Output from the synchronous version of shell.exec() may be visible to other users on the same system. You may be affected if you execute shell.exec() in multi-user Mac, Linux, or WSL environments, or if you execute shell.exec() as the root user.
Other shelljs functions (including the asynchronous version of shell.exec()) are not impacted.
shelljs is vulnerable to Improper Privilege Management
Release Notes
shelljs/shelljs
### [`v0.8.5`](https://togithub.com/shelljs/shelljs/releases/tag/v0.8.5)
[Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.4...v0.8.5)
This was a small security fix for [#1058](https://togithub.com/shelljs/shelljs/issues/1058).
### [`v0.8.4`](https://togithub.com/shelljs/shelljs/releases/tag/v0.8.4)
[Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.3...v0.8.4)
Small patch release to fix a circular dependency warning in node v14. See [#973](https://togithub.com/shelljs/shelljs/issues/973).
### [`v0.8.3`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v083-httpsgithubcomshelljsshelljstreev083-2018-11-13)
[Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.2...v0.8.3)
[Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.8.2...v0.8.3)
**Closed issues:**
- Shelljs print stderr to console even if exec-only "silent" is true [#905](https://togithub.com/shelljs/shelljs/issues/905)
- refactor: remove common.state.tempDir [#902](https://togithub.com/shelljs/shelljs/issues/902)
- Can't suppress stdout for echo [#899](https://togithub.com/shelljs/shelljs/issues/899)
- exec() doesn't apply the arguments correctly [#895](https://togithub.com/shelljs/shelljs/issues/895)
- shell.exec('npm pack') painfully slow [#885](https://togithub.com/shelljs/shelljs/issues/885)
- shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js [#881](https://togithub.com/shelljs/shelljs/issues/881)
- test infra: mocks and skipOnWin conflict [#862](https://togithub.com/shelljs/shelljs/issues/862)
- Support for shell function completion on IDE [#859](https://togithub.com/shelljs/shelljs/issues/859)
- echo command shows options in stdout [#855](https://togithub.com/shelljs/shelljs/issues/855)
- silent does not always work [#851](https://togithub.com/shelljs/shelljs/issues/851)
- Appveyor installs the latest npm, instead of the latest compatible npm [#844](https://togithub.com/shelljs/shelljs/issues/844)
- Force symbolic link (ln -sf) does not overwrite/recreate existing destination [#830](https://togithub.com/shelljs/shelljs/issues/830)
- inconsistent result when trying to echo to a file [#798](https://togithub.com/shelljs/shelljs/issues/798)
- Prevent require()ing executable-only files [#789](https://togithub.com/shelljs/shelljs/issues/789)
- Cannot set property to of \[object String] which has only a getter [#752](https://togithub.com/shelljs/shelljs/issues/752)
- which() should check executability before returning a value [#657](https://togithub.com/shelljs/shelljs/issues/657)
- Bad encoding experience [#456](https://togithub.com/shelljs/shelljs/issues/456)
- phpcs very slow [#440](https://togithub.com/shelljs/shelljs/issues/440)
- Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined [#254](https://togithub.com/shelljs/shelljs/issues/254)
- `.to\(file\)` does not mute STDIO output [#146](https://togithub.com/shelljs/shelljs/issues/146)
- Escaping shell arguments to exec() [#143](https://togithub.com/shelljs/shelljs/issues/143)
- Allow multiple string arguments for exec() [#103](https://togithub.com/shelljs/shelljs/issues/103)
- cp does not recursively copy from readonly location [#98](https://togithub.com/shelljs/shelljs/issues/98)
- Handling permissions errors on file I/O [#64](https://togithub.com/shelljs/shelljs/issues/64)
**Merged pull requests:**
- Add test case for sed on empty file [#904](https://togithub.com/shelljs/shelljs/pull/904) ([wyardley](https://togithub.com/wyardley))
- refactor: don't expose tempdir in common.state [#903](https://togithub.com/shelljs/shelljs/pull/903) ([nfischer](https://togithub.com/nfischer))
- chore(ci): fix codecov on travis [#897](https://togithub.com/shelljs/shelljs/pull/897) ([nfischer](https://togithub.com/nfischer))
- chore(npm): add ci-or-install script [#896](https://togithub.com/shelljs/shelljs/pull/896) ([nfischer](https://togithub.com/nfischer))
