iterative / cml

♾️ CML - Continuous Machine Learning | CI/CD for ML
http://cml.dev
Apache License 2.0
4k stars 338 forks source link

[Snyk] Upgrade simple-git from 3.16.0 to 3.19.1 #1409

Closed 0x2b3bfa0 closed 1 year ago

0x2b3bfa0 commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade simple-git from 3.16.0 to 3.19.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **5 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2023-06-26.
Release notes
Package name: simple-git
  • 3.19.1 - 2023-06-26

    Patch Changes

    • 2ab1936: keep path splitter without path specs
  • 3.19.0 - 2023-05-24

    Minor Changes

    • f702b61: Create a utility to append pathspec / file lists to tasks through the TaskOptions array/object
  • 3.18.0 - 2023-04-25

    Minor Changes

    • 5100f04: Add new interface for showBuffer to allow using git show on binary files.

    Patch Changes

    • f54cd0d: Examples and documentation for outputHandler
  • 3.17.0 - 2023-03-04

    Minor Changes

    • a63cfc2: Timeout plugin can now be configured to ignore data on either stdOut or stdErr in the git process when determining whether to kill the spawned process.
  • 3.16.1 - 2023-02-15

    Patch Changes

    • 066b228: Fix overly permissive regex in push parser
  • 3.16.0 - 2023-01-16

    Minor Changes

    • 97fde2c: Support the use of -B in place of the default -b in checkout methods
    • 0a623e5: Adds vulnerability detection to prevent use of --upload-pack and --receive-pack without explicitly opting in.

    Patch Changes

    • ec97a39: Include restricting the use of git push --exec with other allowUnsafePack exclusions, thanks to @ stsewd for the suggestion.
from simple-git GitHub release notes
Commit messages
Package name: simple-git
  • d184c13 Merge pull request #933 from steveukx/changeset-release/main
  • 53e2f7c Version Packages
  • 411ac6b Merge pull request #932 from steveukx/pr/930
  • fea8551 Lint
  • 516736f Reusable function to append suffix parameters
  • 2ab1936 fix: keep splitter if no path specs exist (#929)
  • f101061 Merge pull request #925 from steveukx/changeset-release/main
  • 995837a Version Packages
  • 807b3d7 Remove circular dependency on test utilities
  • f702b61 Pathspec / file lists supported in all TaskOptions (#924)
  • a52466d Version Packages (#917)
  • 5100f04 Changeset
  • 155c78d Add new interface `git.showBuffer` to allow using `git.show` with binary file content.
  • f54cd0d Changeset
  • 4f7d401 Add example documentation for the output handler
  • a3a94e7 (chore) Update optional argument syntax throughout readme
  • a86dc31 syntax correction
  • 9af4328 correction in simple git error handling example
  • 6752835 Version Packages (#903)
  • a63cfc2 Fix/timeout progress combo (#900)
  • c5ac28a Merge pull request #895 from steveukx/dependabot/npm_and_yarn/http-cache-semantics-4.1.1
  • ac64e18 chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1
  • ca0b60d Merge pull request #894 from steveukx/changeset-release/main
  • 3a0ac21 Version Packages
Compare

**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/0x2b3bfa0/project/c72874ff-26c3-4f42-abed-4a4ce462ebbf?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/0x2b3bfa0/project/c72874ff-26c3-4f42-abed-4a4ce462ebbf/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/0x2b3bfa0/project/c72874ff-26c3-4f42-abed-4a4ce462ebbf/settings/integration?pkg=simple-git&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
github-actions[bot] commented 1 year ago

Test Comment

github-actions[bot] commented 1 year ago

Test Comment

dacbd commented 1 year ago

Going to close and hope the bot fixes the merge conflict for me.