conventional-changelog-core
Advanced tools
Comparing version
@@ -6,2 +6,10 @@ # Change Log | ||
### [4.2.3](https://www.github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-core-v4.2.2...conventional-changelog-core-v4.2.3) (2021-07-03) | ||
### Bug Fixes | ||
* **deps:** update dependency conventional-changelog-writer to v5 ([#731](https://www.github.com/conventional-changelog/conventional-changelog/issues/731)) ([b5951fb](https://www.github.com/conventional-changelog/conventional-changelog/commit/b5951fb5c58ada8d480d17213703d717acb1cd42)) | ||
* **deps:** update get-pkg-repo to ^4.0.0 ([#820](https://www.github.com/conventional-changelog/conventional-changelog/issues/820)) ([97bce29](https://www.github.com/conventional-changelog/conventional-changelog/commit/97bce29eda2494a05becd8b35bca851d36a4b403)) | ||
### [4.2.2](https://www.github.com/conventional-changelog/conventional-changelog/compare/conventional-changelog-core@4.2.1...v4.2.2) (2020-12-30) | ||
@@ -8,0 +16,0 @@ |
@@ -10,3 +10,3 @@ 'use strict' | ||
const through = require('through2') | ||
const shell = require('shelljs') | ||
const execFileSync = require('child_process').execFileSync | ||
@@ -51,3 +51,6 @@ const mergeConfig = require('./lib/merge-config') | ||
if (shell.exec('git rev-parse --verify HEAD', { silent: true }).code === 0) { | ||
try { | ||
execFileSync('git', ['rev-parse', '--verify', 'HEAD'], { | ||
stdio: 'ignore' | ||
}) | ||
let reverseTags = context.gitSemverTags.slice(0).reverse() | ||
@@ -86,3 +89,3 @@ reverseTags.push('HEAD') | ||
}) | ||
} else { | ||
} catch (_e) { | ||
commitsStream = gitRawCommits(gitRawCommitsOpts, gitRawExecOpts) | ||
@@ -89,0 +92,0 @@ } |
@@ -183,3 +183,3 @@ 'use strict' | ||
context.repository = context.repository || repo.project | ||
context.repoUrl = browse | ||
context.repoUrl = /undefined/i.exec(browse) ? context.host : browse | ||
} | ||
@@ -186,0 +186,0 @@ |
{ | ||
"name": "conventional-changelog-core", | ||
"version": "4.2.2", | ||
"version": "4.2.3", | ||
"description": "conventional-changelog core", | ||
@@ -30,6 +30,6 @@ "repository": { | ||
"add-stream": "^1.0.0", | ||
"conventional-changelog-writer": "^4.0.18", | ||
"conventional-changelog-writer": "^5.0.0", | ||
"conventional-commits-parser": "^3.2.0", | ||
"dateformat": "^3.0.0", | ||
"get-pkg-repo": "^1.0.0", | ||
"get-pkg-repo": "^4.0.0", | ||
"git-raw-commits": "^2.0.8", | ||
@@ -43,3 +43,2 @@ "git-remote-origin-url": "^2.0.0", | ||
"read-pkg-up": "^3.0.0", | ||
"shelljs": "^0.8.3", | ||
"through2": "^4.0.0" | ||
@@ -46,0 +45,0 @@ }, |
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
48695
1.71%14
-6.67%471
0.64%+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
Updated