
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@kalamazoo/branch-deploy-product-integrator
Advanced tools
Installs branch deployed atlaskit packages into products to run product CI.
@kalamazoo/branch-deploy-product-integratorThis is a CLI for automatically creating branches installing Atlaskit branch deploys in products.
--branchPrefix Prefix for the generated branch [default=atlaskit-branch-deploy/]
--workingPath Working path of the product repo installing a branch in [default=./]
--atlaskitCommitHash Atlaskit commit hash of the branch deploy that needs to be installed
--atlaskitBranchName The branch with which to compare the current branch, when git reporting is enabled can detect PR target branch. [default=master]
--packageEngine The package manager to use, currently only tested with Bolt and yarn [default=yarn]
--packages comma delimited list of packages to install branch deploy of
--dedupe !yarn only! run yarn deduplicate at the end to deduplicate the lock file
branch_name=${bamboo_planRepository_branch}
if [ "$branch_name" != "master" ]; then
yarn global add atlaskit-branch-deploy-product-integrator
branch-deploy-product-integrator --atlaskitBranchName ${bamboo_planRepository_branch} --atlaskitCommitHash ${bamboo_planRepository_revision}
else
echo "Current branch is master. Not going to branch deploy."
fi
Note: There's a protection against accidentally pushing to the wrong repo. If that throws most likely the order of the repo's on the build plans is incorrect. Also sometimes the repo will not have a remote setup, if that is the case add this to the start of the build script:
git remote set-url origin ssh://git@my.stash.instance.com/productproject/productrepo.git
FAQs
Installs branch deployed atlaskit packages into products to run product CI.
We found that @kalamazoo/branch-deploy-product-integrator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.