@auto-it/core - npm Package Compare versions

Comparing version 11.3.2 to 11.3.3

dist/__tests__/git.test.js

@@ -291,7 +291,8 @@ "use strict";
         await gh.searchRepo({
-            q: "is:pr is:open",
+            q: "is:pr AND is:open",
             order: "desc",
         });
         expect(issuesAndPullRequests).toHaveBeenCalledWith({
-            q: "repo:Adam Dierkens/test is:pr is:open",
+            advanced_search: true,
+            q: "repo:Adam Dierkens/test AND (is:pr AND is:open)",
             order: "desc",
@@ -298,0 +299,0 @@ });

dist/git.js

@@ -363,3 +363,4 @@ "use strict";
         const repo = `repo:${this.options.owner}/${this.options.repo}`;
-        options.q = `${repo} ${options.q}`;
+        options.q = `${repo} AND (${options.q})`;
+        options.advanced_search = true;
         this.logger.verbose.info("Searching repo using:\n", options);
@@ -366,0 +367,0 @@ const result = await this.github.search.issuesAndPullRequests(options);

dist/release.js

@@ -302,3 +302,3 @@ "use strict";
         const prsSinceLastRelease = await this.git.searchRepo({
-            q: `is:pr is:merged merged:>=${lastRelease.published_at}`,
+            q: `is:pr AND is:merged AND merged:>=${lastRelease.published_at}`,
         });
@@ -305,0 +305,0 @@ if (!prsSinceLastRelease || !prsSinceLastRelease.items) {

package.json

 {
   "name": "@auto-it/core",
-  "version": "11.3.2",
+  "version": "11.3.3",
   "description": "Node API for using auto.",
@@ -40,3 +40,3 @@ "main": "dist/auto.js",
   "dependencies": {
-    "@auto-it/bot-list": "11.3.2",
+    "@auto-it/bot-list": "11.3.3",
     "@endemolshinegroup/cosmiconfig-typescript-loader": "^3.0.2",
@@ -104,3 +104,3 @@ "@octokit/core": "^3.5.1",
   },
-  "gitHead": "f455ccda5301df8f100d98cbee01e5ce4da8f62f"
+  "gitHead": "1b5aabcf8acafb4028e75cd1cdd73dca6cc89673"
 }

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1130928

0.01%

Lines of code

17034

0.01%

Dependency changes

• + Added

  @auto-it/bot-list@11.3.3
  (transitive)

• - Removed

  @auto-it/bot-list@11.3.2
  (transitive)

• Updated

  @auto-it/bot-list@11.3.3