Commit 9d446be
chore(deps): bump simple-git from 3.32.3 to 3.36.0 in /backend (#7931)
Bumps
[simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git)
from 3.32.3 to 3.36.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/steveukx/git-js/releases">simple-git's
releases</a>.</em></p>
<blockquote>
<h2>simple-git@3.36.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>89a2294: Extend known exploitable configuration keys and per-task
environment variables.</p>
<p>Note - <code>ParsedVulnerabilities</code> from
<code>argv-parser</code> is removed in favour of a readonly array of
<code>Vulnerability</code> to match usage in <code>simple-git</code>,
rolled into the new <code>vulnerabilityCheck</code> for simpler access
to the identified issues.</p>
<p>Thanks to <a
href="https://github.com/zebbern"><code>@zebbern</code></a> for
identifying the need to block <code>core.fsmonitor</code>.
Thanks to <a
href="https://github.com/kodareef5"><code>@kodareef5</code></a> for
identifying the need to block <code>GIT_CONFIG_COUNT</code> environment
variables and <code>--template</code> / <code>merge</code> related
config.</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>1ad57e8: Remove conflicting node:buffer import</li>
<li>Updated dependencies [89a2294]</li>
<li>Updated dependencies [675570a]
<ul>
<li><code>@simple-git/argv-parser</code><a
href="https://github.com/1"><code>@1</code></a>.1.0</li>
<li><code>@simple-git/args-pathspec</code><a
href="https://github.com/1"><code>@1</code></a>.0.3</li>
</ul>
</li>
</ul>
<h2>simple-git@3.35.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>0cf9d8c: Improvements for mono-repo publishing pipeline</li>
<li>Updated dependencies [0cf9d8c]
<ul>
<li><code>@simple-git/args-pathspec</code><a
href="https://github.com/1"><code>@1</code></a>.0.2</li>
<li><code>@simple-git/argv-parser</code><a
href="https://github.com/1"><code>@1</code></a>.0.3</li>
</ul>
</li>
</ul>
<h2>simple-git@3.35.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>0de400e: Update monorepo version handling during publish</li>
<li>Updated dependencies [0de400e]
<ul>
<li><code>@simple-git/argv-parser</code><a
href="https://github.com/1"><code>@1</code></a>.0.2</li>
</ul>
</li>
</ul>
<h2>simple-git@3.33.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>a263635: Use <code>pathspec</code> wrappers for remote and local
paths when running either <code>git.clone</code> or
<code>git.mirror</code> to
avoid leaving them less open for unexpected outcomes when passing
unsanitised data into these tasks.</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>e253a0d: Enhanced <code>git -c</code> checks in <code>unsafe</code>
plugin.</p>
<p>Thanks to <a
href="https://github.com/JohannesLks"><code>@JohannesLks</code></a> for
identifying the issue</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md">simple-git's
changelog</a>.</em></p>
<blockquote>
<h2>3.36.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>89a2294: Extend known exploitable configuration keys and per-task
environment variables.</p>
<p>Note - <code>ParsedVulnerabilities</code> from
<code>argv-parser</code> is removed in favour of a readonly array of
<code>Vulnerability</code> to match usage in <code>simple-git</code>,
rolled into the new <code>vulnerabilityCheck</code> for simpler access
to the identified issues.</p>
<p>Thanks to <a
href="https://github.com/zebbern"><code>@zebbern</code></a> for
identifying the need to block <code>core.fsmonitor</code>.
Thanks to <a
href="https://github.com/kodareef5"><code>@kodareef5</code></a> for
identifying the need to block <code>GIT_CONFIG_COUNT</code> environment
variables and <code>--template</code> / <code>merge</code> related
config.</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>1ad57e8: Remove conflicting node:buffer import</li>
<li>Updated dependencies [89a2294]</li>
<li>Updated dependencies [675570a]
<ul>
<li><code>@simple-git/argv-parser</code><a
href="https://github.com/1"><code>@1</code></a>.1.0</li>
<li><code>@simple-git/args-pathspec</code><a
href="https://github.com/1"><code>@1</code></a>.0.3</li>
</ul>
</li>
</ul>
<h2>3.35.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>0cf9d8c: Improvements for mono-repo publishing pipeline</li>
<li>Updated dependencies [0cf9d8c]
<ul>
<li><code>@simple-git/args-pathspec</code><a
href="https://github.com/1"><code>@1</code></a>.0.2</li>
<li><code>@simple-git/argv-parser</code><a
href="https://github.com/1"><code>@1</code></a>.0.3</li>
</ul>
</li>
</ul>
<h2>3.35.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>0de400e: Update monorepo version handling during publish</li>
<li>Updated dependencies [0de400e]
<ul>
<li><code>@simple-git/argv-parser</code><a
href="https://github.com/1"><code>@1</code></a>.0.2</li>
</ul>
</li>
</ul>
<h2>3.35.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>3d8708b: Updating publish config</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [3d8708b]
<ul>
<li><code>@simple-git/args-pathspec</code><a
href="https://github.com/1"><code>@1</code></a>.0.1</li>
<li><code>@simple-git/argv-parser</code><a
href="https://github.com/1"><code>@1</code></a>.0.1</li>
</ul>
</li>
</ul>
<h2>3.34.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/steveukx/git-js/commit/7dc1a532a9ec92fb08c93202954be73175b07d83"><code>7dc1a53</code></a>
Version Packages</li>
<li><a
href="https://github.com/steveukx/git-js/commit/76f5376bd418cb8baf5ec32757af442d47128e22"><code>76f5376</code></a>
Merge pull request <a
href="https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1061">#1061</a>
from Vinzent03/fix/buffer-import</li>
<li><a
href="https://github.com/steveukx/git-js/commit/89a2294febed5dfe737c4c735d936bb6018746a8"><code>89a2294</code></a>
Environment Parsing (<a
href="https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1156">#1156</a>)</li>
<li><a
href="https://github.com/steveukx/git-js/commit/1b91b762f047777ca6686f34ac3f7b8a543a4780"><code>1b91b76</code></a>
fix: remove explicit node:buffer import</li>
<li><a
href="https://github.com/steveukx/git-js/commit/e390685960a3461875dce89d87ab80e3143d79fe"><code>e390685</code></a>
Version Packages</li>
<li><a
href="https://github.com/steveukx/git-js/commit/3c9e4b8309667d0cb4102cda770f92075fc781dd"><code>3c9e4b8</code></a>
Pin version of <code>@simple-git/args-pathspec</code></li>
<li><a
href="https://github.com/steveukx/git-js/commit/94ee21fd5a2a6182fbf0f218a5efca2057b567cd"><code>94ee21f</code></a>
Export <code>pathspec</code> types through <code>simple-git</code> for
backward compatibility</li>
<li><a
href="https://github.com/steveukx/git-js/commit/6d7cb5174273aa33d131172d3770cb386e795171"><code>6d7cb51</code></a>
Version Packages</li>
<li><a
href="https://github.com/steveukx/git-js/commit/0de400e7b014a48113acf673b3409a95b9c87a15"><code>0de400e</code></a>
Switch to semver from workspace revisions</li>
<li><a
href="https://github.com/steveukx/git-js/commit/2264722abcb637042dd4cc50d903d69e4ee14b38"><code>2264722</code></a>
Version Packages</li>
<li>Additional commits viewable in <a
href="https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git">compare
view</a></li>
</ul>
</details>
<br />
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Miodec <jack@monkeytype.com>1 parent 1c73ad9 commit 9d446be
0 file changed
0 commit comments