[Snyk] Upgrade simple-git from 3.20.0 to 3.22.0

[viqueen]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade simple-git from 3.20.0 to 3.22.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2023-12-29.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-AXIOS-6144788	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	No Known Exploit
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: simple-git

• 3.22.0 - 2023-12-29
  

  Minor Changes

  • df14065: add status to DiffResult when using --name-status
• 3.21.0 - 2023-11-20
  

  Minor Changes

  • 709d80e: Add firstCommit utility interface

  Patch Changes

  • b4ab430: Add trailing callback support to git.firstCommit
  • d3f9320: chore(deps): bump @ babel/traverse from 7.9.5 to 7.23.2
  • b76857f: chore(deps): bump axios from 1.1.3 to 1.6.1
• 3.20.0 - 2023-09-23
  

  Minor Changes

  • 2eda817: Use pathspec in git.log to allow use of previously deleted files in file argument

from simple-git GitHub release notes

Commit messages

Package name: simple-git

• 65b9257 Merge pull request #966 from steveukx/changeset-release/main
• 39e91b3 Version Packages
• df14065 Pr/908 (#965)
• 79d3262 [Snyk] Security upgrade lerna from 7.1.4 to 8.0.1 (#963)
• 4820ac9 Merge pull request #959 from steveukx/changeset-release/main
• c254a69 Version Packages
• b4ab430 Add callback support to `git.firstCommit` (#960)
• d3f9320 Create famous-wombats-develop.md
• 1133db3 chore(deps): bump @ babel/traverse from 7.9.5 to 7.23.2
• b76857f Create hip-files-warn.md
• c116695 chore(deps): bump axios from 1.1.3 to 1.6.1
• 574ba37 chore(deps): bump actions/setup-node from 3 to 4
• 709d80e Create utility `git.firstCommit()` to fetch the commit hash of the fi… (#958)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud