Skip to content
This repository was archived by the owner on Mar 14, 2023. It is now read-only.

chore(deps): bump simple-git and @serverless/dashboard-plugin in /examples/include-external-npm-packages-lock-file #159

Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): bump simple-git and @serverless/dashboard-plugin in /examples/include-external-npm-packages-lock-file #159

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 27, 2023 •
edited
Loading

Bumps simple-git and @serverless/dashboard-plugin. These dependencies needed to be updated together.
Updates simple-git from 2.48.0 to 3.16.0

Release notes

Sourced from simple-git's releases.

simple-git@3.16.0

Minor Changes

  • 97fde2c: Support the use of -B in place of the default -b in checkout methods
  • 0a623e5: Adds vulnerability detection to prevent use of --upload-pack and --receive-pack without explicitly opting in.

Patch Changes

  • ec97a39: Include restricting the use of git push --exec with other allowUnsafePack exclusions, thanks to @​stsewd for the suggestion.

simple-git@3.15.1

Patch Changes

  • de570ac: Resolves an issue whereby non-strings can be passed into the config switch detector.

simple-git@3.15.0

Minor Changes

  • 7746480: Disables the use of inline configuration arguments to prevent unitentionally allowing non-standard remote protocols without explicitly opting in to this practice with the new allowUnsafeProtocolOverride property having been enabled.

Patch Changes

  • 7746480: - Upgrade repo dependencies - lerna and jest
    • Include node@19 in the test matrix

simple-git@3.14.1

Patch Changes

  • 5a2e7e4: Add version parsing support for non-numeric patches (including "built from source" style 1.11.GIT)

simple-git@3.14.0

Minor Changes

  • 19029fc: Create the abort plugin to allow cancelling all pending and future tasks.
  • 4259b26: Add .version to return git version information, including whether the git binary is installed.

simple-git@3.13.0

Minor Changes

  • 87b0d75: Increase the level of deprecation notices for use of simple-git/promise, which will be fully removed in the next major
  • d0dceda: Allow supplying just one of to/from in the options supplied to git.log

Patch Changes

  • 6b3e05c: Use shared test utilities bundle in simple-git tests, to enable consistent testing across packages in the future

simple-git@3.12.0

Minor Changes

  • bfd652b: Add a new configuration option to enable trimming white-space from the response to git.raw

... (truncated)

Changelog

Sourced from simple-git's changelog.

3.16.0

Minor Changes

  • 97fde2c: Support the use of -B in place of the default -b in checkout methods
  • 0a623e5: Adds vulnerability detection to prevent use of --upload-pack and --receive-pack without explicitly opting in.

Patch Changes

  • ec97a39: Include restricting the use of git push --exec with other allowUnsafePack exclusions, thanks to @​stsewd for the suggestion.

3.15.1

Patch Changes

  • de570ac: Resolves an issue whereby non-strings can be passed into the config switch detector.

3.15.0

Minor Changes

  • 7746480: Disables the use of inline configuration arguments to prevent unitentionally allowing non-standard remote protocols without explicitly opting in to this practice with the new allowUnsafeProtocolOverride property having been enabled.

Patch Changes

  • 7746480: - Upgrade repo dependencies - lerna and jest
    • Include node@19 in the test matrix

3.14.1

Patch Changes

  • 5a2e7e4: Add version parsing support for non-numeric patches (including "built from source" style 1.11.GIT)

3.14.0

Minor Changes

  • 19029fc: Create the abort plugin to allow cancelling all pending and future tasks.
  • 4259b26: Add .version to return git version information, including whether the git binary is installed.

3.13.0

Minor Changes

  • 87b0d75: Increase the level of deprecation notices for use of simple-git/promise, which will be fully removed in the next major
  • d0dceda: Allow supplying just one of to/from in the options supplied to git.log

Patch Changes

... (truncated)

Commits
  • 1a12952 Version Packages
  • ec97a39 Block unsafe pack (push --exec) (#882)
  • 0a623e5 Feat/unsafe pack (#881)
  • 97fde2c Add support for using the -B modifier instead of the default -b when usin...
  • edfd459 Update readme.md
  • c9fc61f Version Packages
  • de570ac Fix/non strings (#867)
  • d4764bf Version Packages
  • 7746480 Chore: bump lerna, jest and create prettier workflow (#862)
  • 6b3c631 Create the unsafe plugin to configure how simple-git treats known potenti...
  • Additional commits viewable in compare view

Updates @serverless/dashboard-plugin from 6.1.5 to 6.2.3

Release notes

Sourced from @​serverless/dashboard-plugin's releases.

6.2.3 (2023-01-26)

Maintenance Improvements

Comparison since last release

6.2.2 (2022-04-20)

Maintenance Improvements

Comparison since last release

6.2.1 (2022-04-01)

Maintenance Improvements

Comparison since last release

6.2.0 (2022-03-24)

Features

Maintenance Improvements

Comparison since last release

6.1.6 (2022-03-18)

Bug Fixes

Comparison since last release

Changelog

Sourced from @​serverless/dashboard-plugin's changelog.

6.2.3 (2023-01-26)

Maintenance Improvements

6.2.2 (2022-04-20)

Maintenance Improvements

6.2.1 (2022-04-01)

Maintenance Improvements

6.2.0 (2022-03-24)

Features

Maintenance Improvements

6.1.6 (2022-03-18)

Bug Fixes

Commits
  • 8282243 chore: Release v6.2.3
  • 09119a0 chore: Bump dependencies
  • d671d97 chore: Bump simple-git to ^3.16.0 to mitigate RCE security risk
  • 47374d4 refactor: Use patterns instead of include (#694)
  • 225b570 chore: Release v6.2.2
  • 7814109 chore: Bump dependencies
  • c588286 refactor: Add detailed error message for params resolution
  • 6b45c3d chore: Release v6.2.1
  • 191d82f chore: Bump dependencies
  • 193cd0f refactor: Clarify unsupported runtimes warning message
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump simple-git and @serverless/dashboard-plugin
6de8026 
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) and [@serverless/dashboard-plugin](https://github.com/serverless/dashboard-plugin). These dependencies needed to be updated together.

Updates `simple-git` from 2.48.0 to 3.16.0
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.16.0/simple-git)

Updates `@serverless/dashboard-plugin` from 6.1.5 to 6.2.3
- [Release notes](https://github.com/serverless/dashboard-plugin/releases)
- [Changelog](https://github.com/serverless/dashboard-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/serverless/dashboard-plugin/compare/v6.1.5...v6.2.3)

---
updated-dependencies:
- dependency-name: simple-git
  dependency-type: indirect
- dependency-name: "@serverless/dashboard-plugin"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 27, 2023
@dependabot dependabot bot mentioned this pull request Jan 27, 2023
Closed
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 1, 2023

Superseded by #182.

@dependabot dependabot bot closed this Mar 1, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/examples/include-external-npm-packages-lock-file/simple-git-and-serverless/dashboard-plugin-3.16.0 branch March 1, 2023 02:05
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant