bigcommerce / stencil-cli

BigCommerce Stencil emulator for local theme development
https://developer.bigcommerce.com/stencil-docs
BSD 4-Clause "Original" or "Old" License
102 stars 142 forks source link

build(deps): bump simple-git from 3.14.1 to 3.18.0 #1096

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps simple-git from 3.14.1 to 3.18.0.

Release notes

Sourced from simple-git's releases.

simple-git@3.18.0

Minor Changes

  • 5100f04: Add new interface for showBuffer to allow using git show on binary files.

Patch Changes

  • f54cd0d: Examples and documentation for outputHandler

simple-git@3.17.0

Minor Changes

  • a63cfc2: Timeout plugin can now be configured to ignore data on either stdOut or stdErr in the git process when determining whether to kill the spawned process.

simple-git@3.16.1

Patch Changes

  • 066b228: Fix overly permissive regex in push parser

simple-git@3.16.0

Minor Changes

  • 97fde2c: Support the use of -B in place of the default -b in checkout methods
  • 0a623e5: Adds vulnerability detection to prevent use of --upload-pack and --receive-pack without explicitly opting in.

Patch Changes

  • ec97a39: Include restricting the use of git push --exec with other allowUnsafePack exclusions, thanks to @​stsewd for the suggestion.

simple-git@3.15.1

Patch Changes

  • de570ac: Resolves an issue whereby non-strings can be passed into the config switch detector.

simple-git@3.15.0

Minor Changes

  • 7746480: Disables the use of inline configuration arguments to prevent unitentionally allowing non-standard remote protocols without explicitly opting in to this practice with the new allowUnsafeProtocolOverride property having been enabled.

Patch Changes

  • 7746480: - Upgrade repo dependencies - lerna and jest
    • Include node@19 in the test matrix
Changelog

Sourced from simple-git's changelog.

3.18.0

Minor Changes

  • 5100f04: Add new interface for showBuffer to allow using git show on binary files.

Patch Changes

  • f54cd0d: Examples and documentation for outputHandler

3.17.0

Minor Changes

  • a63cfc2: Timeout plugin can now be configured to ignore data on either stdOut or stdErr in the git process when determining whether to kill the spawned process.

3.16.1

Patch Changes

  • 066b228: Fix overly permissive regex in push parser

3.16.0

Minor Changes

  • 97fde2c: Support the use of -B in place of the default -b in checkout methods
  • 0a623e5: Adds vulnerability detection to prevent use of --upload-pack and --receive-pack without explicitly opting in.

Patch Changes

  • ec97a39: Include restricting the use of git push --exec with other allowUnsafePack exclusions, thanks to @​stsewd for the suggestion.

3.15.1

Patch Changes

  • de570ac: Resolves an issue whereby non-strings can be passed into the config switch detector.

3.15.0

Minor Changes

  • 7746480: Disables the use of inline configuration arguments to prevent unitentionally allowing non-standard remote protocols without explicitly opting in to this practice with the new allowUnsafeProtocolOverride property having been enabled.

Patch Changes

  • 7746480: - Upgrade repo dependencies - lerna and jest
    • Include node@19 in the test matrix
Commits
  • a52466d Version Packages (#917)
  • 155c78d Add new interface git.showBuffer to allow using git.show with binary file...
  • 4f7d401 Add example documentation for the output handler
  • a3a94e7 (chore) Update optional argument syntax throughout readme
  • a86dc31 syntax correction
  • 6752835 Version Packages (#903)
  • a63cfc2 Fix/timeout progress combo (#900)
  • 3a0ac21 Version Packages
  • 9971b23 Update push.spec.ts
  • d5c11b5 Fix regex in parse-push.ts
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #1107.