autorelease-gitlab - npm Package Compare versions

Comparing version 2.0.1 to 2.0.2

create-tag.js

@@ -102,4 +102,4 @@ 'use strict';
 		var _ref2 = yield request({
-			url: `/projects/${ encodeURIComponent(repo) }/repository/tags`,
-			baseUrl: gitlabUrl || "https://gitlab.com/api/v3",
+			url: `/api/v3/projects/${ encodeURIComponent(repo) }/repository/tags`,
+			baseUrl: gitlabUrl || "https://gitlab.com",
 			method: "POST",
@@ -106,0 +106,0 @@ headers: {

package.json

@@ -36,3 +36,3 @@ {
   },
-  "version": "2.0.1"
+  "version": "2.0.2"
 }

verify-ci.js

@@ -22,15 +22,17 @@ 'use strict';
 
-	let current = process.env.CI_BUILD_REF_NAME;
-	let pass = [].concat(branch).some(b => {
-		if (lodash.isRegExp(b)) {
-			return b.test(current);
-		} else if (typeof b === "string") {
-			return current === b;
-		} else if (typeof b === "function") {
-			return b(current);
+	if (branch) {
+		let current = process.env.CI_BUILD_REF_NAME;
+		let pass = [].concat(branch).some(b => {
+			if (lodash.isRegExp(b)) {
+				return b.test(current);
+			} else if (typeof b === "string") {
+				return current === b;
+			} else if (typeof b === "function") {
+				return b(current);
+			}
+		});
+
+		if (!pass) {
+			throw new Error(`This autorelease was triggered on branch ${ current }, which is not a branch autorelease is configured to publish from.`);
 		}
-	});
-
-	if (!pass) {
-		throw new Error(`This autorelease was triggered on branch ${ current }, which is not a branch autorelease is configured to publish from.`);
 	}
@@ -37,0 +39,0 @@ }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7345

0.42%

Lines of code

149

1.36%

No dependency changes