build(deps-dev): bump brace-expansion from 1.1.15 to 1.1.21 in /website

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.15 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.15...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/pr-compile-check.yml

@@ -6,9 +6,6 @@ on:
       - main
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 

.github/workflows/test-publish-version-xml.yml

@@ -3,10 +3,6 @@ name: TEST publish-version-xml (local only)
 on:
   workflow_dispatch:
 
-permissions:
-  contents: read
-  issues: read
-
 jobs:
   publish-version-xml:
     name: Publish Version Info XML via WebDAV

website/.eleventy.js

@@ -32,26 +32,11 @@ const MANUAL_PAGE_ORDER = {
     ]
 };
 
-// Removes HTML tags until none are left, so that nested input such as
-// "<<b>script>" cannot reassemble a tag after a single pass.
-function stripHtmlTags(value) {
-    let previous;
-    let current = value;
-
-    do {
-        previous = current;
-        current = current.replace(/<[^>]+>/g, "");
-    } while (current !== previous);
-
-    return current;
-}
-
 function markdownToPlainText(value) {
-    const withoutLinks = (value || "")
+    return (value || "")
         .replace(/!\[([^\]]*)\]\([^)]+\)/g, "$1")
-        .replace(/\[([^\]]+)\]\([^)]+\)/g, "$1");
-
-    return stripHtmlTags(withoutLinks)
+        .replace(/\[([^\]]+)\]\([^)]+\)/g, "$1")
+        .replace(/<[^>]+>/g, "")
         .replace(/[*_~`]/g, "")
         .replace(/\s+/g, " ")
         .trim();

website/package-lock.json

@@ -7,15 +7,15 @@
     "": {
       "name": "kst4contest-website",
       "version": "0.1.0",
-      "engines": {
-        "node": ">=18.19.1"
-      },
       "dependencies": {
         "markdown-it": "^14.3.0",
         "markdown-it-anchor": "^9.2.0"
       },
       "devDependencies": {
         "@11ty/eleventy": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=18.19.1"
       }
     },
     "node_modules/@11ty/dependency-tree": {
@@ -397,9 +397,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
-      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

website/scripts/validate-version-info.js

@@ -28,29 +28,14 @@ function extractTag(xml, tagName) {
     return match ? match[1].trim() : null;
 }
 
-// Applies the removal until nothing changes, so that nested input such as
-// "<!-<!---->-->" cannot leave a fresh comment behind after a single pass.
-function removeUntilStable(value, pattern) {
-    let previous;
-    let current = value;
-
-    do {
-        previous = current;
-        current = current.replace(pattern, "");
-    } while (current !== previous);
-
-    return current;
-}
-
 function assertWellFormedStructure(xml) {
     if (/&(?!amp;|lt;|gt;|quot;|apos;|#\d+;|#x[0-9a-f]+;)/i.test(xml)) {
         fail("the XML contains an unescaped ampersand");
     }
 
-    const withoutCommentsAndDeclaration = removeUntilStable(
-        xml,
-        /<!--[\s\S]*?-->|<\?[\s\S]*?\?>/g
-    );
+    const withoutCommentsAndDeclaration = xml
+        .replace(/<!--[\s\S]*?-->/g, "")
+        .replace(/<\?[\s\S]*?\?>/g, "");
 
     const tagPattern =
         /<\/?([A-Za-z_][\w:.-]*)(?:\s[^<>]*?)?\s*\/?>/g;