[Component Governance Alert] - CVE-2022-24999 in qs 6.9.4 (#18009)

* AndroidSigningV2 npm audit fix * AndroidSigningV3 npm audit fix * DownloadSecureFileV1 npm audit fix * InstallAppleCertificateV2 npm audit fix * InstallAppleProvisioningProfileV1 npm audit fix * Fix uncommited file for InstallAppleProvisioningProfileV1
microsoft · Mar 28, 2023 · fd59385 · fd59385
1 parent 63b2e25
commit fd59385
Show file tree

Hide file tree

Showing 15 changed files with 415 additions and 173 deletions.
diff --git a/Tasks/AndroidSigningV2/package-lock.json b/Tasks/AndroidSigningV2/package-lock.json
diff --git a/Tasks/AndroidSigningV2/task.json b/Tasks/AndroidSigningV2/task.json
@@ -12,7 +12,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 2,
-        "Minor": 201,
+        "Minor": 220,
         "Patch": 0
     },
     "demands": [

diff --git a/Tasks/AndroidSigningV2/task.loc.json b/Tasks/AndroidSigningV2/task.loc.json
@@ -12,7 +12,7 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 2,
-    "Minor": 201,
+    "Minor": 220,
     "Patch": 0
   },
   "demands": [

diff --git a/Tasks/AndroidSigningV3/package-lock.json b/Tasks/AndroidSigningV3/package-lock.json
diff --git a/Tasks/AndroidSigningV3/task.json b/Tasks/AndroidSigningV3/task.json
@@ -12,7 +12,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 3,
-        "Minor": 201,
+        "Minor": 220,
         "Patch": 0
     },
     "releaseNotes": "This version of the task uses apksigner instead of jarsigner to sign APKs.",

diff --git a/Tasks/AndroidSigningV3/task.loc.json b/Tasks/AndroidSigningV3/task.loc.json
@@ -12,7 +12,7 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 3,
-    "Minor": 201,
+    "Minor": 220,
     "Patch": 0
   },
   "releaseNotes": "ms-resource:loc.releaseNotes",

diff --git a/Tasks/DownloadSecureFileV1/package-lock.json b/Tasks/DownloadSecureFileV1/package-lock.json
diff --git a/Tasks/DownloadSecureFileV1/task.json b/Tasks/DownloadSecureFileV1/task.json
@@ -13,7 +13,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 1,
-        "Minor": 212,
+        "Minor": 220,
         "Patch": 0
     },
     "runsOn": [

diff --git a/Tasks/DownloadSecureFileV1/task.loc.json b/Tasks/DownloadSecureFileV1/task.loc.json
@@ -13,7 +13,7 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 1,
-    "Minor": 212,
+    "Minor": 220,
     "Patch": 0
   },
   "runsOn": [

diff --git a/Tasks/InstallAppleCertificateV2/package-lock.json b/Tasks/InstallAppleCertificateV2/package-lock.json
diff --git a/Tasks/InstallAppleCertificateV2/task.json b/Tasks/InstallAppleCertificateV2/task.json
@@ -13,7 +13,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 2,
-        "Minor": 219,
+        "Minor": 220,
         "Patch": 0
     },
     "releaseNotes": "Fixes codesign hangs on a self hosted agent. A Keychain password is now required to use `Default Keychain` or `Custom Keychain`. Microsoft hosted builds should use `Temporary Keychain`.",

diff --git a/Tasks/InstallAppleCertificateV2/task.loc.json b/Tasks/InstallAppleCertificateV2/task.loc.json
@@ -13,7 +13,7 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 2,
-    "Minor": 219,
+    "Minor": 220,
     "Patch": 0
   },
   "releaseNotes": "ms-resource:loc.releaseNotes",

diff --git a/Tasks/InstallAppleProvisioningProfileV1/package-lock.json b/Tasks/InstallAppleProvisioningProfileV1/package-lock.json
diff --git a/Tasks/InstallAppleProvisioningProfileV1/task.json b/Tasks/InstallAppleProvisioningProfileV1/task.json
@@ -13,7 +13,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 1,
-        "Minor": 212,
+        "Minor": 220,
         "Patch": 0
     },
     "runsOn": [

diff --git a/Tasks/InstallAppleProvisioningProfileV1/task.loc.json b/Tasks/InstallAppleProvisioningProfileV1/task.loc.json
@@ -13,7 +13,7 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 1,
-    "Minor": 212,
+    "Minor": 220,
     "Patch": 0
   },
   "runsOn": [
@@ -89,7 +89,7 @@
     "Node10": {
       "target": "installprovprofile.js",
       "argumentFormat": ""
-    }, 
+    },
     "Node16": {
       "target": "installprovprofile.js",
       "argumentFormat": ""