[Snyk] Security upgrade simple-git from 2.48.0 to 3.5.0

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- packages/grafana-toolkit/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Command Injection SNYK-JS-SIMPLEGIT-2434306	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: simple-git

The new version differs by 86 commits.

66c903c Merge pull request #776 from steveukx/changeset-release/main
4fc3747 Version Packages
9665dee Merge pull request #775 from steveukx/snyk/clone
2040de6 Prevent use of `--upload-pack` as a command in `git.clone` to avoid potential accidental command execution.
9bf9baa Merge pull request #772 from steveukx/changeset-release/main
64c41db Version Packages
357b4de Merge pull request #771 from steveukx/feat/status-with-nulls
ed412ef Status Summary should use null terminators to allow files with spaces in their names
94c2462 Merge pull request #768 from steveukx/changeset-release/main
9113366 Version Packages
372efa0 Merge pull request #767 from steveukx/feat/fix-fetch-snyk
d119ec4 Prevent use of `--upload-pack` as a command in `git.fetch` to avoid potential accidental command execution.
e4ff627 Merge pull request #761 from steveukx/changeset-release/main
fcc7618 Version Packages
7c24bb0 Merge pull request #760 from steveukx/fix/project-readme
80651d5 Remove pre-publish step of copying `readme.md`, no longer required
0d0c198 Merge pull request #759 from steveukx/changeset-release/main
6838e24 Version Packages
d53875f Merge pull request #758 from steveukx/fix/project-readme
ac4f38f Move workspace readme into the `simple-git` package, symlink to it from the workspace
e9f0461 Move workspace readme into the `simple-git` package, symlink to it from the workspace
bcfa6f8 Merge pull request #756 from steveukx/changeset-release/main
7a29566 Version Packages
50a8a6b Merge pull request #755 from steveukx/release-attempt

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

*Ruff* :dog: I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file :weary: Make sure the given paths are correct.

Files checked:

docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a `docker-compose.yml` file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available. Visit our website to learn more.

Commands

- `@pull-dog up` to reprovision or provision the server. - `@pull-dog down` to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository **Configuration** ```json { "isLazy": false, "dockerComposeYmlFilePaths": [ "docker-compose.yml" ], "expiry": "00:00:00", "conversationMode": "singleComment" } ``` **Trace ID** f676a300-ddd7-11ec-82f5-97ac0a63bd0e

turkdevops / grafana