dugite - npm Package Compare versions

Comparing version 3.0.0-rc1 to 3.0.0-rc2

build/lib/git-environment.js

@@ -100,4 +100,10 @@ "use strict";
 function setupEnvironment(environmentVariables) {
+    // This will get Path, pATh, PATH et all on Windows
+    const PATH = process.env.PATH;
     const env = {
-        ...process.env,
+        // Merge all of process.env except Path, PATH, et all, we'll add that in just a sec
+        ...Object.fromEntries(Object.entries(process.env).filter(([k]) => k.toUpperCase() !== 'PATH')),
+        // Ensure PATH is always set in upper case not process.env.Path like can
+        // be on case-insensitive Windows
+        ...(PATH ? { PATH } : {}),
         ...environmentVariables,
@@ -109,15 +115,5 @@ };
         const mingw = process.arch === 'x64' ? 'mingw64' : 'mingw32';
-        env.PATH = `${gitDir}\\${mingw}\\bin;${gitDir}\\${mingw}\\usr\\bin;${env.PATH}`;
+        env.PATH = `${gitDir}\\${mingw}\\bin;${gitDir}\\${mingw}\\usr\\bin;${env.PATH ?? ''}`;
     }
     env.GIT_EXEC_PATH = resolveGitExecPath(env);
-    if (process.platform === 'win32') {
-        // while reading the environment variable is case-insensitive
-        // you can create a hash with multiple values, which means the
-        // wrong value might be used when spawning the child process
-        //
-        // this ensures we only ever supply one value for PATH
-        if (env.Path) {
-            delete env.Path;
-        }
-    }
     // On Windows the contained Git environment (minGit) ships with a system level
@@ -124,0 +120,0 @@ // gitconfig that we can control but on macOS and Linux /etc/gitconfig is used

package.json

 {
   "name": "dugite",
-  "version": "3.0.0-rc1",
+  "version": "3.0.0-rc2",
   "description": "Elegant bindings for Git",
@@ -5,0 +5,0 @@ "main": "./build/lib/index.js",

script/embedded-git.json

 {
   "win32-x64": {
-    "name": "dugite-native-v2.45.1-e87d290-windows-x64.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-windows-x64.tar.gz",
-    "checksum": "6a79708447291d8b95db9f523f949389d63fca1a25b72520d1a0b9a8d7ede3e1"
+    "name": "dugite-native-v2.43.4-1074931-windows-x64.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-windows-x64.tar.gz",
+    "checksum": "a1ce9ad3243a44b7b4b86056bfbc2238514faaaa8fad5da12d4483491347aace"
   },
   "win32-ia32": {
-    "name": "dugite-native-v2.45.1-e87d290-windows-x86.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-windows-x86.tar.gz",
-    "checksum": "99dafc60fdeb646988c7d6f54c74a557f877b28624ed82e4201460b7d2394d49"
+    "name": "dugite-native-v2.43.4-1074931-windows-x86.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-windows-x86.tar.gz",
+    "checksum": "6edd41d81bee1ad11dfa9db84bce74afafa59edd27fcd8cf836b761193a30a59"
   },
   "darwin-x64": {
-    "name": "dugite-native-v2.45.1-e87d290-macOS-x64.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-macOS-x64.tar.gz",
-    "checksum": "2a3c0b52e98a8423fe54722dd4dce905fce2d1d3014452e26df01f84c5033c3f"
+    "name": "dugite-native-v2.43.4-1074931-macOS-x64.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-macOS-x64.tar.gz",
+    "checksum": "a7e2e4009ad119869792131b54475d3691b11a9ca2e66222be8232a9f7e323ab"
   },
   "darwin-arm64": {
-    "name": "dugite-native-v2.45.1-e87d290-macOS-arm64.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-macOS-arm64.tar.gz",
-    "checksum": "453ea5c74da5bb75b0474b19e0269feb548eaf2d2449b3e74a84123ced415e4c"
+    "name": "dugite-native-v2.43.4-1074931-macOS-arm64.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-macOS-arm64.tar.gz",
+    "checksum": "bc385fa42d5b01513b5c9da6ee04a4868f30b60a42bd144b5ab8b993780aef7f"
   },
   "linux-x64": {
-    "name": "dugite-native-v2.45.1-e87d290-ubuntu-x64.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-ubuntu-x64.tar.gz",
-    "checksum": "cdf8c4cdca273e015d95c15fcc99e2322a97316f77f0b958b6b86424ca2b12da"
+    "name": "dugite-native-v2.43.4-1074931-ubuntu-x64.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-ubuntu-x64.tar.gz",
+    "checksum": "fbff97763ca9cedbf87a196015f4dbffaa102681fd25103f99c40a7d561b8338"
   },
   "linux-ia32": {
-    "name": "dugite-native-v2.45.1-e87d290-ubuntu-x86.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-ubuntu-x86.tar.gz",
-    "checksum": "8ef716da12f5c2ca03288a5ee10e6cdd5ad958a164b379a6aafa19ca7f4eb72c"
+    "name": "dugite-native-v2.43.4-1074931-ubuntu-x86.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-ubuntu-x86.tar.gz",
+    "checksum": "458e00694dbc94a691e25c67546d93c5df58877c805d300a1d6c8ad440c56aaf"
   },
   "linux-arm": {
-    "name": "dugite-native-v2.45.1-e87d290-ubuntu-arm.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-ubuntu-arm.tar.gz",
-    "checksum": "5b8d27f9eba833477f518377ba5339c690523cc218fb3b3189fa8cacb229493f"
+    "name": "dugite-native-v2.43.4-1074931-ubuntu-arm.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-ubuntu-arm.tar.gz",
+    "checksum": "03e25333ce52cccf32e6b4335978f4cd53ada2ad06dd3b424132edd9f5668357"
   },
   "linux-arm64": {
-    "name": "dugite-native-v2.45.1-e87d290-ubuntu-arm64.tar.gz",
-    "url": "https://github.com/desktop/dugite-native/releases/download/v2.45.1/dugite-native-v2.45.1-e87d290-ubuntu-arm64.tar.gz",
-    "checksum": "21cec4d32ceec81efa146a40253a2f766a1d3b34a6e7c1fed1d87c7c553b3c99"
+    "name": "dugite-native-v2.43.4-1074931-ubuntu-arm64.tar.gz",
+    "url": "https://github.com/desktop/dugite-native/releases/download/v2.43.4-1/dugite-native-v2.43.4-1074931-ubuntu-arm64.tar.gz",
+    "checksum": "1d71732200951803dd55d2b943b322d0cfab8c36a9ecd859d08f840daf95a270"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

68840

increased by0.27%

Worsened metrics

Lines of code

1103

decreased by-0.36%

Number of low supply chain risk alerts

10

increased by11.11%

No dependency changes