- Fix silent exec [#892](https://togithub.com/shelljs/shelljs/pull/892) ([nfischer](https://togithub.com/nfischer))
- chore(appveyor): run entire test matrix [#886](https://togithub.com/shelljs/shelljs/pull/886) ([nfischer](https://togithub.com/nfischer))
- docs: remove gitter badge [#880](https://togithub.com/shelljs/shelljs/pull/880) ([nfischer](https://togithub.com/nfischer))
- grep includes the i flag [#876](https://togithub.com/shelljs/shelljs/pull/876) ([ppsleep](https://togithub.com/ppsleep))
- Fix(which): match only executable files ([#657](https://togithub.com/shelljs/shelljs/issues/657)) [#874](https://togithub.com/shelljs/shelljs/pull/874) ([termosa](https://togithub.com/termosa))
- chore: rename some tests [#871](https://togithub.com/shelljs/shelljs/pull/871) ([nfischer](https://togithub.com/nfischer))
- Fix cp from readonly source [#870](https://togithub.com/shelljs/shelljs/pull/870) ([nfischer](https://togithub.com/nfischer))
- chore: bump dev dependencies and add package-lock [#864](https://togithub.com/shelljs/shelljs/pull/864) ([nfischer](https://togithub.com/nfischer))
- fix(mocks): fix conflict between mocks and skip [#863](https://togithub.com/shelljs/shelljs/pull/863) ([nfischer](https://togithub.com/nfischer))
- chore: output npm version in travis [#850](https://togithub.com/shelljs/shelljs/pull/850) ([nfischer](https://togithub.com/nfischer))
- Prevent require-ing bin/shjs [#848](https://togithub.com/shelljs/shelljs/pull/848) ([freitagbr](https://togithub.com/freitagbr))
- chore(appveyor): do not use latest npm [#847](https://togithub.com/shelljs/shelljs/pull/847) ([nfischer](https://togithub.com/nfischer))
- chore: update shelljs-release version [#846](https://togithub.com/shelljs/shelljs/pull/846) ([nfischer](https://togithub.com/nfischer))
### [`v0.8.2`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v082-httpsgithubcomshelljsshelljstreev082-2018-05-08)
[Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.1...v0.8.2)
[Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.8.1...v0.8.2)
**Closed issues:**
- High severity vulnerability in shelljs 0.8.1 [#842](https://togithub.com/shelljs/shelljs/issues/842)
- Add test for ls() on a symlink to a directory [#795](https://togithub.com/shelljs/shelljs/issues/795)
- Harden shell.exec by writing the child process in a source file [#782](https://togithub.com/shelljs/shelljs/issues/782)
- shell.exec() doesn't respond correctly to config.fatal = true [#735](https://togithub.com/shelljs/shelljs/issues/735)
- Merge 'exec: internal error' with ShellJSInternalError [#734](https://togithub.com/shelljs/shelljs/issues/734)
- exec returning null from command [#724](https://togithub.com/shelljs/shelljs/issues/724)
- Only Get Stderr from Exec [#371](https://togithub.com/shelljs/shelljs/issues/371)
- Execute child.stdout.on before child.on("exit") [#224](https://togithub.com/shelljs/shelljs/issues/224)
**Merged pull requests:**
- Workaround codecov bug of miscalculation of coverage ([#795](https://togithub.com/shelljs/shelljs/issues/795)) [#838](https://togithub.com/shelljs/shelljs/pull/838) ([dwi2](https://togithub.com/dwi2))
- Update doc comments and regenerate README.md. [#825](https://togithub.com/shelljs/shelljs/pull/825) ([Zearin](https://togithub.com/Zearin))
- chore: update contributing guidelines [#817](https://togithub.com/shelljs/shelljs/pull/817) ([nfischer](https://togithub.com/nfischer))
- chore(lint): don't allow excess trailing newlines [#816](https://togithub.com/shelljs/shelljs/pull/816) ([nfischer](https://togithub.com/nfischer))
- Remove separate "internal error" from exec [#802](https://togithub.com/shelljs/shelljs/pull/802) ([freitagbr](https://togithub.com/freitagbr))
### [`v0.8.1`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v081-httpsgithubcomshelljsshelljstreev081-2018-01-20)
[Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.0...v0.8.1)
[Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.8.0...v0.8.1)
**Closed issues:**
- Exec failing with internal error when piping large output [#818](https://togithub.com/shelljs/shelljs/issues/818)
**Merged pull requests:**
- Revert "refactor(exec): remove paramsFile ([#807](https://togithub.com/shelljs/shelljs/issues/807))" [#819](https://togithub.com/shelljs/shelljs/pull/819) ([nfischer](https://togithub.com/nfischer))
