simple-git - npm Package Compare versions

Comparing version 3.14.1 to 3.15.0

dist/src/lib/plugins/index.d.ts

 export * from './abort-plugin';
+export * from './block-unsafe-operations-plugin';
 export * from './command-config-prefixing-plugin';
@@ -3,0 +4,0 @@ export * from './completion-detection.plugin';

dist/src/lib/plugins/timout-plugin.d.ts

@@ -1,3 +0,3 @@
-import { SimpleGitOptions } from '../types';
-import { SimpleGitPlugin } from './simple-git-plugin';
+import type { SimpleGitPlugin } from './simple-git-plugin';
+import type { SimpleGitOptions } from '../types';
 export declare function timeoutPlugin({ block, }: Exclude<SimpleGitOptions['timeout'], undefined>): SimpleGitPlugin<'spawn.after'> | void;

dist/src/lib/types/index.d.ts

@@ -90,2 +90,17 @@ /// <reference types="node" />
     spawnOptions: Pick<SpawnOptions, 'uid' | 'gid'>;
+    unsafe: {
+        /**
+         * By default `simple-git` prevents the use of inline configuration
+         * options to override the protocols available for the `git` child
+         * process to prevent accidental security vulnerabilities when
+         * unsanitised user data is passed directly into operations such as
+         * `git.addRemote`, `git.clone` or `git.raw`.
+         *
+         * Enable this override to use the `ext::` protocol (see examples on
+         * [git-scm.com](https://git-scm.com/docs/git-remote-ext#_examples)).
+         *
+         * See documentation for use in
+         */
+        allowUnsafeProtocolOverride?: boolean;
+    };
 }
@@ -92,0 +107,0 @@ /**

package.json

 {
   "name": "simple-git",
   "description": "Simple GIT interface for node.js",
-  "version": "3.14.1",
+  "version": "3.15.0",
   "author": "Steve King <[e-mail]>",
@@ -24,9 +24,9 @@ "contributors": [
     "@simple-git/babel-config": "^1.0.0",
-    "@simple-git/test-utils": "^2.0.0",
+    "@simple-git/test-utils": "^3.0.0",
     "@types/debug": "^4.1.5",
-    "@types/jest": "^27.0.3",
+    "@types/jest": "^29.2.2",
     "@types/node": "^16",
     "esbuild": "^0.14.10",
     "esbuild-node-externals": "^1.4.1",
-    "jest": "^27.4.5",
+    "jest": "^29.3.1",
     "ts-node": "^9.0.0",
@@ -33,0 +33,0 @@ "typescript": "^4.1.2"

readme.md

@@ -114,2 +114,5 @@ # Simple Git
 
+- [Unsafe](https://github.com/steveukx/git-js/blob/main/docs/PLUGIN-UNSAFE-ACTIONS.md)
+   Selectively opt out of `simple-git` safety precautions - for advanced users and use cases.
+
 ## Using Task Promises
@@ -440,3 +443,4 @@
 
--  [release notes v2](https://github.com/steveukx/git-js/blob/main/docs/RELEASE-NOTES-V2.md)
+- [release notes v3](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
+- [release notes v2](https://github.com/steveukx/git-js/blob/main/docs/RELEASE-NOTES-V2.md)
 
@@ -443,0 +447,0 @@ # Concurrent / Parallel Requests

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

858752

increased by0.81%

Number of package files

104

increased by0.97%

Lines of code

10447

increased by0.78%

Number of lines in readme file

826

increased by0.49%

Number of versions

259

increased by0.39%

Published versions last months

1

increased byInfinity%

Published versions last two months

1

increased byInfinity%

Published versions last week

1

increased byInfinity%

Published versions last year

7

increased by16.67%

No dependency changes