Drop-OSS/drop
1
0
Fork 0
mirror of https://github.com/Drop-OSS/drop.git synced 2026-07-21 08:06:16 -04:00
Code Issues 77 Packages Projects Releases 10 Wiki Activity

[PR #392] chore(deps): bump simple-git from 3.30.0 to 3.36.0 in /desktop/main #380

New Issue
Open
opened 2026-06-05 14:22:38 -04:00 by yindo · 0 comments
yindo commented 2026-06-05 14:22:38 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/Drop-OSS/drop/pull/392
Author: @dependabot[bot]
Created: 4/13/2026
Status: 🔄 Open

Base: develop ← Head: dependabot/npm_and_yarn/desktop/main/simple-git-3.36.0

📝 Commits (1)

  • 1a0b110 chore(deps): bump simple-git from 3.30.0 to 3.36.0 in /desktop/main

📊 Changes

1 file changed (+47 additions, -4 deletions)

View changed files

📝 desktop/main/pnpm-lock.yaml (+47 -4)

📄 Description

Bumps simple-git from 3.30.0 to 3.36.0.

Release notes

Sourced from simple-git's releases.

simple-git@3.36.0

Minor Changes

  • 89a2294: Extend known exploitable configuration keys and per-task environment variables.

    Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

    Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

  • 1ad57e8: Remove conflicting node:buffer import
  • Updated dependencies [89a2294]
  • Updated dependencies [675570a]
    • @​simple-git/argv-parser@​1.1.0
    • @​simple-git/args-pathspec@​1.0.3

simple-git@3.35.2

Patch Changes

  • 0cf9d8c: Improvements for mono-repo publishing pipeline
  • Updated dependencies [0cf9d8c]
    • @​simple-git/args-pathspec@​1.0.2
    • @​simple-git/argv-parser@​1.0.3

simple-git@3.35.1

Patch Changes

  • 0de400e: Update monorepo version handling during publish
  • Updated dependencies [0de400e]
    • @​simple-git/argv-parser@​1.0.2

simple-git@3.33.0

Minor Changes

  • a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.

Patch Changes

  • e253a0d: Enhanced git -c checks in unsafe plugin.

    Thanks to @​JohannesLks for identifying the issue

simple-git@3.32.3

Patch Changes

  • f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

... (truncated)

Changelog

Sourced from simple-git's changelog.

3.36.0

Minor Changes

  • 89a2294: Extend known exploitable configuration keys and per-task environment variables.

    Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

    Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

  • 1ad57e8: Remove conflicting node:buffer import
  • Updated dependencies [89a2294]
  • Updated dependencies [675570a]
    • @​simple-git/argv-parser@​1.1.0
    • @​simple-git/args-pathspec@​1.0.3

3.35.2

Patch Changes

  • 0cf9d8c: Improvements for mono-repo publishing pipeline
  • Updated dependencies [0cf9d8c]
    • @​simple-git/args-pathspec@​1.0.2
    • @​simple-git/argv-parser@​1.0.3

3.35.1

Patch Changes

  • 0de400e: Update monorepo version handling during publish
  • Updated dependencies [0de400e]
    • @​simple-git/argv-parser@​1.0.2

3.35.0

Minor Changes

  • 3d8708b: Updating publish config

Patch Changes

  • Updated dependencies [3d8708b]
    • @​simple-git/args-pathspec@​1.0.1
    • @​simple-git/argv-parser@​1.0.1

3.34.0

... (truncated)