### [`v0.8.0`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v080-httpsgithubcomshelljsshelljstreev080-2018-01-12)
[Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.7.8...v0.8.0)
[Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.7.8...v0.8.0)
**Closed issues:**
- Snyk vulnerability DB reporting command injection vulnerability in ShellJS [#810](https://togithub.com/shelljs/shelljs/issues/810)
- chore: upgrade nyc [#803](https://togithub.com/shelljs/shelljs/issues/803)
- Update CI to use Node v9 [#799](https://togithub.com/shelljs/shelljs/issues/799)
- Link to FAQ wiki section in our issue template [#787](https://togithub.com/shelljs/shelljs/issues/787)
- Is it possible to get a js library(file) for ShellJS [#776](https://togithub.com/shelljs/shelljs/issues/776)
- 48, [#774](https://togithub.com/shelljs/shelljs/issues/774)
- 47 [#773](https://togithub.com/shelljs/shelljs/issues/773)
- Exec function calls JSON.stringify on command [#772](https://togithub.com/shelljs/shelljs/issues/772)
- getting different result from terminal and with shelljs [#769](https://togithub.com/shelljs/shelljs/issues/769)
- test() does not support -w and -x options [#768](https://togithub.com/shelljs/shelljs/issues/768)
- Snyk "high severity" issue [#766](https://togithub.com/shelljs/shelljs/issues/766)
- Snyk "high security [#765](https://togithub.com/shelljs/shelljs/issues/765)
- ShellJS doesn't respect NPM Registry being set outside of it [#761](https://togithub.com/shelljs/shelljs/issues/761)
- Run second shell script [#756](https://togithub.com/shelljs/shelljs/issues/756)
- shelljs seems NOT compatible with nexe under CentOS 6.5 [#754](https://togithub.com/shelljs/shelljs/issues/754)
- Feature request: pushd/popd -q option [#753](https://togithub.com/shelljs/shelljs/issues/753)
- cat doesn't support '-n' option [#750](https://togithub.com/shelljs/shelljs/issues/750)
- shelljs run xcodebuild error [#749](https://togithub.com/shelljs/shelljs/issues/749)
- Add wrappers around fs.statSync and fs.lstatSync [#745](https://togithub.com/shelljs/shelljs/issues/745)
- Improve coverage for exec() [#742](https://togithub.com/shelljs/shelljs/issues/742)
- Improve coverage for head() [#741](https://togithub.com/shelljs/shelljs/issues/741)
- shelljs is no longer used in PDF.js [#737](https://togithub.com/shelljs/shelljs/issues/737)
- ls doesn't follow links to directories [#733](https://togithub.com/shelljs/shelljs/issues/733)
- Add test for `ls regular-file.txt` [#732](https://togithub.com/shelljs/shelljs/issues/732)
- Clean up common tests [#714](https://togithub.com/shelljs/shelljs/issues/714)
- Cant get encoding buffer to work on exec [#675](https://togithub.com/shelljs/shelljs/issues/675)
- Set up Codecov for the project [#671](https://togithub.com/shelljs/shelljs/issues/671)
- ShellJS: internal error Error: EBUSY: resource busy or locked, lstat 'C:\pagefile.sys' [#514](https://togithub.com/shelljs/shelljs/issues/514)
- Feature request: provide a way to skip option parsing [#778](https://togithub.com/shelljs/shelljs/issues/778)
- Switch to os.homedir() when we move to v4+ [#683](https://togithub.com/shelljs/shelljs/issues/683)
- Drop support for v0.12 [#647](https://togithub.com/shelljs/shelljs/issues/647)
- feature: echo -n [#559](https://togithub.com/shelljs/shelljs/issues/559)
- Don't kill the node process upon unexpected error [#483](https://togithub.com/shelljs/shelljs/issues/483)
- Echo doesn't return value ending in a trailing newline [#476](https://togithub.com/shelljs/shelljs/issues/476)
- Synchronous exec stalls permenantly when there is an error/w the shell [#7](https://togithub.com/shelljs/shelljs/issues/7)
**Merged pull requests:**
- docs: announce plugin API [#812](https://togithub.com/shelljs/shelljs/pull/812) ([nfischer](https://togithub.com/nfischer))
- chore: update CI to Node v9 [#811](https://togithub.com/shelljs/shelljs/pull/811) ([nfischer](https://togithub.com/nfischer))
- refactor(exec): remove paramsFile [#807](https://togithub.com/shelljs/shelljs/pull/807) ([nfischer](https://togithub.com/nfischer))
- chore: update nyc dependency [#805](https://togithub.com/shelljs/shelljs/pull/805) ([nfischer](https://togithub.com/nfischer))
