
+export default function shouldBypassProxy(location) {
+  let parsed;
+
+  try {
+    parsed = new URL(location);
+  } catch (_err) {
+    return false;
+  }
+
+  const noProxy = (process.env.no_proxy || process.env.NO_PROXY || '').toLowerCase();
+
+  if (!noProxy) {
+    return false;
+  }
+
+  if (noProxy === '*') {
+    return true;
+  }
+
+  const port =
+    Number.parseInt(parsed.port, 10) || DEFAULT_PORTS[parsed.protocol.split(':', 1)[0]] || 0;
+
+  const hostname = normalizeNoProxyHost(parsed.hostname.toLowerCase());
+
+  return noProxy.split(/[\s,]+/).some((entry) => {
+    if (!entry) {
+      return false;
+    }
+
+    let [entryHost, entryPort] = parseNoProxyEntry(entry);
+
+    entryHost = normalizeNoProxyHost(entryHost);
+
+    if (!entryHost) {
+      return false;
+    }
+
+    if (entryPort && entryPort !== port) {
+      return false;
+    }
+
+    if (entryHost.charAt(0) === '*') {
+      entryHost = entryHost.slice(1);
+    }
+
+    if (entryHost.charAt(0) === '.') {
+      return hostname.endsWith(entryHost);
+    }
+
+    return hostname === entryHost;
+  });
+}

