search

dependency-check / azuredevops

Dependency Check Azure DevOps Extension
Apache License 2.0
44 stars 26 forks source link

Bump shelljs and tfx-cli #121

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 1 year ago

Bumps shelljs to 0.8.5 and updates ancestor dependency tfx-cli. These dependencies need to be updated together.

Updates shelljs from 0.5.3 to 0.8.5

Release notes

Sourced from shelljs's releases.

v0.8.5

This was a small security fix for #1058.

v0.8.4

Small patch release to fix a circular dependency warning in node v14. See #973.

v0.8.3

Closed issues:

  • Shelljs print stderr to console even if exec-only "silent" is true #905
  • refactor: remove common.state.tempDir #902
  • Can't suppress stdout for echo #899
  • exec() doesn't apply the arguments correctly #895
  • shell.exec('npm pack') painfully slow #885
  • shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881
  • test infra: mocks and skipOnWin conflict #862
  • Support for shell function completion on IDE #859
  • echo command shows options in stdout #855
  • silent does not always work #851
  • Appveyor installs the latest npm, instead of the latest compatible npm #844
  • Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830
  • inconsistent result when trying to echo to a file #798
  • Prevent require()ing executable-only files #789
  • Cannot set property to of [object String] which has only a getter #752
  • which() should check executability before returning a value #657
  • Bad encoding experience #456
  • phpcs very slow #440
  • Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254
  • .to\(file\) does not mute STDIO output #146
  • Escaping shell arguments to exec() #143
  • Allow multiple string arguments for exec() #103
  • cp does not recursively copy from readonly location #98
  • Handling permissions errors on file I/O #64

Merged pull requests:

... (truncated)

Changelog

Sourced from shelljs's changelog.

Change Log

Unreleased

Full Changelog

Closed issues:

  • find returns empty array even though directory has files #922
  • exec() should support node v10 (maxbuffer change) #915
  • grep exit status and extra newlines #900
  • Travis CI currently broken #893
  • Drop node v4 support #873
  • cp -Ru respects the -R but not the -u #808

Merged pull requests:

v0.8.3 (2018-11-13)

Full Changelog

Closed issues:

  • Shelljs print stderr to console even if exec-only "silent" is true #905
  • refactor: remove common.state.tempDir #902
  • Can't suppress stdout for echo #899
  • exec() doesn't apply the arguments correctly #895
  • shell.exec('npm pack') painfully slow #885
  • shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881
  • test infra: mocks and skipOnWin conflict #862
  • Support for shell function completion on IDE #859
  • echo command shows options in stdout #855
  • silent does not always work #851
  • Appveyor installs the latest npm, instead of the latest compatible npm #844
  • Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830
  • inconsistent result when trying to echo to a file #798
  • Prevent require()ing executable-only files #789
  • Cannot set property to of [object String] which has only a getter #752

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by nfischer, a new releaser for shelljs since your current version.


Updates tfx-cli from 0.6.3 to 0.12.0

Release notes

Sourced from tfx-cli's releases.

TFX 0.9.2

Fix parsing of --manifest-js command line argument (#374)

TFX 0.9.1

Add feature to support more advanced manifest specifications (#342)

TFX 0.9.0

Remove support for publisher creation from TFX. The API backing this functionality is being removed.

TFX 0.7.11

Restores missing error-handling code in the tfx login command.

Gets rid of the login error: TypeError: Cannot read property 'success' of undefined

TFX 0.7.9

  • Add default contentType for .html files
  • Fix default categories for tfx extension init. It is now an array of every possible category. End users can trim as needed.

Support "JSON 5" with --json5 flag.

No release notes provided.

TFX 0.7.6

Mostly dependency updates to resolve known security issues.

TFX 0.7.3

Updates REST API and fixes a few issues:

  • Validation for "public" in manifest
  • Fix tfx extension install issues
  • Avoid connecting to the internet when running --help
Commits
Maintainer changes

This version was pushed to npm by martinmrazik, a new releaser for tfx-cli since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dependency-check/azuredevops/network/alerts).
dependabot[bot] commented 3 months ago

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.