code · pull · May 19, 2026 · May 19, 2026 · May 19, 2026 · May 19, 2026
diff --git a/docker/seed/Dockerfile.go b/docker/seed/Dockerfile.go
@@ -16,10 +16,11 @@ RUN apk add --no-cache curl && \
 FROM golang:1.26.3-alpine3.23 AS overlay-binaries
 ARG CONTAINERD_VERSION=2.3.0
 ARG RUNC_VERSION=1.3.5
-# moby v2.0.0-beta.12 (docker v29.5.0-rc.1) is past the v2.0.0-beta.8
-# upstream fix for CVE-2026-33997 / CVE-2026-34040.
-ARG MOBY_VERSION=29.5.0-rc.1
-ARG DOCKER_CLI_VERSION=29.5.0-rc.1
+# moby v29.5.1 fixes CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
+# (GHSA-x86f-5xw2-fm2r, GHSA-vp62-88p7-qqf5, GHSA-rg2x-37c3-w2rh)
+# and includes the earlier CVE-2026-33997 / CVE-2026-34040 fixes.
+ARG MOBY_VERSION=29.5.1
+ARG DOCKER_CLI_VERSION=29.5.1
 ARG XNET_VERSION=0.53.0
 ARG OTEL_SDK_VERSION=1.43.0
 ARG IN_TOTO_VERSION=0.11.0

diff --git a/docker/seed/Dockerfile.php b/docker/seed/Dockerfile.php
@@ -16,10 +16,11 @@
 FROM golang:1.26.3-alpine3.23 AS overlay-binaries
 ARG CONTAINERD_VERSION=2.3.0
 ARG RUNC_VERSION=1.3.5
-# moby v2.0.0-beta.12 (docker v29.5.0-rc.1) is past the v2.0.0-beta.8
-# upstream fix for CVE-2026-33997 / CVE-2026-34040.
-ARG MOBY_VERSION=29.5.0-rc.1
-ARG DOCKER_CLI_VERSION=29.5.0-rc.1
+# moby v29.5.1 fixes CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
+# (GHSA-x86f-5xw2-fm2r, GHSA-vp62-88p7-qqf5, GHSA-rg2x-37c3-w2rh)
+# and includes the earlier CVE-2026-33997 / CVE-2026-34040 fixes.
+ARG MOBY_VERSION=29.5.1
+ARG DOCKER_CLI_VERSION=29.5.1
 ARG COMPOSE_VERSION=5.1.3
 ARG XNET_VERSION=0.53.0
 ARG OTEL_SDK_VERSION=1.43.0

diff --git a/docker/seed/Dockerfile.python b/docker/seed/Dockerfile.python
@@ -16,10 +16,11 @@ RUN apk add --no-cache curl && \
 FROM golang:1.26.3-alpine3.23 AS overlay-binaries
 ARG CONTAINERD_VERSION=2.3.0
 ARG RUNC_VERSION=1.3.5
-# moby v2.0.0-beta.12 (docker v29.5.0-rc.1) is past the v2.0.0-beta.8
-# upstream fix for CVE-2026-33997 / CVE-2026-34040.
-ARG MOBY_VERSION=29.5.0-rc.1
-ARG DOCKER_CLI_VERSION=29.5.0-rc.1
+# moby v29.5.1 fixes CVE-2026-41567, CVE-2026-41568, CVE-2026-42306
+# (GHSA-x86f-5xw2-fm2r, GHSA-vp62-88p7-qqf5, GHSA-rg2x-37c3-w2rh)
+# and includes the earlier CVE-2026-33997 / CVE-2026-34040 fixes.
+ARG MOBY_VERSION=29.5.1
+ARG DOCKER_CLI_VERSION=29.5.1
 ARG COMPOSE_VERSION=5.1.3
 ARG XNET_VERSION=0.53.0
 ARG OTEL_SDK_VERSION=1.43.0

diff --git a/docker/seed/Dockerfile.ts b/docker/seed/Dockerfile.ts
@@ -43,17 +43,23 @@ RUN apt-get update \
   && rm -rf /var/lib/apt/lists/*
 