package/node_modules/axios/package.json

@@ -1,9 +1,14 @@
 {
   "name": "axios",
-  "version": "1.13.6",
+  "version": "1.15.0",
   "description": "Promise based HTTP client for the browser and node.js",
-  "main": "./index.js",
+  "main": "./dist/node/axios.cjs",
   "module": "./index.js",
+  "type": "module",
+  "types": "index.d.ts",
+  "jsdelivr": "dist/axios.min.js",
+  "unpkg": "dist/axios.min.js",
+  "typings": "./index.d.ts",
   "exports": {
     ".": {
       "types": {
@@ -42,30 +47,17 @@
     "./dist/browser/axios.cjs": "./dist/browser/axios.cjs",
     "./dist/node/axios.cjs": "./dist/node/axios.cjs"
   },
-  "type": "module",
-  "types": "index.d.ts",
-  "scripts": {
-    "test": "npm run test:node && npm run test:browser && npm run test:package",
-    "test:node": "npm run test:mocha",
-    "test:node:coverage": "c8 npm run test:mocha",
-    "test:browser": "npm run test:karma",
-    "test:package": "npm run test:eslint && npm run test:exports",
-    "test:eslint": "node bin/ssl_hotfix.js eslint lib/**/*.js",
-    "test:mocha": "node bin/ssl_hotfix.js mocha test/unit/**/*.js --timeout 30000 --exit",
-    "test:exports": "node bin/ssl_hotfix.js mocha test/module/test.js --timeout 30000 --exit",
-    "test:karma": "node ./bin/run-karma-tests.js",
-    "test:karma:firefox": "node bin/ssl_hotfix.js cross-env LISTEN_ADDR=:: Browsers=Firefox karma start karma.conf.cjs --single-run",
-    "test:karma:server": "node bin/ssl_hotfix.js cross-env karma start karma.conf.cjs",
-    "test:build:version": "node ./bin/check-build-version.js",
-    "start": "node ./sandbox/server.js",
-    "preversion": "gulp version",
-    "version": "npm run build && git add package.json",
-    "prepublishOnly": "npm run test:build:version",
-    "build": "gulp clear && cross-env NODE_ENV=production rollup -c -m",
-    "examples": "node ./examples/server.js",
-    "fix": "eslint --fix lib/**/*.js",
-    "prepare": "husky install && npm run prepare:hooks",
-    "prepare:hooks": "npx husky set .husky/commit-msg \"npx commitlint --edit $1\""
+  "browser": {
+    "./dist/node/axios.cjs": "./dist/browser/axios.cjs",
+    "./lib/adapters/http.js": "./lib/helpers/null.js",
+    "./lib/platform/node/index.js": "./lib/platform/browser/index.js",
+    "./lib/platform/node/classes/FormData.js": "./lib/helpers/null.js"
+  },
+  "react-native": {
+    "./dist/node/axios.cjs": "./dist/browser/axios.cjs",
+    "./lib/adapters/http.js": "./lib/helpers/null.js",
+    "./lib/platform/node/index.js": "./lib/platform/browser/index.js",
+    "./lib/platform/node/classes/FormData.js": "./lib/helpers/null.js"
   },
   "repository": {
     "type": "git",
@@ -84,113 +76,102 @@
     "client"
   ],
   "author": "Matt Zabriskie",
+  "contributors": [
+    "Matt Zabriskie (https://github.com/mzabriskie)",
+    "Jay (https://github.com/jasonsaayman)",
+    "Dmitriy Mozgovoy (https://github.com/DigitalBrainJS)",
+    "Nick Uraltsev (https://github.com/nickuraltsev)",
+    "Emily Morehouse (https://github.com/emilyemorehouse)",
+    "Rubén Norte (https://github.com/rubennorte)",
+    "Justin Beckwith (https://github.com/JustinBeckwith)",
+    "Martti Laine (https://github.com/codeclown)",
+    "Xianming Zhong (https://github.com/chinesedfan)",
+    "Remco Haszing (https://github.com/remcohaszing)",
+    "Willian Agostini (https://github.com/WillianAgostini)",
+    "Rikki Gibson (https://github.com/RikkiGibson)",
+    "Ben Carp (https://github.com/carpben)"
+  ],
+  "sideEffects": false,
   "license": "MIT",
   "bugs": {
     "url": "https://github.com/axios/axios/issues"
   },
   "homepage": "https://axios-http.com",
+  "scripts": {
+    "build": "gulp clear && cross-env NODE_ENV=production rollup -c -m",
+    "version": "npm run build && git add package.json",
+    "preversion": "gulp version",
+    "test": "npm run test:vitest",
+    "test:vitest": "vitest run",
+    "test:vitest:unit": "vitest run --project unit",
+    "test:vitest:browser": "vitest run --project browser",
+    "test:vitest:browser:headless": "vitest run --project browser-headless",
+    "test:vitest:watch": "vitest",
+    "test:smoke:cjs:vitest": "npm --prefix tests/smoke/cjs run test:smoke:cjs:mocha",
+    "test:smoke:esm:vitest": "npm --prefix tests/smoke/esm run test:smoke:esm:vitest",
+    "test:smoke:deno": "deno task --cwd tests/smoke/deno test",
+    "test:smoke:bun": "bun test --cwd tests/smoke/bun",
+    "test:module:cjs": "npm --prefix tests/module/cjs run test:module:cjs",
+    "test:module:esm": "npm --prefix tests/module/esm run test:module:esm",
+    "docs:dev": "cd docs && npm run docs:dev",
+    "start": "node ./sandbox/server.js",
+    "examples": "node ./examples/server.js",
+    "lint": "eslint lib/**/*.js",
+    "fix": "eslint --fix lib/**/*.js",
+    "prepare": "husky"
+  },
+  "dependencies": {
+    "follow-redirects": "^1.15.11",
+    "form-data": "^4.0.5",
+    "proxy-from-env": "^2.1.0"
+  },
   "devDependencies": {
-    "@babel/core": "^7.28.6",
-    "@babel/preset-env": "^7.28.6",
-    "@commitlint/cli": "^20.3.1",
