Re: [PR] build(deps-dev): bump simple-git from 3.27.0 to 3.36.0 in /t [apisix]
github-actions[bot] commented on PR #13335: URL: https://github.com/apache/apisix/pull/13335#issuecomment-4913972607 This pull request has been marked as stale due to 60 days of inactivity. It will be closed in 4 weeks if no further activity occurs. If you think that's incorrect or this pull request should instead be reviewed, please simply write any comment. Even if closed, you can still revive the PR at any time or discuss it on the [email protected] list. Thank you for your contributions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
[PR] build(deps-dev): bump simple-git from 3.27.0 to 3.36.0 in /t [apisix]
dependabot[bot] opened a new pull request, #13335: URL: https://github.com/apache/apisix/pull/13335 Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.27.0 to 3.36.0. Release notes Sourced from https://github.com/steveukx/git-js/releases";>simple-git's releases. [email protected] Minor Changes 89a2294: Extend known exploitable configuration keys and per-task environment variables. Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues. Thanks to https://github.com/zebbern";>@zebbern for identifying the need to block core.fsmonitor. Thanks to https://github.com/kodareef5";>@kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config. Patch Changes 1ad57e8: Remove conflicting node:buffer import Updated dependencies [89a2294] Updated dependencies [675570a] @simple-git/argv-parserhttps://github.com/1";>@1.1.0 @simple-git/args-pathspechttps://github.com/1";>@1.0.3 [email protected] Patch Changes 0cf9d8c: Improvements for mono-repo publishing pipeline Updated dependencies [0cf9d8c] @simple-git/args-pathspechttps://github.com/1";>@1.0.2 @simple-git/argv-parserhttps://github.com/1";>@1.0.3 [email protected] Patch Changes 0de400e: Update monorepo version handling during publish Updated dependencies [0de400e] @simple-git/argv-parserhttps://github.com/1";>@1.0.2 [email protected] Minor Changes a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks. Patch Changes e253a0d: Enhanced git -c checks in unsafe plugin. Thanks to https://github.com/JohannesLks";>@JohannesLks for identifying the issue [email protected] Patch Changes f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling. ... (truncated) Changelog Sourced from https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md";>simple-git's changelog. 3.36.0 Minor Changes 89a2294: Extend known exploitable configuration keys and per-task environment variables. Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues. Thanks to https://github.com/zebbern";>@zebbern for identifying the need to block core.fsmonitor. Thanks to https://github.com/kodareef5";>@kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config. Patch Changes 1ad57e8: Remove conflicting node:buffer import Updated dependencies [89a2294] Updated dependencies [675570a] @simple-git/argv-parserhttps://github.com/1";>@1.1.0 @simple-git/args-pathspechttps://github.com/1";>@1.0.3 3.35.2 Patch Changes 0cf9d8c: Improvements for mono-repo publishing pipeline Updated dependencies [0cf9d8c] @simple-git/args-pathspechttps://github.com/1";>@1.0.2 @simple-git/argv-parserhttps://github.com/1";>@1.0.3 3.35.1 Patch Changes 0de400e: Update monorepo version handling during publish Updated dependencies [0de400e] @simple-git/argv-parserhttps://github.com/1";>@1.0.2 3.35.0 Minor Changes 3d8708b: Updating publish config Patch Changes Updated dependencies [3d8708b] @simple-git/args-pathspechttps://github.com/1";>@1.0.1 @simple-git/argv-parserhttps://github.com/1";>@1.0.1 3.34.0 ... (truncated) Commits https://github.com/steveukx/git-js/commit/7dc1a532a9ec92fb08c93202954be73175b07d83";>7dc1a53 Version Packages https://github.com/steveukx/git-js/commit/76f5376bd418cb8baf5ec32757af442d47128e22";>76f5376 Merge pull request https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1061";>#1061 from Vinzent03/fix/buffer-import https://github.com/steveukx/git-js/commit/89a2294febed5dfe737c4c735d936bb6018746a8";>89a2294 Environment Parsing (https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1156";>#1156) https://github.com/steveukx/git-js/commit/1b91b762f04ca6686f34ac3f7b8a543a4780";>1b91b76 fix: remove explicit node:buffer import https://github.com/steveukx/git-js/commit/e390685960a3461875dce89d87ab80e3143d79fe";>e390685 Version Packages https://github.com/steveukx/git-js/commit/3c9e4b8309667d0cb4102cda770f92075fc781dd";>3c9e4