 # Upgrade bundled npm to 11.14.1 to pick up patched transitive dependencies
-# (picomatch 4.0.4, brace-expansion 5.0.5, minimatch 10.2.5, tar 7.5.13).
+# (picomatch 4.0.4, minimatch 10.2.5, tar 7.5.13).
 # node:24.15.0 ships npm 11.12.1 which still vendors picomatch 4.0.3 and
 # brace-expansion 5.0.4. Replace ip-address with 10.1.1 to fix
 # GHSA-v2v4-37r5-5v8g (still bundled at 10.1.0 even in npm 11.14.1).
+# Patch brace-expansion to 5.0.6 (GHSA-jxxr-4gwj-5jf2; npm 11.14.1 vendors 5.0.5).
 RUN npm install -g npm@11.14.1 --force && \
     cd /usr/local/lib/node_modules/npm/node_modules && \
     npm pack ip-address@10.1.1 && \
     rm -rf ip-address && \
     mkdir ip-address && \
     tar -xzf ip-address-10.1.1.tgz --strip-components=1 -C ip-address/ && \
-    rm ip-address-10.1.1.tgz
+    rm ip-address-10.1.1.tgz && \
+    npm pack brace-expansion@5.0.6 && \
+    rm -rf brace-expansion && \
+    mkdir brace-expansion && \
+    tar -xzf brace-expansion-5.0.6.tgz --strip-components=1 -C brace-expansion/ && \
+    rm brace-expansion-5.0.6.tgz
 
 RUN npm install -g pnpm@10.33.3 --force
 RUN corepack prepare pnpm@10.33.3

diff --git a/fern/apis/generators-yml/definition/group.yml b/fern/apis/generators-yml/definition/group.yml
@@ -146,6 +146,8 @@ types:
       - name: pullRequest
         value: pull-request
       - push
+      - name: commitAndRelease
+        value: commit-and-release
 
   GeneratorSnippetsSchema:
     properties:

diff --git a/generators-yml.schema.json b/generators-yml.schema.json
@@ -3968,7 +3968,8 @@
       "type": "string",
       "enum": [
         "pull-request",
-        "push"
+        "push",
+        "commit-and-release"
       ]
     },
     "license.GithubLicenseType": {

diff --git a/generators/csharp/model/Dockerfile b/generators/csharp/model/Dockerfile
@@ -24,6 +24,14 @@ COPY --from=node /usr/local/lib/node_modules /usr/local/lib/node_modules
 RUN ln -s ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
     && ln -s ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
 
+# Patch brace-expansion to 5.0.6 (GHSA-jxxr-4gwj-5jf2; node:24.15 vendors 5.0.5).
+RUN cd /usr/local/lib/node_modules/npm/node_modules && \
+    npm pack brace-expansion@5.0.6 && \
+    rm -rf brace-expansion && \
+    mkdir brace-expansion && \
+    tar -xzf brace-expansion-5.0.6.tgz --strip-components=1 -C brace-expansion/ && \
+    rm brace-expansion-5.0.6.tgz
+
 RUN dotnet tool install -g csharpier --version "1.2.6"
 
 COPY generators/csharp/model/dist /dist

diff --git a/generators/csharp/sdk/Dockerfile b/generators/csharp/sdk/Dockerfile
@@ -69,17 +69,17 @@ RUN for dir in \
       fi; \
     done
 
-# Patch brace-expansion to 5.0.5 to fix GHSA-f886-m6hf-6m8v
+# Patch brace-expansion to 5.0.6 to fix GHSA-jxxr-4gwj-5jf2
 # (zero-step sequence hangs).
 RUN for dir in \
       /usr/local/lib/node_modules/npm/node_modules/brace-expansion; do \
       if [ -d "$dir" ]; then \
         rm -rf "$dir" && \
         cd "$(dirname "$dir")" && \
-        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz -o brace-expansion-5.0.5.tgz && \
-        tar -xzf brace-expansion-5.0.5.tgz && \
+        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz -o brace-expansion-5.0.6.tgz && \
+        tar -xzf brace-expansion-5.0.6.tgz && \
         mv package brace-expansion && \
-        rm brace-expansion-5.0.5.tgz; \
+        rm brace-expansion-5.0.6.tgz; \
       fi; \
     done
 

diff --git a/generators/go/model/Dockerfile b/generators/go/model/Dockerfile
@@ -28,8 +28,8 @@ RUN ln -s ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
     && ln -s ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
 
 # Patch npm's bundled picomatch@4.0.3 -> 4.0.4 (GHSA-c2c7-rcm5-vvqj,
-# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.5
-# (GHSA-f886-m6hf-6m8v) copied from the node stage.
+# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.6
+# (GHSA-jxxr-4gwj-5jf2) copied from the node stage.
 RUN for dir in \
       /usr/local/lib/node_modules/npm/node_modules/picomatch \
       /usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/picomatch; do \
@@ -47,10 +47,10 @@ RUN for dir in \
       if [ -d "$dir" ]; then \
         rm -rf "$dir" && \
         cd "$(dirname "$dir")" && \
-        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz -o brace-expansion-5.0.5.tgz && \
-        tar -xzf brace-expansion-5.0.5.tgz && \
+        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz -o brace-expansion-5.0.6.tgz && \
+        tar -xzf brace-expansion-5.0.6.tgz && \
         mv package brace-expansion && \
-        rm brace-expansion-5.0.5.tgz; \
+        rm brace-expansion-5.0.6.tgz; \
       fi; \
     done
 

diff --git a/generators/go/sdk/Dockerfile b/generators/go/sdk/Dockerfile
@@ -7,7 +7,7 @@ RUN git config --global user.email "115122769+fern-api[bot]@users.noreply.github
 
