@unional/createutils@1.1.4
Patch Changes
-
8c5f489: Fix two CodeQL findings in the git helpers.
getGitConfigbuilt its command as a template string and ran it through a shell,
so thekeyargument reached the shell unescaped
(js/shell-command-constructed-from-input). It now usesexecFileSyncwith an
argument array, which never involves a shell.getGitRepositoryNameused two unanchored regexes whose.*groups backtracked
polynomially on hostile input (js/polynomial-redos). Both are now anchored with
bounded character classes. Recognized remote URLs parse the same way. -
0a1b238: Rebuild with TypeScript 7. The emitted output changes: the CJS build now targets
ES2022 undermodule: node16instead of downlevelling to ES5, and the ESM build
targets ES2022 as well.target: es5andmoduleResolution: node10were both
removed in TypeScript 7, so the previous settings no longer compile.No public API changes, and the published file list is unchanged.