fix(deps): bump brace-expansion in /ui [security] (#5466)