 # Patch vulnerable packages bundled inside npm's node_modules that lag behind
 # upstream advisories (ip-address GHSA-v2v4-37r5-5v8g, brace-expansion
-# GHSA-f886-m6hf-6m8v, picomatch GHSA-3v7f-55p6-f55p / GHSA-c2c7-rcm5-vvqj).
+# GHSA-jxxr-4gwj-5jf2, picomatch GHSA-3v7f-55p6-f55p / GHSA-c2c7-rcm5-vvqj).
 # We replace them with the latest patched releases via `npm pack` so the
 # resulting layer does not ship known-vulnerable copies.
 RUN set -eux; \

diff --git a/generators/java/sdk/Dockerfile b/generators/java/sdk/Dockerfile
@@ -136,17 +136,17 @@ RUN for dir in \
       fi; \
     done
 
-# Patch brace-expansion to 5.0.5 to fix GHSA-f886-m6hf-6m8v
+# Patch brace-expansion to 5.0.6 to fix GHSA-jxxr-4gwj-5jf2
 # (zero-step sequence DoS; bundled by npm 11.12.1 at 5.0.4).
 RUN for dir in \
       /usr/local/lib/node_modules/npm/node_modules/brace-expansion; do \
       if [ -d "$dir" ]; then \
         rm -rf "$dir" && \
         cd "$(dirname "$dir")" && \
-        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz -o brace-expansion-5.0.5.tgz && \
-        tar -xzf brace-expansion-5.0.5.tgz && \
+        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz -o brace-expansion-5.0.6.tgz && \
+        tar -xzf brace-expansion-5.0.6.tgz && \
         mv package brace-expansion && \
-        rm brace-expansion-5.0.5.tgz; \
+        rm brace-expansion-5.0.6.tgz; \
       fi; \
     done
 

diff --git a/generators/php/model/Dockerfile b/generators/php/model/Dockerfile
@@ -21,8 +21,8 @@ RUN ln -s ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
     && ln -s ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
 
 # Patch npm's bundled picomatch@4.0.3 -> 4.0.4 (GHSA-c2c7-rcm5-vvqj,
-# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.5
-# (GHSA-f886-m6hf-6m8v) in the node_modules copied from the node stage.
+# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.6
+# (GHSA-jxxr-4gwj-5jf2) in the node_modules copied from the node stage.
 RUN for dir in \
       /usr/local/lib/node_modules/npm/node_modules/picomatch \
       /usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/picomatch; do \
@@ -40,10 +40,10 @@ RUN for dir in \
       if [ -d "$dir" ]; then \
         rm -rf "$dir" && \
         cd "$(dirname "$dir")" && \
-        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz -o brace-expansion-5.0.5.tgz && \
-        tar -xzf brace-expansion-5.0.5.tgz && \
+        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz -o brace-expansion-5.0.6.tgz && \
+        tar -xzf brace-expansion-5.0.6.tgz && \
         mv package brace-expansion && \
-        rm brace-expansion-5.0.5.tgz; \
+        rm brace-expansion-5.0.6.tgz; \
       fi; \
     done
 

diff --git a/generators/php/sdk/Dockerfile b/generators/php/sdk/Dockerfile
@@ -21,8 +21,8 @@ RUN ln -s ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
     && ln -s ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
 
