Skip to content

[Snyk] Upgrade simple-git from 3.14.1 to 3.15.0 #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Dec 4, 2022

Snyk has created this PR to upgrade simple-git from 3.14.1 to 3.15.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 22 days ago, on 2022-11-12.
Release notes
Package name: simple-git
  • 3.15.0 - 2022-11-12

    Minor Changes

    • 7746480: Disables the use of inline configuration arguments to prevent unitentionally allowing non-standard remote protocols without explicitly opting in to this practice with the new allowUnsafeProtocolOverride property having been enabled.

    Patch Changes

    • 7746480: - Upgrade repo dependencies - lerna and jest
      • Include node@19 in the test matrix
  • 3.14.1 - 2022-09-17

    Patch Changes

    • 5a2e7e4: Add version parsing support for non-numeric patches (including "built from source" style 1.11.GIT)
from simple-git GitHub release notes
Commit messages
Package name: simple-git
  • e1d66b6 Merge pull request #863 from steveukx/changeset-release/main
  • d4764bf Version Packages
  • 7746480 Chore: bump lerna, jest and create prettier workflow (#862)
  • 47030d5 Merge pull request #861 from steveukx/security/protocols
  • 6b3c631 Create the `unsafe` plugin to configure how `simple-git` treats known potentially unsafe operations.

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant