Bump brace-expansion and hds-react

[dependabot]

Removes brace-expansion. It's no longer used after updating ancestor dependency hds-react. These dependencies need to be updated together.

Removes brace-expansion

Updates hds-react from 5.2.0 to 6.0.5

Release notes

Sourced from hds-react's releases.

v6.0.5

[6.0.5] - July, 17, 2026

Workspace

Changed

• [Dependencies] Updated pnpm to 11.13.1 and refreshed same-major dependencies across the monorepo (React 19.2.x, Storybook 8.6.x, PostCSS, Playwright, and related tooling).

React

Fixed

• [ssr] Fixed getCriticalHdsRules and hdsStyles critical CSS extraction for components that use nested CSS. Nested selectors are now flattened during the build and when styles are parsed, so SSR can correctly match rules such as .tag_hds-tag > span and .TextInput-module_root.TextInput-module_invalid label instead of emitting broken fragments.

v6.0.4

[6.0.4] - July, 6, 2026

Workspace

Changed

• [Dependencies] Monorepo-level dependency or tooling changes (resolutions, security patches, CI, etc.).

React

Fixed

• [Package] Restored dual ESM and CommonJS package output. Added conditional exports for import and require resolution, and corrected Rollup Babel runtime configuration so CommonJS bundles no longer emit broken helper imports.

Added

• [Select] Export TypeScript types from hds-react: SelectProps, SelectCustomTheme, FilterFunction, SelectTextKey, SelectTexts, SelectTextProvider, and OptionIterator. SearchFunction and SearchResult (shared with Search) are used for the onSearch prop.
• [Search] Export TypeScript types from hds-react: SearchCustomTheme, SearchResult, SearchTextKey, SearchTexts, and SearchTextProvider. SearchProps is exported from the Search component. The existing TextKey export is unchanged.

Core

Fixed

• [Build] CSS-to-JS build step now writes separate ESM (.js), CommonJS (.cjs), and TypeScript (.ts) modules with correct file paths, and exposes conditional exports so bundlers and Node resolve the right format.

Hds-js

Fixed

• [Package] Added conditional exports mapping import and require to the ESM and CommonJS entry points, fixing broken module resolution in mixed ESM/CJS toolchains.

v5.2.2

[5.2.2] - July, 6, 2026

... (truncated)

Changelog

Sourced from hds-react's changelog.

[6.0.5] - July, 17, 2026

Workspace

Changed

• [Dependencies] Updated pnpm to 11.13.1 and refreshed same-major dependencies across the monorepo (React 19.2.x, Storybook 8.6.x, PostCSS, Playwright, and related tooling).

React

Fixed

• [ssr] Fixed getCriticalHdsRules and hdsStyles critical CSS extraction for components that use nested CSS. Nested selectors are now flattened during the build and when styles are parsed, so SSR can correctly match rules such as .tag_hds-tag > span and .TextInput-module_root.TextInput-module_invalid label instead of emitting broken fragments.

[6.0.4] - July, 6, 2026

Workspace

Changed

• [Dependencies] Monorepo-level dependency or tooling changes (resolutions, security patches, CI, etc.).

React

Fixed

• [Package] Restored dual ESM and CommonJS package output. Added conditional exports for import and require resolution, and corrected Rollup Babel runtime configuration so CommonJS bundles no longer emit broken helper imports.

Added

• [Select] Export TypeScript types from hds-react: SelectProps, SelectCustomTheme, FilterFunction, SelectTextKey, SelectTexts, SelectTextProvider, and OptionIterator. SearchFunction and SearchResult (shared with Search) are used for the onSearch prop.
• [Search] Export TypeScript types from hds-react: SearchCustomTheme, SearchResult, SearchTextKey, SearchTexts, and SearchTextProvider. SearchProps is exported from the Search component. The existing TextKey export is unchanged.

Core

Fixed

• [Build] CSS-to-JS build step now writes separate ESM (.js), CommonJS (.cjs), and TypeScript (.ts) modules with correct file paths, and exposes conditional exports so bundlers and Node resolve the right format.

Hds-js

Fixed

• [Package] Added conditional exports mapping import and require to the ESM and CommonJS entry points, fixing broken module resolution in mixed ESM/CJS toolchains.

[6.0.3] - June, 16, 2026

Core

Fixed

... (truncated)

Commits

• 4b3479d Merge pull request #1693 from City-of-Helsinki/release-6.0.5
• e9f6cbb build: release-6.0.5
• e4a64aa Merge pull request #1690 from City-of-Helsinki/HDS-3007-fix-broken-hdsStyles-...
• 86b9077 fix(ssr): flatten nested CSS for critical hdsStyles extraction
• d23b2e1 Merge pull request #1692 from City-of-Helsinki/dependabot/github_actions/acti...
• b6e1b57 chore(deps): bump actions/setup-node from 6 to 7
• b5fe1a2 chore: restore hds-* minimumReleaseAgeExclude Refs: RATY-357
• 9b80d65 deps: bump js-yaml Refs: RATY-357
• 49a4641 deps: multer override Refs: RATY-357
• 8c6b25c docs: update changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.