Azure / autorest

OpenAPI (f.k.a Swagger) Specification code generator. Supports C#, PowerShell, Go, Java, Node.js, TypeScript, Python
MIT License
4.6k stars 733 forks source link

Add shell=true when spawning cmd files in windows #4969

Closed hallipr closed 4 months ago

hallipr commented 4 months ago

When spawning .bat or .cmd files on windows, node will now error with EINVAL if shell is not set to true. https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2

azure-pipelines[bot] commented 4 months ago

You may test this build by running autorest --reset and then either:


Add the following CLI flags

Pacakge Flag Description
@autorest/core --version:https://tinyurl.com/2639ambr For changes to autorest core.
@autorest/modelerfour --use:https://tinyurl.com/2dj6wno3 For changes to modelerfour.

Or with all

autorest --version:https://tinyurl.com/2639ambr --use:https://tinyurl.com/2dj6wno3

or use the following in your autorest configuration:

# For changes to autorest core
version: "https://tinyurl.com/2639ambr"

# For changes to modelerfour
use-extension:
  "@autorest/modelerfour": "https://tinyurl.com/2dj6wno3"

If this build is good for you, give this comment a thumbs up. (👍) And you should run autorest --reset again once you're finished testing to remove it.