- refactor: harden plugins against unknown options [#804](https://togithub.com/shelljs/shelljs/pull/804) ([nfischer](https://togithub.com/nfischer))
- chore(eslint): use words instead of numbers [#797](https://togithub.com/shelljs/shelljs/pull/797) ([nfischer](https://togithub.com/nfischer))
- Add note to issue template about FAQ [#794](https://togithub.com/shelljs/shelljs/pull/794) ([freitagbr](https://togithub.com/freitagbr))
- Remove codeFile parameter [#791](https://togithub.com/shelljs/shelljs/pull/791) ([nfischer](https://togithub.com/nfischer))
- Use execFileSync to launch child process [#790](https://togithub.com/shelljs/shelljs/pull/790) ([nfischer](https://togithub.com/nfischer))
- refactor(exec): move child process to source file [#786](https://togithub.com/shelljs/shelljs/pull/786) ([nfischer](https://togithub.com/nfischer))
- Remove unnecessary shell.error checks from common tests [#785](https://togithub.com/shelljs/shelljs/pull/785) ([freitagbr](https://togithub.com/freitagbr))
- Add a test for ls for a single file [#784](https://togithub.com/shelljs/shelljs/pull/784) ([freitagbr](https://togithub.com/freitagbr))
- Wrap fs.statSync and fs.lstatSync [#783](https://togithub.com/shelljs/shelljs/pull/783) ([freitagbr](https://togithub.com/freitagbr))
- chore: set AVA options [#780](https://togithub.com/shelljs/shelljs/pull/780) ([nfischer](https://togithub.com/nfischer))
- chore: clean up refs to unsupported node versions [#779](https://togithub.com/shelljs/shelljs/pull/779) ([nfischer](https://togithub.com/nfischer))
- Added `-q` (quiet) option to `push`, `popd`, `dirs` functions. [#777](https://togithub.com/shelljs/shelljs/pull/777) ([alexreg](https://togithub.com/alexreg))
- feat(cat): number output lines ([#750](https://togithub.com/shelljs/shelljs/issues/750)) [#775](https://togithub.com/shelljs/shelljs/pull/775) ([gcca](https://togithub.com/gcca))
- refactor(test): update AVA and refactor tests [#760](https://togithub.com/shelljs/shelljs/pull/760) ([nfischer](https://togithub.com/nfischer))
- chore: add skipOnWin and skipOnUnix test helpers [#746](https://togithub.com/shelljs/shelljs/pull/746) ([nfischer](https://togithub.com/nfischer))
- test(exec): add tests for coverage [#744](https://togithub.com/shelljs/shelljs/pull/744) ([nfischer](https://togithub.com/nfischer))
- test(head): improve coverage [#743](https://togithub.com/shelljs/shelljs/pull/743) ([nfischer](https://togithub.com/nfischer))
- Remove PDF.js mention from README.md [#738](https://togithub.com/shelljs/shelljs/pull/738) ([voy](https://togithub.com/voy))
- Provide an API to pass parameters which resemble options [#792](https://togithub.com/shelljs/shelljs/pull/792) ([nfischer](https://togithub.com/nfischer))
- Fix ls not following links to directories by default [#764](https://togithub.com/shelljs/shelljs/pull/764) ([freitagbr](https://togithub.com/freitagbr))
- Add "encoding" option to exec [#763](https://togithub.com/shelljs/shelljs/pull/763) ([freitagbr](https://togithub.com/freitagbr))
- Merge dev into master [#731](https://togithub.com/shelljs/shelljs/pull/731) ([freitagbr](https://togithub.com/freitagbr))
- Deprecate common.getUserHome, advise using os.homedir instead [#725](https://togithub.com/shelljs/shelljs/pull/725) ([freitagbr](https://togithub.com/freitagbr))
- Echo test mocks [#708](https://togithub.com/shelljs/shelljs/pull/708) ([freitagbr](https://togithub.com/freitagbr))
- Safely exit by throwing an error [#546](https://togithub.com/shelljs/shelljs/pull/546) ([freitagbr](https://togithub.com/freitagbr))
- chore(make): depreciate shelljs/make [#431](https://togithub.com/shelljs/shelljs/pull/431) ([ariporad](https://togithub.com/ariporad))
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, click this checkbox.
balena-ci
commented
2 years ago
This PR contains the following updates:
^0.7.3->^0.8.0GitHub Vulnerability Alerts
GHSA-64g7-mvw6-v9qj
Impact
Output from the synchronous version of
shell.exec()may be visible to other users on the same system. You may be affected if you executeshell.exec()in multi-user Mac, Linux, or WSL environments, or if you executeshell.exec()as the root user.Other shelljs functions (including the asynchronous version of
shell.exec()) are not impacted.Patches
Patched in shelljs 0.8.5
Workarounds
Recommended action is to upgrade to 0.8.5.
