guardrails[bot]
commented
1 year ago :warning: We detected 4 security issues in this pull request:
Vulnerable Libraries (4)
Severity | Details ----- | -------- Medium | [semantic-git-commit-cli@3.7.0](https://github.com/koromerzhin/js-commands/blob/c03ceb73228b76a3488f88d4f58a742a5be82f83/package.json#L40) upgrade to: *>=1.0.2* Medium | [pkg:npm/got@6.7.1@6.7.1](https://github.com/koromerzhin/js-commands/blob/c03ceb73228b76a3488f88d4f58a742a5be82f83/package-lock.json#L3138) (t) - **no patch available** Medium | [pkg:npm/got@6.7.1@6.7.1](https://github.com/koromerzhin/js-commands/blob/c03ceb73228b76a3488f88d4f58a742a5be82f83/package-lock.json#L10603) (t) - **no patch available** Critical | [pkg:npm/uglify-js@3.17.4@3.17.4](https://github.com/koromerzhin/js-commands/blob/c03ceb73228b76a3488f88d4f58a742a5be82f83/package-lock.json#L7518) (t) - **no patch available** More info on how to fix Vulnerable Libraries in [JavaScript](https://docs.guardrails.io/docs/en/vulnerabilities/javascript/using_vulnerable_libraries.html?utm_source=ghpr#).
👉 Go to the dashboard for detailed results.
📥 Happy? Share your feedback with us.
This PR contains the following updates:
^1.0.2->^3.0.0Release Notes
JPeer264/node-semantic-git-commit-cli
### [`v3.7.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.6.0...v3.7.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.6.0...v3.7.0) ### [`v3.6.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.5.2...v3.6.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.5.2...v3.6.0) ### [`v3.5.2`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.5.0...v3.5.2) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.5.0...v3.5.2) ### [`v3.5.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.4.0...v3.5.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.4.0...v3.5.0) ### [`v3.4.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.3.0...v3.4.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.3.0...v3.4.0) ### [`v3.3.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.2.2...v3.3.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.2.2...v3.3.0) ### [`v3.2.2`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.2.1...v3.2.2) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.2.1...v3.2.2) ### [`v3.2.1`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.2.0...v3.2.1) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.2.0...v3.2.1) ### [`v3.2.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.1.1...v3.2.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.1.1...v3.2.0) ### [`v3.1.1`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.1.0...v3.1.1) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.1.0...v3.1.1) ### [`v3.1.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.0.2...v3.1.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.0.2...v3.1.0) ### [`v3.0.2`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.0.1...v3.0.2) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.0.1...v3.0.2) ### [`v3.0.1`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.0.0...v3.0.1) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v3.0.0...v3.0.1) ### [`v3.0.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v3.0.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v2.3.1...v3.0.0) **Breaking changes:** - [`fb01392`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/fb01392) Chore: drop Node v4 ([#55](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/55)) (Jan Peer Stöcklmair) - [`866cffd`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/866cffd) Style: use consistent writing style (closes [#43](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/43)) ([#48](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/48)) (Lukas Aichbauer) **Fix:** - [`c5b5941`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/c5b5941) Docs: link semantic-release ([#52](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/52)) (Jan Peer Stöcklmair) - [`ba91f6a`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/ba91f6a) CI: test node version 8 ([#50](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/50)) (Lukas Aichbauer) - [`540af59`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/540af59) Docs: recover changelog ([#47](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/47)) (Jan Peer Stöcklmair) ### [`v2.3.1`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v2.3.1) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v2.3.0...v2.3.1) **Fix:** - [`f37923b`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/f37923b) Fix: apply length check on type + scope + message (closes [#35](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/35)) ([#42](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/42)) (Lukas Aichbauer) - [`67892ae`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/67892ae) Fix: trim trailing spaces (closes [#39](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/39)) ([#41](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/41)) (Lukas Aichbauer) **Docs** - [`8b8fe39`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/8b8fe39) Docs: Fix typo on installation with yarn (closes [#45](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/45)) ([#46](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/46)) (Guillermo Omar Lopez Lopez) ### [`v2.3.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v2.3.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v2.2.0...v2.3.0) **Feature:** - [`b28add9`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/b28add9) Feat: show commit msg length (closes [#36](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/36)) ([#40](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/40)) (Lukas Aichbauer) **Docs:** - [`5befc1b`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/5befc1b) Docs: for lowercaseTypes (closes [#34](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/34)) ([#44](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/44)) (Lukas Aichbauer) - [`270d752`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/commit/270d752) Docs: add usage with semantic-release ([#38](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/38)) (jy95) ### [`v2.2.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v2.1.0...v2.2.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v2.1.0...v2.2.0) ### [`v2.1.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v2.1.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v2.0.1...v2.1.0) **Feature:** - add support for initial commit ([#28](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/28)) ### [`v2.0.1`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v2.0.1) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v2.0.0...v2.0.1) **Docs** - improved `why` and `usage` ### [`v2.0.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v2.0.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.4.0...v2.0.0) **Breaking Changes:** - change `emojies` to `emoji` [why? 🍣](https://medium.com/@mantia/the-plural-of-emoji-is-emoji-7d053dc50e3f) - change `emoji` default to `false` - remove `Init` type - change local `.sgcrc_default` to `.sgcrc` - why? because potential contributors with a global configuration are forced to use our defaults - rename `promptConfig.js` to `questions.js` - `questions` now just need a configuration object - rename `moreInfo` to `body` - disable `minChar` and `maxChar` with `-1` **Feature:** - add `questions` configuration - add `scope` to the questions (default `false`) ( [#18](https://togithub.com/JPeer264/node-semantic-git-commit-cli/issues/18) ) ### [`v1.4.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v1.4.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.3.2...v1.4.0) **Feature** - new option `emojies` - enable or disable emojies - prevent `sgc` to prompt if nothing is added ### [`v1.3.2`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v1.3.2) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.3.1...v1.3.2) **Fix** - improved error message - show actual shell error ### [`v1.3.1`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v1.3.1) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.3.0...v1.3.1) **Fix** - 🎉 Init: The very first commit ### [`v1.3.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v1.3.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.2.1...v1.3.0) **Feature** - Fail on non git repositories ### [`v1.2.1`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v1.2.1) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.2.0...v1.2.1) **Fix** - add absolut path for README gif ### [`v1.2.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v1.2.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.1.0...v1.2.0) **Feature** - introducing `rules` in config - max-char - min-char - end-with-dot ### [`v1.1.0`](https://togithub.com/JPeer264/node-semantic-git-commit-cli/releases/tag/v1.1.0) [Compare Source](https://togithub.com/JPeer264/node-semantic-git-commit-cli/compare/v1.0.2...v1.1.0) **Feature** - Help and Version flags (`-v` `--version`, `-h` `--help`) - Global configuration file `USER_HOME/.sgcrc` - Update notifierConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.