Version Packages

Author: github-actions[bot]

.changeset/deep-ducks-care.md

@@ -1,5 +1,11 @@
 # @simple-git/args-pathspec
 
+## 1.0.3
+
+### Patch Changes
+
+- 675570a: Update devDependencies
+
 ## 1.0.2
 
 ### Patch Changes

.changeset/rotten-chicken-fetch.md

@@ -1,6 +1,6 @@
 {
   "name": "@simple-git/args-pathspec",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "publish": {
     "main": "dist/index.cjs",
     "module": "dist/index.mjs",

.changeset/rude-bushes-strive.md

@@ -1,5 +1,22 @@
 # @simple-git/argv-parser
 
+## 1.1.0
+
+### Minor Changes
+
+- 89a2294: Extend known exploitable configuration keys and per-task environment variables.
+
+  Note - `ParsedVulnerabilities` from `argv-parser` is removed in favour of a readonly array of `Vulnerability` to match usage in `simple-git`, rolled into the new `vulnerabilityCheck` for simpler access to the identified issues.
+
+  Thanks to @zebbern for identifying the need to block `core.fsmonitor`.
+  Thanks to @kodareef5 for identifying the need to block `GIT_CONFIG_COUNT` environment variables and `--template` / `merge` related config.
+
+### Patch Changes
+
+- 675570a: Update devDependencies
+- Updated dependencies [675570a]
+  - @simple-git/args-pathspec@1.0.3
+
 ## 1.0.3
 
 ### Patch Changes

packages/args-pathspec/CHANGELOG.md

@@ -1,6 +1,6 @@
 {
   "name": "@simple-git/argv-parser",
-  "version": "1.0.3",
+  "version": "1.1.0",
   "publish": {
     "main": "dist/index.cjs",
     "module": "dist/index.mjs",

packages/args-pathspec/package.json

@@ -1,5 +1,24 @@
 # Change History & Release Notes
 
+## 3.36.0
+
+### Minor Changes
+
+- 89a2294: Extend known exploitable configuration keys and per-task environment variables.
+
+  Note - `ParsedVulnerabilities` from `argv-parser` is removed in favour of a readonly array of `Vulnerability` to match usage in `simple-git`, rolled into the new `vulnerabilityCheck` for simpler access to the identified issues.
+
+  Thanks to @zebbern for identifying the need to block `core.fsmonitor`.
+  Thanks to @kodareef5 for identifying the need to block `GIT_CONFIG_COUNT` environment variables and `--template` / `merge` related config.
+
+### Patch Changes
+
+- 1ad57e8: Remove conflicting node:buffer import
+- Updated dependencies [89a2294]
+- Updated dependencies [675570a]
+  - @simple-git/argv-parser@1.1.0
+  - @simple-git/args-pathspec@1.0.3
+
 ## 3.35.2
 
 ### Patch Changes

packages/argv-parser/CHANGELOG.md

@@ -1,7 +1,7 @@
 {
   "name": "simple-git",
   "description": "Simple GIT interface for node.js",
-  "version": "3.35.2",
+  "version": "3.36.0",
   "author": "Steve King <steve@mydev.co>",
   "contributors": [
     {