 # Patch npm's bundled picomatch@4.0.3 -> 4.0.4 (GHSA-c2c7-rcm5-vvqj,
-# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.5
-# (GHSA-f886-m6hf-6m8v) in the node_modules copied from the node stage.
+# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.6
+# (GHSA-jxxr-4gwj-5jf2) in the node_modules copied from the node stage.
 RUN for dir in \
       /usr/local/lib/node_modules/npm/node_modules/picomatch \
       /usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/picomatch; do \
@@ -40,10 +40,10 @@ RUN for dir in \
       if [ -d "$dir" ]; then \
         rm -rf "$dir" && \
         cd "$(dirname "$dir")" && \
-        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz -o brace-expansion-5.0.5.tgz && \
-        tar -xzf brace-expansion-5.0.5.tgz && \
+        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz -o brace-expansion-5.0.6.tgz && \
+        tar -xzf brace-expansion-5.0.6.tgz && \
         mv package brace-expansion && \
-        rm brace-expansion-5.0.5.tgz; \
+        rm brace-expansion-5.0.6.tgz; \
       fi; \
     done
 

diff --git a/...ators/python-v2/browser-compatible-base/src/custom-config/BasePythonCustomConfigSchema.ts b/...ators/python-v2/browser-compatible-base/src/custom-config/BasePythonCustomConfigSchema.ts
@@ -22,6 +22,7 @@ export const BasePythonCustomConfigSchema = z.object({
     extra_dev_dependencies: z.record(z.string(), z.union([z.string(), BaseDependencyConfig])).optional(),
     extras: z.record(z.string(), z.array(z.string())).optional(),
     follow_redirects_by_default: z.boolean().optional(),
+    output_directory: z.enum(["project-root", "source-root"]).optional(),
     pyproject_python_version: z.string().optional(),
     pyproject_toml: z.string().optional(),
     should_generate_websocket_clients: z.boolean().optional(),
@@ -32,6 +33,7 @@ export const BasePythonCustomConfigSchema = z.object({
     // Deprecated.
     client_class_name: z.string().optional(),
     client_filename: z.string().optional(),
+    /** @deprecated Prefer `output_directory`. `flat_layout` only toggles the `src/` prefix and never skips project scaffolding. */
     flat_layout: z.boolean().optional(),
     include_legacy_wire_tests: z.boolean().optional(),
     inline_request_params: z.boolean().optional(),

diff --git a/generators/python-v2/sdk/Dockerfile b/generators/python-v2/sdk/Dockerfile
@@ -20,6 +20,14 @@ RUN echo "Types: deb" > /etc/apt/sources.list.d/sid.sources \
        curl libcurl4t64 libgnutls30t64 \
     && rm -f /etc/apt/sources.list.d/sid.sources /etc/apt/preferences.d/sid-low \
     && rm -rf /var/lib/apt/lists/*
+# Patch brace-expansion to 5.0.6 (GHSA-jxxr-4gwj-5jf2; node:24.15 vendors 5.0.5).
+RUN cd /usr/local/lib/node_modules/npm/node_modules && \
+    npm pack brace-expansion@5.0.6 && \
+    rm -rf brace-expansion && \
+    mkdir brace-expansion && \
+    tar -xzf brace-expansion-5.0.6.tgz --strip-components=1 -C brace-expansion/ && \
+    rm brace-expansion-5.0.6.tgz
+
 RUN curl -LsSf https://astral.sh/ruff/0.15.7/install.sh | sh
 ENV PATH="/root/.local/bin:${PATH}"
 RUN ruff --version

diff --git a/generators/python-v2/sdk/src/SdkCustomConfig.ts b/generators/python-v2/sdk/src/SdkCustomConfig.ts
@@ -1,6 +1,9 @@
 import path from "path";
 import { z } from "zod";
 
+export const OUTPUT_DIRECTORY_OPTIONS = ["project-root", "source-root"] as const;
+export type OutputDirectory = (typeof OUTPUT_DIRECTORY_OPTIONS)[number];
+
 /**
  * Schema for validating and normalizing relative paths.
  * Rejects absolute paths, parent traversal, and invalid characters.
@@ -59,6 +62,13 @@ export const SdkCustomConfigSchema = z.object({
     enable_wire_tests: z.boolean().optional(),
     package_path: relativePathSchema.optional(),
     package_name: z.string().optional(),
+    /**
+     * Controls project layout. `project-root` (default when unset) emits the
+     * standard `src/<package>/...` tree with a pyproject.toml at root.
+     * `source-root` writes source files directly without the `src/` prefix and
+     * skips project scaffolding — useful when embedding into an existing project.
+     */
+    output_directory: z.enum(OUTPUT_DIRECTORY_OPTIONS).optional(),
     client: ClientConfigSchema.optional(),
     client_class_name: z.string().optional(),
     inline_request_params: z.boolean().optional(),