References
https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c/
For more information
If you have any questions or comments about this advisory:
CVE-2022-0144
shelljs is vulnerable to Improper Privilege Management
Release Notes
shelljs/shelljs
### [`v0.8.5`](https://togithub.com/shelljs/shelljs/releases/tag/v0.8.5) [Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.4...v0.8.5) This was a small security fix for [#1058](https://togithub.com/shelljs/shelljs/issues/1058). ### [`v0.8.4`](https://togithub.com/shelljs/shelljs/releases/tag/v0.8.4) [Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.3...v0.8.4) Small patch release to fix a circular dependency warning in node v14. See [#973](https://togithub.com/shelljs/shelljs/issues/973). ### [`v0.8.3`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v083-httpsgithubcomshelljsshelljstreev083-2018-11-13) [Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.2...v0.8.3) [Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.8.2...v0.8.3) **Closed issues:** - Shelljs print stderr to console even if exec-only "silent" is true [#905](https://togithub.com/shelljs/shelljs/issues/905) - refactor: remove common.state.tempDir [#902](https://togithub.com/shelljs/shelljs/issues/902) - Can't suppress stdout for echo [#899](https://togithub.com/shelljs/shelljs/issues/899) - exec() doesn't apply the arguments correctly [#895](https://togithub.com/shelljs/shelljs/issues/895) - shell.exec('npm pack') painfully slow [#885](https://togithub.com/shelljs/shelljs/issues/885) - shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js [#881](https://togithub.com/shelljs/shelljs/issues/881) - test infra: mocks and skipOnWin conflict [#862](https://togithub.com/shelljs/shelljs/issues/862) - Support for shell function completion on IDE [#859](https://togithub.com/shelljs/shelljs/issues/859) - echo command shows options in stdout [#855](https://togithub.com/shelljs/shelljs/issues/855) - silent does not always work [#851](https://togithub.com/shelljs/shelljs/issues/851) - Appveyor installs the latest npm, instead of the latest compatible npm [#844](https://togithub.com/shelljs/shelljs/issues/844) - Force symbolic link (ln -sf) does not overwrite/recreate existing destination [#830](https://togithub.com/shelljs/shelljs/issues/830) - inconsistent result when trying to echo to a file [#798](https://togithub.com/shelljs/shelljs/issues/798) - Prevent require()ing executable-only files [#789](https://togithub.com/shelljs/shelljs/issues/789) - Cannot set property to of \[object String] which has only a getter [#752](https://togithub.com/shelljs/shelljs/issues/752) - which() should check executability before returning a value [#657](https://togithub.com/shelljs/shelljs/issues/657) - Bad encoding experience [#456](https://togithub.com/shelljs/shelljs/issues/456) - phpcs very slow [#440](https://togithub.com/shelljs/shelljs/issues/440) - Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined [#254](https://togithub.com/shelljs/shelljs/issues/254) - `.to\(file\)` does not mute STDIO output [#146](https://togithub.com/shelljs/shelljs/issues/146) - Escaping shell arguments to exec() [#143](https://togithub.com/shelljs/shelljs/issues/143) - Allow multiple string arguments for exec() [#103](https://togithub.com/shelljs/shelljs/issues/103) - cp does not recursively copy from readonly location [#98](https://togithub.com/shelljs/shelljs/issues/98) - Handling permissions errors on file I/O [#64](https://togithub.com/shelljs/shelljs/issues/64) **Merged pull requests:** - Add test case for sed on empty file [#904](https://togithub.com/shelljs/shelljs/pull/904) ([wyardley](https://togithub.com/wyardley)) - refactor: don't expose tempdir in common.state [#903](https://togithub.com/shelljs/shelljs/pull/903) ([nfischer](https://togithub.com/nfischer)) - chore(ci): fix codecov on travis [#897](https://togithub.com/shelljs/shelljs/pull/897) ([nfischer](https://togithub.com/nfischer)) - chore(npm): add ci-or-install script [#896](https://togithub.com/shelljs/shelljs/pull/896) ([nfischer](https://togithub.com/nfischer)) - Fix