Commits
  • 7dc1a53 Version Packages
  • 76f5376 Merge pull request #1061 from Vinzent03/fix/buffer-import
  • 89a2294 Environment Parsing (#1156)
  • 1b91b76 fix: remove explicit node:buffer import
  • e390685 Version Packages
  • 3c9e4b8 Pin version of @​simple-git/args-pathspec
  • 94ee21f Export pathspec types through simple-git for backward compatibility
  • 6d7cb51 Version Packages
  • 0de400e Switch to semver from workspace revisions
  • 2264722 Version Packages
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for simple-git since your current version.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Drop-OSS/drop/pull/392 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/13/2026 **Status:** 🔄 Open **Base:** `develop` ← **Head:** `dependabot/npm_and_yarn/desktop/main/simple-git-3.36.0` --- ### 📝 Commits (1) - [`1a0b110`](https://github.com/Drop-OSS/drop/commit/1a0b110eb7f78ab4a5ba99f6a352491090a190f9) chore(deps): bump simple-git from 3.30.0 to 3.36.0 in /desktop/main ### 📊 Changes **1 file changed** (+47 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `desktop/main/pnpm-lock.yaml` (+47 -4) </details> ### 📄 Description Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.30.0 to 3.36.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/steveukx/git-js/releases">simple-git's releases</a>.</em></p> <blockquote> <h2>simple-git@3.36.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>89a2294: Extend known exploitable configuration keys and per-task environment variables.</p> <p>Note - <code>ParsedVulnerabilities</code> from <code>argv-parser</code> is removed in favour of a readonly array of <code>Vulnerability</code> to match usage in <code>simple-git</code>, rolled into the new <code>vulnerabilityCheck</code> for simpler access to the identified issues.</p> <p>Thanks to <a href="https://github.com/zebbern"><code>@​zebbern</code></a> for identifying the need to block <code>core.fsmonitor</code>. Thanks to <a href="https://github.com/kodareef5"><code>@​kodareef5</code></a> for identifying the need to block <code>GIT_CONFIG_COUNT</code> environment variables and <code>--template</code> / <code>merge</code> related config.</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li>1ad57e8: Remove conflicting node:buffer import</li> <li>Updated dependencies [89a2294]</li> <li>Updated dependencies [675570a] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.1.0</li> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>simple-git@3.35.2</h2> <h3>Patch Changes</h3> <ul> <li>0cf9d8c: Improvements for mono-repo publishing pipeline</li> <li>Updated dependencies [0cf9d8c] <ul> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>simple-git@3.35.1</h2> <h3>Patch Changes</h3> <ul> <li>0de400e: Update monorepo version handling during publish</li> <li>Updated dependencies [0de400e] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> </ul> </li> </ul> <h2>simple-git@3.33.0</h2> <h3>Minor Changes</h3> <ul> <li>a263635: Use <code>pathspec</code> wrappers for remote and local paths when running either <code>git.clone</code> or <code>git.mirror</code> to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.</li> </ul> <h3>Patch Changes</h3> <ul> <li> <p>e253a0d: Enhanced <code>git -c</code> checks in <code>unsafe</code> plugin.</p> <p>Thanks to <a href="https://github.com/JohannesLks"><code>@​JohannesLks</code></a> for identifying the issue</p> </li> </ul> <h2>simple-git@3.32.3</h2> <h3>Patch Changes</h3> <ul> <li>f704208: Enhanced <code>protocol.allow</code> checks in <code>allowUnsafeExtProtocol</code> handling.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md">simple-git's changelog</a>.</em></p> <blockquote> <h2>3.36.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>89a2294: Extend known exploitable configuration keys and per-task environment variables.</p> <p>Note - <code>ParsedVulnerabilities</code> from <code>argv-parser</code> is removed in favour of a readonly array of <code>Vulnerability</code> to match usage in <code>simple-git</code>, rolled into the new <code>vulnerabilityCheck</code> for simpler access to the identified issues.</p> <p>Thanks to <a href="https://github.com/zebbern"><code>@​zebbern</code></a> for identifying the need to block <code>core.fsmonitor</code>. Thanks to <a href="https://github.com/kodareef5"><code>@​kodareef5</code></a> for identifying the need to block <code>GIT_CONFIG_COUNT</code> environment variables and <code>--template</code> / <code>merge</code> related config.</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li>1ad57e8: Remove conflicting node:buffer import</li> <li>Updated dependencies [89a2294]</li> <li>Updated dependencies [675570a] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.1.0</li> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>3.35.2</h2> <h3>Patch Changes</h3> <ul> <li>0cf9d8c: Improvements for mono-repo publishing pipeline</li> <li>Updated dependencies [0cf9d8c] <ul> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.3</li> </ul> </li> </ul> <h2>3.35.1</h2> <h3>Patch Changes</h3> <ul> <li>0de400e: Update monorepo version handling during publish</li> <li>Updated dependencies [0de400e] <ul> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.2</li> </ul> </li> </ul> <h2>3.35.0</h2> <h3>Minor Changes</h3> <ul> <li>3d8708b: Updating publish config</li> </ul> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [3d8708b] <ul> <li><code>@​simple-git/args-pathspec</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> <li><code>@​simple-git/argv-parser</code><a href="https://github.com/1"><code>@​1</code></a>.0.1</li> </ul> </li> </ul> <h2>3.34.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/steveukx/git-js/commit/7dc1a532a9ec92fb08c93202954be73175b07d83"><code>7dc1a53</code></a> Version Packages</li> <li><a href="https://github.com/steveukx/git-js/commit/76f5376bd418cb8baf5ec32757af442d47128e22"><code>76f5376</code></a> Merge pull request <a href="https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1061">#1061</a> from Vinzent03/fix/buffer-import</li> <li><a href="https://github.com/steveukx/git-js/commit/89a2294febed5dfe737c4c735d936bb6018746a8"><code>89a2294</code></a> Environment Parsing (<a href="https://github.com/steveukx/git-js/tree/HEAD/simple-git/issues/1156">#1156</a>)</li> <li><a href="https://github.com/steveukx/git-js/commit/1b91b762f047777ca6686f34ac3f7b8a543a4780"><code>1b91b76</code></a> fix: remove explicit node:buffer import</li> <li><a href="https://github.com/steveukx/git-js/commit/e390685960a3461875dce89d87ab80e3143d79fe"><code>e390685</code></a> Version Packages</li> <li><a href="https://github.com/steveukx/git-js/commit/3c9e4b8309667d0cb4102cda770f92075fc781dd"><code>3c9e4b8</code></a> Pin version of <code>@​simple-git/args-pathspec</code></li> <li><a href="https://github.com/steveukx/git-js/commit/94ee21fd5a2a6182fbf0f218a5efca2057b567cd"><code>94ee21f</code></a> Export <code>pathspec</code> types through <code>simple-git</code> for backward compatibility</li> <li><a href="https://github.com/steveukx/git-js/commit/6d7cb5174273aa33d131172d3770cb386e795171"><code>6d7cb51</code></a> Version Packages</li> <li><a href="https://github.com/steveukx/git-js/commit/0de400e7b014a48113acf673b3409a95b9c87a15"><code>0de400e</code></a> Switch to semver from workspace revisions</li> <li><a href="https://github.com/steveukx/git-js/commit/2264722abcb637042dd4cc50d903d69e4ee14b38"><code>2264722</code></a> Version Packages</li> <li>Additional commits viewable in <a href="https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for simple-git since your current version.</p> </details> <br /> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-05 14:22:38 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
duplicate
feature
feature
good first issue
needs-triage
pull-request
Mirrored from GitHub Pull Request
 qol
support
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Drop-OSS/drop#380
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?