Skip to content

Commit 9d446be

Browse files
chore(deps): bump simple-git from 3.32.3 to 3.36.0 in /backend (#7931)
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.32.3 to 3.36.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/steveukx/git-js/releases">simple-git's releases</a>.</em></p> <blockquote> <h2>simple-git@3.36.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>89a2294: Extend known exploitable configuration keys and per-task environment variables.</p> <p>Note - <code>ParsedVulnerabilities</code> from <code>argv-parser</code> is removed in favour of a readonly array of <code>Vulnerability</code> to match usage in <code>simple-git</code>, rolled into the new <code>vulnerabilityCheck</code> for simpler access to the identified issues.</p> <p>Thanks to <a href="https://github.com/zebbern"><code>@​zebbern</code></a> for identifying the need to block <code>core.fsmonitor</code>. Thanks to <a href="https://github.com/kodareef5"><code>@​kodareef5</code></a> for identifying the need to block <code>GIT_CONFIG_COUNT</code> environment variables and <code>--template</code> / <code>merge</code> related config.</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li>1ad57e8: Remove conflicting node:buffer import</li> <li>Updated dependencies [89a2294]</li> <li>Updated dependencies [675570a] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.1.0</li> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>simple-git@3.35.2</h2> <h3>Patch Changes</h3> <ul> <li>0cf9d8c: Improvements for mono-repo publishing pipeline</li> <li>Updated dependencies [0cf9d8c] <ul> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>simple-git@3.35.1</h2> <h3>Patch Changes</h3> <ul> <li>0de400e: Update monorepo version handling during publish</li> <li>Updated dependencies [0de400e] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> </ul> </li> </ul> <h2>simple-git@3.33.0</h2> <h3>Minor Changes</h3> <ul> <li>a263635: Use <code>pathspec</code> wrappers for remote and local paths when running either <code>git.clone</code> or <code>git.mirror</code> to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.</li> </ul> <h3>Patch Changes</h3> <ul> <li> <p>e253a0d: Enhanced <code>git -c</code> checks in <code>unsafe</code> plugin.</p> <p>Thanks to <a href="https://github.com/JohannesLks"><code>@​JohannesLks</code></a> for identifying the issue</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md">simple-git's changelog</a>.</em></p> <blockquote> <h2>3.36.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>89a2294: Extend known exploitable configuration keys and per-task environment variables.</p> <p>Note - <code>ParsedVulnerabilities</code> from <code>argv-parser</code> is removed in favour of a readonly array of <code>Vulnerability</code> to match usage in <code>simple-git</code>, rolled into the new <code>vulnerabilityCheck</code> for simpler access to the identified issues.</p> <p>Thanks to <a href="https://github.com/zebbern"><code>@​zebbern</code></a> for identifying the need to block <code>core.fsmonitor</code>. Thanks to <a href="https://github.com/kodareef5"><code>@​kodareef5</code></a> for identifying the need to block <code>GIT_CONFIG_COUNT</code> environment variables and <code>--template</code> / <code>merge</code> related config.</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li>1ad57e8: Remove conflicting node:buffer import</li> <li>Updated dependencies [89a2294]</li> <li>Updated dependencies [675570a] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.1.0</li> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>3.35.2</h2> <h3>Patch Changes</h3> <ul> <li>0cf9d8c: Improvements for mono-repo publishing pipeline</li> <li>Updated dependencies [0cf9d8c] <ul> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>3.35.1</h2> <h3>Patch Changes</h3> <ul> <li>0de400e: Update monorepo version handling during publish</li> <li>Updated dependencies [0de400e] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> </ul> </li> </ul> <h2>3.35.0</h2> <h3>Minor Changes</h3> <ul> <li>3d8708b: Updating publish config</li> </ul> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [3d8708b] <ul> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> </ul> </li> </ul> <h2>3.34.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/steveukx/git-js/commit/7dc1a532a9ec92fb08c93202954be73175b07d83"><code>7dc1a53</code></a> Version Packages</li> <li><a href="https://github.com/steveukx/git-js/commit/76f5376bd418cb8baf5ec32757af442d47128e22"><code>76f5376</code></a> Merge pull request <a href="https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1061">#1061</a> from Vinzent03/fix/buffer-import</li> <li><a href="https://github.com/steveukx/git-js/commit/89a2294febed5dfe737c4c735d936bb6018746a8"><code>89a2294</code></a> Environment Parsing (<a href="https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1156">#1156</a>)</li> <li><a href="https://github.com/steveukx/git-js/commit/1b91b762f047777ca6686f34ac3f7b8a543a4780"><code>1b91b76</code></a> fix: remove explicit node:buffer import</li> <li><a href="https://github.com/steveukx/git-js/commit/e390685960a3461875dce89d87ab80e3143d79fe"><code>e390685</code></a> Version Packages</li> <li><a href="https://github.com/steveukx/git-js/commit/3c9e4b8309667d0cb4102cda770f92075fc781dd"><code>3c9e4b8</code></a> Pin version of <code>@​simple-git/args-pathspec</code></li> <li><a href="https://github.com/steveukx/git-js/commit/94ee21fd5a2a6182fbf0f218a5efca2057b567cd"><code>94ee21f</code></a> Export <code>pathspec</code> types through <code>simple-git</code> for backward compatibility</li> <li><a href="https://github.com/steveukx/git-js/commit/6d7cb5174273aa33d131172d3770cb386e795171"><code>6d7cb51</code></a> Version Packages</li> <li><a href="https://github.com/steveukx/git-js/commit/0de400e7b014a48113acf673b3409a95b9c87a15"><code>0de400e</code></a> Switch to semver from workspace revisions</li> <li><a href="https://github.com/steveukx/git-js/commit/2264722abcb637042dd4cc50d903d69e4ee14b38"><code>2264722</code></a> Version Packages</li> <li>Additional commits viewable in <a href="https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git">compare view</a></li> </ul> </details> <br /> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Miodec <jack@monkeytype.com>
1 parent 1c73ad9 commit 9d446be

0 file changed

File tree

    0 commit comments

    Comments
     (0)