silent exec [#892](https://togithub.com/shelljs/shelljs/pull/892) ([nfischer](https://togithub.com/nfischer)) - chore(appveyor): run entire test matrix [#886](https://togithub.com/shelljs/shelljs/pull/886) ([nfischer](https://togithub.com/nfischer)) - docs: remove gitter badge [#880](https://togithub.com/shelljs/shelljs/pull/880) ([nfischer](https://togithub.com/nfischer)) - grep includes the i flag [#876](https://togithub.com/shelljs/shelljs/pull/876) ([ppsleep](https://togithub.com/ppsleep)) - Fix(which): match only executable files ([#657](https://togithub.com/shelljs/shelljs/issues/657)) [#874](https://togithub.com/shelljs/shelljs/pull/874) ([termosa](https://togithub.com/termosa)) - chore: rename some tests [#871](https://togithub.com/shelljs/shelljs/pull/871) ([nfischer](https://togithub.com/nfischer)) - Fix cp from readonly source [#870](https://togithub.com/shelljs/shelljs/pull/870) ([nfischer](https://togithub.com/nfischer)) - chore: bump dev dependencies and add package-lock [#864](https://togithub.com/shelljs/shelljs/pull/864) ([nfischer](https://togithub.com/nfischer)) - fix(mocks): fix conflict between mocks and skip [#863](https://togithub.com/shelljs/shelljs/pull/863) ([nfischer](https://togithub.com/nfischer)) - chore: output npm version in travis [#850](https://togithub.com/shelljs/shelljs/pull/850) ([nfischer](https://togithub.com/nfischer)) - Prevent require-ing bin/shjs [#848](https://togithub.com/shelljs/shelljs/pull/848) ([freitagbr](https://togithub.com/freitagbr)) - chore(appveyor): do not use latest npm [#847](https://togithub.com/shelljs/shelljs/pull/847) ([nfischer](https://togithub.com/nfischer)) - chore: update shelljs-release version [#846](https://togithub.com/shelljs/shelljs/pull/846) ([nfischer](https://togithub.com/nfischer)) ### [`v0.8.2`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v082-httpsgithubcomshelljsshelljstreev082-2018-05-08) [Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.1...v0.8.2) [Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.8.1...v0.8.2) **Closed issues:** - High severity vulnerability in shelljs 0.8.1 [#842](https://togithub.com/shelljs/shelljs/issues/842) - Add test for ls() on a symlink to a directory [#795](https://togithub.com/shelljs/shelljs/issues/795) - Harden shell.exec by writing the child process in a source file [#782](https://togithub.com/shelljs/shelljs/issues/782) - shell.exec() doesn't respond correctly to config.fatal = true [#735](https://togithub.com/shelljs/shelljs/issues/735) - Merge 'exec: internal error' with ShellJSInternalError [#734](https://togithub.com/shelljs/shelljs/issues/734) - exec returning null from command [#724](https://togithub.com/shelljs/shelljs/issues/724) - Only Get Stderr from Exec [#371](https://togithub.com/shelljs/shelljs/issues/371) - Execute child.stdout.on before child.on("exit") [#224](https://togithub.com/shelljs/shelljs/issues/224) **Merged pull requests:** - Workaround codecov bug of miscalculation of coverage ([#795](https://togithub.com/shelljs/shelljs/issues/795)) [#838](https://togithub.com/shelljs/shelljs/pull/838) ([dwi2](https://togithub.com/dwi2)) - Update doc comments and regenerate README.md. [#825](https://togithub.com/shelljs/shelljs/pull/825) ([Zearin](https://togithub.com/Zearin)) - chore: update contributing guidelines [#817](https://togithub.com/shelljs/shelljs/pull/817) ([nfischer](https://togithub.com/nfischer)) - chore(lint): don't allow excess trailing newlines [#816](https://togithub.com/shelljs/shelljs/pull/816) ([nfischer](https://togithub.com/nfischer)) - Remove separate "internal error" from exec [#802](https://togithub.com/shelljs/shelljs/pull/802) ([freitagbr](https://togithub.com/freitagbr)) ### [`v0.8.1`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v081-httpsgithubcomshelljsshelljstreev081-2018-01-20) [Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.8.0...v0.8.1) [Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.8.0...v0.8.1) **Closed issues:** - Exec failing with internal error when piping large output [#818](https://togithub.com/shelljs/shelljs/issues/818) **Merged