[Snyk] Upgrade nodegit from 0.26.0 to 0.26.4 #95
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade nodegit from 0.26.0 to 0.26.4. See this package in NPM: https://www.npmjs.com/package/nodegit See this project in Snyk: https://app.snyk.io/org/thisconnect/project/112c8a2f-c08c-4e1f-9c09-eb1a90eb2da8?utm_source=github&utm_medium=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade nodegit from 0.26.0 to 0.26.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.The recommended version fixes:
SNYK-JS-NODEGIT-542723
SNYK-JS-NODEGIT-542722
SNYK-JS-NODEGIT-542721
SNYK-JS-NODEGIT-542720
Release notes
Package name: nodegit
-
0.26.4 - 2020-01-14
- Bumped LibGit2
- Now can be configured to support longpaths on Windows. Does not respect the config value, but is configured through
- Support for complex SSH auth creds handshakes
- Pulled in patch for Libssh2 that covers an integer overflow, see Libssh2#402
- Fix some issues from the libgit2 bump
- Add option to support longpaths on Windows
- Bring in libssh2#402
- Wait for copy and remove promises to finish
- Support
- Parallelize checkout_create_the_new for perf #4205
- win32: fix relative symlinks pointing into dirs
- ntlm: prevent (spurious) compiler warnings
- Adds support for multiple SSH auth mechanisms being used sequentially
- netops: handle intact query parameters in service_suffix removal
- Refactor packfile code to use zstream abstraction
- Fix git_submodule_sync with relative url
- http: avoid generating double slashes in url
- Correct typo in name of referenced parameter
- patch_parse: fix undefined behaviour due to arithmetic on NULL pointers
- smart_pkt: fix overflow resulting in OOB read/write of one byte
- branch: clarify documentation around branches
- examples: checkout: implement guess heuristic for remote branches
- Minor doc improvements
- attr: Update definition of binary macro
- Security fixes for master
- release.md: note that we do two security releases
- MSVC: Fix warning C4133 on x64: "function": Incompatible types - from "unsigned long *" to "size_t *"
- ci: only push docs from the libgit2/libgit2 repo
- global: convert to fiber-local storage to fix exit races
- Fix copy&paste in git_cherrypick_commit docstring
- patch_parse: fix out-of-bounds reads caused by integer underflow
- tests: fix compiler warning if tracing is disabled
- tests: config: only test parsing huge file with GITTEST_INVASIVE_SPEED
- diff: complete support for git patchid
- Memory optimizations for config entries
- ssh: include sha256 host key hash when supported
- Various examples shape-ups
- Improve trace support in tests
- Move
- Add compat typdef for git_attr_t
- CI Build Updates
- patch_parse: use paths from "---"/"+++" lines for binary patches
- Follow 308 redirect in WinHTTP transport
- fileops: correct error return on p_lstat failures when mkdir
- config_mem: implement support for snapshots
- patch_parse: fix segfault when header path contains whitespace only
- config_file: fix race when creating an iterator
- Fix crash if snapshotting a config_snapshot
- fix a bug introduced in 8a23597b
- reflogs: fix behaviour around reflogs with newlines
- commit: verify objects exist in git_commit_with_signature
- patch_parse: fixes for fuzzing errors
- apply: add GIT_APPLY_CHECK
- refs: unlock unmodified refs on transaction commit
- fuzzers: add a new fuzzer for patch parsing
- patch_parse: handle patches without extended headers
- Provide a wrapper for simple submodule clone steps
- macOS GSS Support
- cmake: correct the link stanza for CoreFoundation
- Fix file locking on POSIX OS
- cmake: update minimum CMake version to v3.5.1
- patch_parse: handle patches with new empty files
- DRY commit parsing
- azure: avoid building and testing in Docker as root
- regexp: implement a new regular expression API
- git_refdb API fixes
- Don't use enum for flags
- valgrind: suppress memory leaks in libssh2_session_handshake
- buffer: fix writes into out-of-memory buffers
- cred: add missing private header in GSSAPI block
- CMake pkg-config modulification
- Update chat resources in README.md
- Circular header splitting
-
0.26.3 - 2019-12-10
- Include LibGit2 security patch: https://github.com/libgit2/libgit2/releases/tag/v0.28.4
- Bring in security patches from libgit2 #1743
-
0.26.2 - 2019-09-27
- Added options to fetch additional data (gpg signature) from LibGit2 in revWalk.prototype.commitWalk and return plain objects
- revWalk.prototype.commitWalk(numCommits: number, { returnPlainObjects: boolean })
- Optionally retrieve more data on commit walk #1728
-
0.26.1 - 2019-09-17
- Bumped LibGit2
- Additional git ignore fixes
- Allow credentials callback to return any credential type from list of supported types
- Memory leak and allocation fixes
- updateTips has optional parameters and should convert plain objects into options structs correctly now
- Added Nodegit.Blob.prototype.filter, this should be used instead of NodeGit.Blob.filteredContent as it is not deprecated.
- Bump libgit2 to latest fork of master #1723
- updateTips: optional param and normalizeOptions #1722
- Parallelize checkout_create_the_new for perf #4205
- azure: build Docker images as part of the pipeline
- smart: use push_glob instead of manual filtering
- ntlm: fix failure to find openssl headers
- cmake: remove extraneous logging
- open:fix memory leak when passing NULL to git_repository_open_ext
- apply: Fix a patch corruption related to EOFNL handling
- ignore: correct handling of nested rules overriding wild card unignore
- Memory allocation fixes for diff generator
- Use an HTTP scheme that supports the given credentials
- apply: git_apply_to_tree fails to apply patches that add new files
- Optionally read
- config: implement "onbranch" conditional
- Fix include casing for case-sensitive filesystems.
- util: use 64 bit timer on Windows
- Memory allocation audit
- clone: don't decode URL percent encodings
- Security updates from 0.28.3
-
0.26.0 - 2019-09-11
- Bumped libssh2 to 1.9 for security patch
- Remote.prototype.upload and Remote.prototype.updateTips should be async now
- GitRemote upload and updateTips are async #1720
- Update libssh2 to 1.9 #1719
from nodegit GitHub release notesSummary of changes
NodeGit.Libgit2.opts. See #1748 for details.Merged PRs into NodeGit
Merged PRs into LibGit2
core.longpathson Windows #5347git_off_ttogit_object_size_tSummary of changes
Merged PRs into NodeGit
Summary of changes
Merged PRs into NodeGit
Summary of changes
Merged PRs into NodeGit
Merged PRs into LibGit2
.gitattributesfrom HEADSummary of changes
Merged PRs into NodeGit
Commit messages
Package name: nodegit
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs