Title: Supported fix needed for vulnerable braces@3.0.3 in Metro Hello Metro team, I’m maintaining HARLO AI, and our release is blocked by a HIGH-severity security advisory affecting braces@3.0.3. Advisory: GHSA-vfj7-8cjw-p6xm Repository: https://github.com/harloaisupport-lgtm/harlo-ai-1 Our current dependency audit reports this path: @react-native/metro-config → metro-config → metro@0.84.6 → metro-file-map@0.84.6 → micromatch@4.0.8 → braces@3.0.3 I found the Metro change that removes micromatch from the metro-file-map dependency path: https://github.com/react/metro/pull/2000 Could you please confirm: 1. Which published Metro version includes this fix? 2. What is the officially supported upgrade path from Metro 0.84.6? 3. Will the upgrade remove braces@3.0.3 from the actual dependency tree, or are additional fixes needed? We do not want to suppress the alert or use unsupported dependency overrides. We need a safe, verifiable fix compatible with our project. Thank you. #2076