diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 52d5d5f..5326786 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -7,6 +7,7 @@ settings:
 overrides:
   esbuild: ^0.28.1
   postcss: ^8.5.18
+  brace-expansion: ^5.0.8
 
 importers:
 
@@ -1036,9 +1037,6 @@ packages:
     peerDependencies:
       '@babel/core': ^7.4.0 || ^8.0.0-0 <8.0.0
 
-  balanced-match@1.0.2:
-    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
-
   balanced-match@4.0.4:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
     engines: {node: 18 || 20 || >=22}
@@ -1048,9 +1046,6 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
-  brace-expansion@2.1.2:
-    resolution: {integrity: sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==}
-
   brace-expansion@5.0.8:
     resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
     engines: {node: 20 || >=22}
@@ -3072,16 +3067,10 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  balanced-match@1.0.2: {}
-
   balanced-match@4.0.4: {}
 
   baseline-browser-mapping@2.11.1: {}
 
-  brace-expansion@2.1.2:
-    dependencies:
-      balanced-match: 1.0.2
-
   brace-expansion@5.0.8:
     dependencies:
       balanced-match: 4.0.4
@@ -3621,7 +3610,7 @@ snapshots:
 
   minimatch@5.1.9:
     dependencies:
-      brace-expansion: 2.1.2
+      brace-expansion: 5.0.8
 
   minipass@7.1.3: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index adc8987..9c4e37f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -9,6 +9,14 @@ allowBuilds:
 # sourceMappingURL comment made PostCSS read that path off disk as a previous
 # source map, so crafted CSS could disclose arbitrary .map files. Also a
 # transitive devDependency of Vite.
+#
+# brace-expansion >= 5.0.8 closes GHSA-mh99-v99m-4gvg: unbounded brace
+# expansion could exhaust memory and crash the process. The advisory has no
+# backport, so the 2.x copy that workbox-build pulls in through
+# minimatch/filelist/jake is vulnerable and only a major bump clears it.
+# 5.x publishes a CommonJS entry alongside ESM, so the CJS consumers in that
+# chain still resolve; verified by a full build, which is what exercises them.
 overrides:
   esbuild: ^0.28.1
   postcss: ^8.5.18
+  brace-expansion: ^5.0.8