iterative / cml

♾️ CML - Continuous Machine Learning | CI/CD for ML
http://cml.dev
Apache License 2.0
4k stars 338 forks source link

[Snyk] Upgrade simple-git from 3.16.0 to 3.19.0 #1396

Closed 0x2b3bfa0 closed 1 year ago

0x2b3bfa0 commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade simple-git from 3.16.0 to 3.19.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **4 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2023-05-24.
Release notes
Package name: simple-git
  • 3.19.0 - 2023-05-24

    Minor Changes

    • f702b61: Create a utility to append pathspec / file lists to tasks through the TaskOptions array/object
  • 3.18.0 - 2023-04-25

    Minor Changes

    • 5100f04: Add new interface for showBuffer to allow using git show on binary files.

    Patch Changes

    • f54cd0d: Examples and documentation for outputHandler
  • 3.17.0 - 2023-03-04

    Minor Changes

    • a63cfc2: Timeout plugin can now be configured to ignore data on either stdOut or stdErr in the git process when determining whether to kill the spawned process.
  • 3.16.1 - 2023-02-15

    Patch Changes

    • 066b228: Fix overly permissive regex in push parser
  • 3.16.0 - 2023-01-16

    Minor Changes

    • 97fde2c: Support the use of -B in place of the default -b in checkout methods
    • 0a623e5: Adds vulnerability detection to prevent use of --upload-pack and --receive-pack without explicitly opting in.

    Patch Changes

    • ec97a39: Include restricting the use of git push --exec with other allowUnsafePack exclusions, thanks to @ stsewd for the suggestion.
from simple-git GitHub release notes
Commit messages
Package name: simple-git
  • f101061 Merge pull request #925 from steveukx/changeset-release/main
  • 995837a Version Packages
  • 807b3d7 Remove circular dependency on test utilities
  • f702b61 Pathspec / file lists supported in all TaskOptions (#924)
  • a52466d Version Packages (#917)
  • 5100f04 Changeset
  • 155c78d Add new interface `git.showBuffer` to allow using `git.show` with binary file content.
  • f54cd0d Changeset
  • 4f7d401 Add example documentation for the output handler
  • a3a94e7 (chore) Update optional argument syntax throughout readme
  • a86dc31 syntax correction
  • 9af4328 correction in simple git error handling example
  • 6752835 Version Packages (#903)
  • a63cfc2 Fix/timeout progress combo (#900)
  • c5ac28a Merge pull request #895 from steveukx/dependabot/npm_and_yarn/http-cache-semantics-4.1.1
  • ac64e18 chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1
  • ca0b60d Merge pull request #894 from steveukx/changeset-release/main
  • 3a0ac21 Version Packages
  • 1cf707d Merge pull request #893 from stevenwdv/regex-patch
  • 9971b23 Update push.spec.ts
  • 066b228 Create chilly-apples-attend.md
  • d5c11b5 Fix regex in parse-push.ts
  • 0d44e0a Merge pull request #890 from steveukx/feat/stash-push-star
  • cca9ca7 Add test to show support for using `-- *` in a `git stash push`
Compare

**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/0x2b3bfa0/project/c72874ff-26c3-4f42-abed-4a4ce462ebbf?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/0x2b3bfa0/project/c72874ff-26c3-4f42-abed-4a4ce462ebbf/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/0x2b3bfa0/project/c72874ff-26c3-4f42-abed-4a4ce462ebbf/settings/integration?pkg=simple-git&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
github-actions[bot] commented 1 year ago

Test Comment

github-actions[bot] commented 1 year ago

Test Comment