pull requests:** - Revert "refactor(exec): remove paramsFile ([#807](https://togithub.com/shelljs/shelljs/issues/807))" [#819](https://togithub.com/shelljs/shelljs/pull/819) ([nfischer](https://togithub.com/nfischer)) ### [`v0.8.0`](https://togithub.com/shelljs/shelljs/blob/HEAD/CHANGELOG.md#v080-httpsgithubcomshelljsshelljstreev080-2018-01-12) [Compare Source](https://togithub.com/shelljs/shelljs/compare/v0.7.8...v0.8.0) [Full Changelog](https://togithub.com/shelljs/shelljs/compare/v0.7.8...v0.8.0) **Closed issues:** - Snyk vulnerability DB reporting command injection vulnerability in ShellJS [#810](https://togithub.com/shelljs/shelljs/issues/810) - chore: upgrade nyc [#803](https://togithub.com/shelljs/shelljs/issues/803) - Update CI to use Node v9 [#799](https://togithub.com/shelljs/shelljs/issues/799) - Link to FAQ wiki section in our issue template [#787](https://togithub.com/shelljs/shelljs/issues/787) - Is it possible to get a js library(file) for ShellJS [#776](https://togithub.com/shelljs/shelljs/issues/776) - 48, [#774](https://togithub.com/shelljs/shelljs/issues/774) - 47 [#773](https://togithub.com/shelljs/shelljs/issues/773) - Exec function calls JSON.stringify on command [#772](https://togithub.com/shelljs/shelljs/issues/772) - getting different result from terminal and with shelljs [#769](https://togithub.com/shelljs/shelljs/issues/769) - test() does not support -w and -x options [#768](https://togithub.com/shelljs/shelljs/issues/768) - Snyk "high severity" issue [#766](https://togithub.com/shelljs/shelljs/issues/766) - Snyk "high security [#765](https://togithub.com/shelljs/shelljs/issues/765) - ShellJS doesn't respect NPM Registry being set outside of it [#761](https://togithub.com/shelljs/shelljs/issues/761) - Run second shell script [#756](https://togithub.com/shelljs/shelljs/issues/756) - shelljs seems NOT compatible with nexe under CentOS 6.5 [#754](https://togithub.com/shelljs/shelljs/issues/754) - Feature request: pushd/popd -q option [#753](https://togithub.com/shelljs/shelljs/issues/753) - cat doesn't support '-n' option [#750](https://togithub.com/shelljs/shelljs/issues/750) - shelljs run xcodebuild error [#749](https://togithub.com/shelljs/shelljs/issues/749) - Add wrappers around fs.statSync and fs.lstatSync [#745](https://togithub.com/shelljs/shelljs/issues/745) - Improve coverage for exec() [#742](https://togithub.com/shelljs/shelljs/issues/742) - Improve coverage for head() [#741](https://togithub.com/shelljs/shelljs/issues/741) - shelljs is no longer used in PDF.js [#737](https://togithub.com/shelljs/shelljs/issues/737) - ls doesn't follow links to directories [#733](https://togithub.com/shelljs/shelljs/issues/733) - Add test for `ls regular-file.txt` [#732](https://togithub.com/shelljs/shelljs/issues/732) - Clean up common tests [#714](https://togithub.com/shelljs/shelljs/issues/714) - Cant get encoding buffer to work on exec [#675](https://togithub.com/shelljs/shelljs/issues/675) - Set up Codecov for the project [#671](https://togithub.com/shelljs/shelljs/issues/671) - ShellJS: internal error Error: EBUSY: resource busy or locked, lstat 'C:\pagefile.sys' [#514](https://togithub.com/shelljs/shelljs/issues/514) - Feature request: provide a way to skip option parsing [#778](https://togithub.com/shelljs/shelljs/issues/778) - Switch to os.homedir() when we move to v4+ [#683](https://togithub.com/shelljs/shelljs/issues/683) - Drop support for v0.12 [#647](https://togithub.com/shelljs/shelljs/issues/647) - feature: echo -n [#559](https://togithub.com/shelljs/shelljs/issues/559) - Don't kill the node process upon unexpected error [#483](https://togithub.com/shelljs/shelljs/issues/483) - Echo doesn't return value ending in a trailing newline [#476](https://togithub.com/shelljs/shelljs/issues/476) - Synchronous exec stalls permenantly when there is an error/w the shell [#7](https://togithub.com/shelljs/shelljs/issues/7) **Merged pull requests:** - docs: announce plugin API [#812](https://togithub.com/shelljs/shelljs/pull/812) ([nfischer](https://togithub.com/nfischer)) - chore: update CI to Node v9 [#811](https://togithub.com/shelljs/shelljs/pull/811) ([nfischer](https://togithub.com/nfischer)) - refactor(exec): remove paramsFile [#807](https://togithub.com/shelljs/shelljs/pull/807) ([nfischer](https://togithub.com/nfischer)) - chore: update nyc dependency [#805](https://togithub.com/shelljs/shelljs/pull/805) ([nfischer](https://togithub.com/nfischer)) - refactor: harden plugins against unknown options [#804](https://togithub.com/shelljs/shelljs/pull/804) ([nfischer](https://togithub.com/nfischer)) - chore(eslint): use words instead of numbers [#797](https://togithub.com/shelljs/shelljs/pull/797) ([nfischer](https://togithub.com/nfischer)) - Add note to issue template about FAQ [#794](https://togithub.com/shelljs/shelljs/pull/794) ([freitagbr](https://togithub.com/freitagbr)) - Remove codeFile parameter [#791](https://togithub.com/shelljs/shelljs/pull/791) ([nfischer](https://togithub.com/nfischer)) - Use execFileSync to launch child process [#790](https://togithub.com/shelljs/shelljs/pull/790) ([nfischer](https://togithub.com/nfischer)) - refactor(exec): move child process to source file [#786](https://togithub.com/shelljs/shelljs/pull/786) ([nfischer](https://togithub.com/nfischer)) - Remove unnecessary shell.error checks from common tests [#785](https://togithub.com/shelljs/shelljs/pull/785) ([freitagbr](https://togithub.com/freitagbr)) - Add a test for ls for a single file [#784](https://togithub.com/shelljs/shelljs/pull/784) ([freitagbr](https://togithub.com/freitagbr)) - Wrap fs.statSync and fs.lstatSync [#783](https://togithub.com/shelljs/shelljs/pull/783) ([freitagbr](https://togithub.com/freitagbr)) - chore: set AVA options [#780](https://togithub.com/shelljs/shelljs/pull/780) ([nfischer](https://togithub.com/nfischer)) - chore: clean up refs to unsupported node versions [#779](https://togithub.com/shelljs/shelljs/pull/779) ([nfischer](https://togithub.com/nfischer)) - Added `-q` (quiet) option to `push`, `popd`, `dirs` functions. [#777](https://togithub.com/shelljs/shelljs/pull/777) ([alexreg](https://togithub.com/alexreg)) - feat(cat): number output lines ([#750](https://togithub.com/shelljs/shelljs/issues/750)) [#775](https://togithub.com/shelljs/shelljs/pull/775) ([gcca](https://togithub.com/gcca)) - refactor(test): update AVA and refactor tests [#760](https://togithub.com/shelljs/shelljs/pull/760) ([nfischer](https://togithub.com/nfischer)) - chore: add skipOnWin and skipOnUnix test helpers [#746](https://togithub.com/shelljs/shelljs/pull/746) ([nfischer](https://togithub.com/nfischer)) - test(exec): add tests for coverage [#744](https://togithub.com/shelljs/shelljs/pull/744) ([nfischer](https://togithub.com/nfischer)) - test(head): improve coverage [#743](https://togithub.com/shelljs/shelljs/pull/743) ([nfischer](https://togithub.com/nfischer)) - Remove PDF.js mention from README.md [#738](https://togithub.com/shelljs/shelljs/pull/738) ([voy](https://togithub.com/voy)) - Provide an API to pass parameters which resemble options [#792](https://togithub.com/shelljs/shelljs/pull/792) ([nfischer](https://togithub.com/nfischer)) - Fix ls not following links to directories by default [#764](https://togithub.com/shelljs/shelljs/pull/764) ([freitagbr](https://togithub.com/freitagbr)) - Add "encoding" option to exec [#763](https://togithub.com/shelljs/shelljs/pull/763) ([freitagbr](https://togithub.com/freitagbr)) - Merge dev into master [#731](https://togithub.com/shelljs/shelljs/pull/731) ([freitagbr](https://togithub.com/freitagbr)) - Deprecate common.getUserHome, advise using os.homedir instead [#725](https://togithub.com/shelljs/shelljs/pull/725) ([freitagbr](https://togithub.com/freitagbr)) - Echo test mocks [#708](https://togithub.com/shelljs/shelljs/pull/708) ([freitagbr](https://togithub.com/freitagbr)) - Safely exit by throwing an error [#546](https://togithub.com/shelljs/shelljs/pull/546) ([freitagbr](https://togithub.com/freitagbr)) - chore(make): depreciate shelljs/make [#431](https://togithub.com/shelljs/shelljs/pull/431) ([ariporad](https://togithub.com/ariporad))Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.