chore: bump brace-expansion from 1.1.11 to 1.1.18 in /RNExample

[dependabot]

Bumps brace-expansion from 1.1.11 to 1.1.18.

Release notes

Sourced from brace-expansion's releases.

v1.1.15

• Backport v5.0.6 change to v1 (#111) 0b09384

---

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

• pkg: publish on tag 1.x c460dbd
• fmt ccb8ac6
• Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

---

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

• 758fcd6 1.1.18
• 27fbeed Merge commit from fork
• 5c57cc2 1.1.17
• d757f1d npm ignore .claude
• cb4b9e4 fix: backport GHSA-mh99-v99m-4gvg (#129)
• 447763a 1.1.16
• d74e630 fix: v1 backport for CVE-2026-13149 (#122)
• 2203f4f 1.1.15
• 0b09384 Backport v5.0.6 change to v1 (#111)
• 10c05fc 1.1.14
• Additional commits viewable in compare view

[cursor]

PR Summary

Low Risk
Lockfile-only dev/build transitive dependency bumps with no application source changes; typical low-risk maintenance with possible minor tooling behavior changes in edge cases.

Overview
Updates RNExample/package-lock.json only—no package.json changes. Transitive brace-expansion entries move from 1.1.11 → 1.1.18 under ESLint, glob, Jest coverage, and related tooling trees, and the hoisted top-level copy moves from 2.0.2 → 2.1.4.

This is a dependency refresh for glob/minimatch-style path expansion used at build and lint time, aligning with upstream fixes (including ReDoS and published security backports on the 1.x line).

^{Reviewed by Cursor Bugbot for commit 21ec89f. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

📦 SDK Size Impact Report

Measures how much the SDK adds to an app's size (with-SDK minus without-SDK).

Metric	Target Branch	This PR	Change
App Bundle Impact	1.81 MB	1.81 MB	+N/A
Executable Impact	848 bytes	848 bytes	+N/A
XCFramework Size	6.51 MB	6.51 MB	+N/A

➡️ SDK size impact change is minimal.

Raw measurements

Target branch (main):

{"baseline_app_size_kb":84,"baseline_executable_size_bytes":75464,"with_sdk_app_size_kb":1936,"with_sdk_executable_size_bytes":76312,"sdk_impact_kb":1852,"sdk_executable_impact_bytes":848,"xcframework_size_kb":6664}

This PR:

{"baseline_app_size_kb":84,"baseline_executable_size_bytes":75464,"with_sdk_app_size_kb":1936,"with_sdk_executable_size_bytes":76312,"sdk_impact_kb":1852,"sdk_executable_impact_bytes":848,"xcframework_size_kb":6664}

[nickolas-dimitrakas]

Approving. Lockfile-only, dev dependencies only, and it carries the ReDoS fix plus the GHSA-mh99-v99m-4gvg backport.

The one red check is native-tests / native-unit-tests (iOS, mParticle-Apple-SDK) — an Xcode suite that can't be affected by RNExample/package-lock.json. RNExample isn't built on PRs at all right now, since build-secondary-platforms is commented out of pull-request.yml.