-    "@commitlint/config-conventional": "^20.3.1",
-    "@rollup/plugin-alias": "^5.1.1",
-    "@rollup/plugin-babel": "^6.1.0",
-    "@rollup/plugin-commonjs": "^15.1.0",
-    "@rollup/plugin-json": "^4.1.0",
-    "@rollup/plugin-multi-entry": "^4.1.0",
-    "@rollup/plugin-node-resolve": "^9.0.0",
+    "@babel/core": "^7.29.0",
+    "@babel/preset-env": "^7.29.0",
+    "@commitlint/cli": "^20.4.4",
+    "@commitlint/config-conventional": "^20.4.4",
+    "@eslint/js": "^10.0.1",
+    "@rollup/plugin-alias": "^6.0.0",
+    "@rollup/plugin-babel": "^7.0.0",
+    "@rollup/plugin-commonjs": "^29.0.2",
+    "@rollup/plugin-json": "^6.1.0",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@rollup/plugin-terser": "^1.0.0",
+    "@vitest/browser": "^4.1.1",
+    "@vitest/browser-playwright": "^4.1.1",
     "abortcontroller-polyfill": "^1.7.8",
     "auto-changelog": "^2.5.0",
-    "body-parser": "^1.20.4",
-    "c8": "^10.1.3",
+    "body-parser": "^2.2.2",
     "chalk": "^5.6.2",
-    "coveralls": "^3.1.1",
-    "cross-env": "^7.0.3",
+    "cross-env": "^10.1.0",
     "dev-null": "^0.1.1",
-    "es6-promise": "^4.2.8",
-    "eslint": "^8.57.1",
-    "express": "^4.22.1",
-    "formdata-node": "^5.0.1",
-    "formidable": "^2.1.5",
-    "fs-extra": "^10.1.0",
-    "get-stream": "^3.0.0",
-    "gulp": "^4.0.2",
+    "eslint": "^10.1.0",
+    "express": "^5.2.1",
+    "formdata-node": "^6.0.3",
+    "formidable": "^3.2.4",
+    "fs-extra": "^11.3.4",
+    "get-stream": "^9.0.1",
+    "globals": "^17.4.0",
+    "gulp": "^5.0.1",
     "handlebars": "^4.7.8",
-    "husky": "^8.0.3",
-    "istanbul-instrumenter-loader": "^3.0.1",
-    "jasmine-core": "^2.99.1",
-    "karma": "^6.4.4",
-    "karma-chrome-launcher": "^3.2.0",
-    "karma-firefox-launcher": "^2.1.3",
-    "karma-jasmine": "^1.1.2",
-    "karma-jasmine-ajax": "^0.1.13",
-    "karma-rollup-preprocessor": "^7.0.8",
-    "karma-safari-launcher": "^1.0.0",
-    "karma-sauce-launcher": "^4.3.6",
-    "karma-sinon": "^1.0.5",
-    "karma-sourcemap-loader": "^0.4.0",
-    "lint-staged": "^15.2.10",
+    "husky": "^9.1.7",
+    "lint-staged": "^16.4.0",
     "memoizee": "^0.4.17",
     "minimist": "^1.2.8",
-    "mocha": "^10.8.2",
-    "multer": "^1.4.4",
-    "pacote": "^20.0.0",
+    "multer": "^2.1.1",
+    "pacote": "^21.5.0",
+    "playwright": "^1.58.2",
     "prettier": "^3.8.1",
-    "pretty-bytes": "^6.1.1",
-    "rollup": "^2.79.2",
-    "rollup-plugin-auto-external": "^2.0.0",
+    "pretty-bytes": "^7.1.0",
+    "rollup": "^4.60.0",
     "rollup-plugin-bundle-size": "^1.0.3",
-    "rollup-plugin-terser": "^7.0.2",
-    "selfsigned": "^3.0.1",
-    "sinon": "^4.5.0",
+    "selfsigned": "^5.5.0",
     "stream-throttle": "^0.1.3",
     "string-replace-async": "^3.0.2",
-    "tar-stream": "^3.1.7",
-    "typescript": "^4.9.5"
+    "tar-stream": "^3.1.8",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.1"
   },
-  "browser": {
-    "./dist/node/axios.cjs": "./dist/browser/axios.cjs",
-    "./lib/adapters/http.js": "./lib/helpers/null.js",
-    "./lib/platform/node/index.js": "./lib/platform/browser/index.js",
-    "./lib/platform/node/classes/FormData.js": "./lib/helpers/null.js"
-  },
-  "react-native": {
-    "./dist/node/axios.cjs": "./dist/browser/axios.cjs",
-    "./lib/adapters/http.js": "./lib/helpers/null.js",
-    "./lib/platform/node/index.js": "./lib/platform/browser/index.js",
-    "./lib/platform/node/classes/FormData.js": "./lib/helpers/null.js"
-  },
-  "jsdelivr": "dist/axios.min.js",
-  "unpkg": "dist/axios.min.js",
-  "typings": "./index.d.ts",
-  "dependencies": {
-    "follow-redirects": "^1.15.11",
-    "form-data": "^4.0.5",
-    "proxy-from-env": "^1.1.0"
-  },
-  "bundlesize": [
-    {
-      "path": "./dist/axios.min.js",
-      "threshold": "5kB"
-    }
-  ],
-  "contributors": [
-    "Matt Zabriskie (https://github.com/mzabriskie)",
-    "Dmitriy Mozgovoy (https://github.com/DigitalBrainJS)",
-    "Nick Uraltsev (https://github.com/nickuraltsev)",
-    "Jay (https://github.com/jasonsaayman)",
-    "Emily Morehouse (https://github.com/emilyemorehouse)",
-    "Rubén Norte (https://github.com/rubennorte)",
-    "Justin Beckwith (https://github.com/JustinBeckwith)",
-    "Martti Laine (https://github.com/codeclown)",
-    "Xianming Zhong (https://github.com/chinesedfan)",
-    "Remco Haszing (https://github.com/remcohaszing)",
-    "Willian Agostini (https://github.com/WillianAgostini)",
-    "Rikki Gibson (https://github.com/RikkiGibson)",
-    "Ben Carp (https://github.com/carpben)"
-  ],
-  "sideEffects": false,
   "commitlint": {
     "rules": {
       "header-max-length": [
@@ -205,22 +186,5 @@
   },
   "lint-staged": {
     "*.{js,cjs,mjs,ts,json,md,yml,yaml}": "prettier --write"
-  },
-  "c8": {
-    "all": true,
-    "include": [
-      "lib/**/*.js",
-      "lib/**/*.ts"
-    ],
-    "exclude": [
-      "test",
-      "sandbox"
-    ],
-    "reporter": [
-      "text",
-      "lcov",
-      "html"
-    ],
-    "report-dir": "./coverage"
   }
 }