diff --git a/generators/python-v2/sdk/src/SdkGeneratorCli.ts b/generators/python-v2/sdk/src/SdkGeneratorCli.ts
@@ -9,7 +9,7 @@ import { Endpoint } from "@fern-fern/generator-exec-sdk/api";
 import { FernIr } from "@fern-fern/ir-sdk";
 import { ContributingGenerator } from "./contributing/ContributingGenerator.js";
 import { buildReference } from "./reference/buildReference.js";
-import { SdkCustomConfigSchema } from "./SdkCustomConfig.js";
+import { type OutputDirectory, SdkCustomConfigSchema } from "./SdkCustomConfig.js";
 import { SdkGeneratorContext } from "./SdkGeneratorContext.js";
 import { selectExamplesForSnippets } from "./utils/selectExamplesForSnippets.js";
 import { WireTestGenerator } from "./wire-tests/WireTestGenerator.js";
@@ -50,37 +50,41 @@ export class SdkGeneratorCli extends AbstractPythonGeneratorCli<SdkCustomConfigS
     }
 
     protected async generate(context: SdkGeneratorContext): Promise<void> {
-        await this.generateWireTestFiles(context);
+        // In source-root mode the user is embedding the source tree into an existing
+        // project, so README/reference/CONTRIBUTING/wire-test scaffolding doesn't apply.
+        const sourceRoot: OutputDirectory = "source-root";
+        if (context.customConfig.output_directory !== sourceRoot) {
+            await this.generateWireTestFiles(context);
 
-        // Generate snippets once, used by both README and reference
-        let endpointSnippets: Endpoint[] = [];
-        try {
-            endpointSnippets = this.generateSnippets({ context });
-        } catch (error) {
-            context.logger.debug(`Failed to generate snippets: ${extractErrorMessage(error)}`);
-        }
-
-        // Generate README.md
-        if (this.shouldGenerateReadme(context) && endpointSnippets.length > 0) {
+            let endpointSnippets: Endpoint[] = [];
             try {
-                await this.generateReadme({ context, endpointSnippets });
+                endpointSnippets = this.generateSnippets({ context });
             } catch (error) {
-                throw GeneratorError.internalError(`Failed to generate README.md: ${extractErrorMessage(error)}`);
+                context.logger.debug(`Failed to generate snippets: ${extractErrorMessage(error)}`);
             }
-        }
 
-        // Generate reference.md
-        try {
-            await this.generateReference({ context, endpointSnippets });
-        } catch (error) {
-            throw GeneratorError.internalError(`Failed to generate reference.md: ${extractErrorMessage(error)}`);
-        }
+            if (this.shouldGenerateReadme(context) && endpointSnippets.length > 0) {
+                try {
+                    await this.generateReadme({ context, endpointSnippets });
+                } catch (error) {
+                    throw GeneratorError.internalError(`Failed to generate README.md: ${extractErrorMessage(error)}`);
+                }
+            }
 
-        if (!context.config.whitelabel) {
             try {
-                this.generateContributing({ context });
+                await this.generateReference({ context, endpointSnippets });
             } catch (error) {
-                throw GeneratorError.internalError(`Failed to generate CONTRIBUTING.md: ${extractErrorMessage(error)}`);
+                throw GeneratorError.internalError(`Failed to generate reference.md: ${extractErrorMessage(error)}`);
+            }
+
+            if (!context.config.whitelabel) {
+                try {
+                    this.generateContributing({ context });
+                } catch (error) {
+                    throw GeneratorError.internalError(
+                        `Failed to generate CONTRIBUTING.md: ${extractErrorMessage(error)}`
+                    );
+                }
             }
         }
 

diff --git a/generators/python/sdk/Dockerfile b/generators/python/sdk/Dockerfile
@@ -37,8 +37,8 @@ RUN node --version
 RUN npm --version
 
 # Patch npm's bundled picomatch@4.0.3 -> 4.0.4 (GHSA-c2c7-rcm5-vvqj,
-# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.5
-# (GHSA-f886-m6hf-6m8v) copied from the node stage.
+# GHSA-3v7f-55p6-f55p) and brace-expansion@5.0.4 -> 5.0.6
+# (GHSA-jxxr-4gwj-5jf2) copied from the node stage.
 RUN for dir in \
       /usr/local/lib/node_modules/npm/node_modules/picomatch \
       /usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/picomatch; do \
@@ -56,10 +56,10 @@ RUN for dir in \
       if [ -d "$dir" ]; then \
         rm -rf "$dir" && \
         cd "$(dirname "$dir")" && \
-        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz -o brace-expansion-5.0.5.tgz && \
-        tar -xzf brace-expansion-5.0.5.tgz && \
+        curl -sL https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz -o brace-expansion-5.0.6.tgz && \
+        tar -xzf brace-expansion-5.0.6.tgz && \
         mv package brace-expansion && \
-        rm brace-expansion-5.0.5.tgz; \
+        rm brace-expansion-5.0.6.tgz; \
       fi; \
     done