Closed snyk-bot closed 2 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Recently disclosed, Has a fix available, CVSS 8.1
SNYK-JS-SIMPLEGIT-2421199
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: simple-git
The new version differs by 87 commits.- 94c2462 Merge pull request #768 from steveukx/changeset-release/main
- 9113366 Version Packages
- 372efa0 Merge pull request #767 from steveukx/feat/fix-fetch-snyk
- d119ec4 Prevent use of `--upload-pack` as a command in `git.fetch` to avoid potential accidental command execution.
- e4ff627 Merge pull request #761 from steveukx/changeset-release/main
- fcc7618 Version Packages
- 7c24bb0 Merge pull request #760 from steveukx/fix/project-readme
- 80651d5 Remove pre-publish step of copying `readme.md`, no longer required
- 0d0c198 Merge pull request #759 from steveukx/changeset-release/main
- 6838e24 Version Packages
- d53875f Merge pull request #758 from steveukx/fix/project-readme
- ac4f38f Move workspace readme into the `simple-git` package, symlink to it from the workspace
- e9f0461 Move workspace readme into the `simple-git` package, symlink to it from the workspace
- bcfa6f8 Merge pull request #756 from steveukx/changeset-release/main
- 7a29566 Version Packages
- 50a8a6b Merge pull request #755 from steveukx/release-attempt
- d35987b Add publish goal to changeset action
- 5073eaa Merge pull request #754 from steveukx/changeset-release/main
- c4f937d Version Packages
- e9abd5d Merge pull request #753 from steveukx/release-attempt
- 1e4c591 Removes the auto-deletion of changesets branches
- 284f896 Merge pull request #752 from steveukx/changeset-release/main
- c486165 Version Packages
- 79ec4e4 Merge pull request #751 from steveukx/release-attempt
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.