package/node_modules/editorconfig/node_modules/brace-expansion/index.js

@@ -61,10 +61,13 @@ function parseCommaParts(str) {
   return parts;
 }
 
-function expandTop(str) {
+function expandTop(str, options) {
   if (!str)
     return [];
 
+  options = options || {};
+  var max = options.max == null ? Infinity : options.max;
+
   // I don't know why Bash 4.3 does this, but it does.
   // Anything starting with {} will have the first two bytes preserved
   // but *only* at the top level, so {},a}b will not expand to anything,
@@ -75,7 +78,7 @@ function expandTop(str) {
     str = '\\{\\}' + str.substr(2);
   }
 
-  return expand(escapeBraces(str), true).map(unescapeBraces);
+  return expand(escapeBraces(str), max, true).map(unescapeBraces);
 }
 
 function embrace(str) {
@@ -92,7 +95,7 @@ function gte(i, y) {
   return i >= y;
 }
 
-function expand(str, isTop) {
+function expand(str, max, isTop) {
   var expansions = [];
 
   var m = balanced('{', '}', str);
@@ -101,11 +104,11 @@ function expand(str, isTop) {
   // no need to expand pre, since it is guaranteed to be free of brace-sets
   var pre = m.pre;
   var post = m.post.length
-    ? expand(m.post, false)
+    ? expand(m.post, max, false)
     : [''];
 
   if (/\$$/.test(m.pre)) {    
-    for (var k = 0; k < post.length; k++) {
+    for (var k = 0; k < post.length && k < max; k++) {
       var expansion = pre+ '{' + m.body + '}' + post[k];
       expansions.push(expansion);
     }
@@ -118,7 +121,7 @@ function expand(str, isTop) {
       // {a},b}
       if (m.post.match(/,(?!,).*\}/)) {
         str = m.pre + '{' + m.body + escClose + m.post;
-        return expand(str);
+        return expand(str, max, true);
       }
       return [str];
     }
@@ -130,7 +133,7 @@ function expand(str, isTop) {
       n = parseCommaParts(m.body);
       if (n.length === 1) {
         // x{{a,b}}y ==> x{a}y x{b}y
-        n = expand(n[0], false).map(embrace);
+        n = expand(n[0], max, false).map(embrace);
         if (n.length === 1) {
           return post.map(function(p) {
             return m.pre + n[0] + p;
@@ -148,7 +151,7 @@ function expand(str, isTop) {
       var y = numeric(n[1]);
       var width = Math.max(n[0].length, n[1].length)
       var incr = n.length == 3
-        ? Math.abs(numeric(n[2]))
+        ? Math.max(Math.abs(numeric(n[2])), 1)
         : 1;
       var test = lte;
       var reverse = y < x;
@@ -185,12 +188,12 @@ function expand(str, isTop) {
       N = [];
 
       for (var j = 0; j < n.length; j++) {
-        N.push.apply(N, expand(n[j], false));
+        N.push.apply(N, expand(n[j], max, false));
       }
     }
 
     for (var j = 0; j < N.length; j++) {
-      for (var k = 0; k < post.length; k++) {
+      for (var k = 0; k < post.length && expansions.length < max; k++) {
         var expansion = pre + N[j] + post[k];
         if (!isTop || isSequence || expansion)
           expansions.push(expansion);
@@ -200,4 +203,3 @@ function expand(str, isTop) {
 
   return expansions;
 }
-

package/node_modules/editorconfig/node_modules/brace-expansion/package.json

@@ -1,7 +1,7 @@
 {
   "name": "brace-expansion",
   "description": "Brace expansion as known from sh/bash",
-  "version": "2.0.2",
+  "version": "2.1.0",
   "repository": {
     "type": "git",
     "url": "git://github.com/juliangruber/brace-expansion.git"