From 8f8aaa01c9393f691d0fce4d011d2680818f8e26 Mon Sep 17 00:00:00 2001 From: Anan Zhuang Date: Thu, 26 Jan 2023 21:20:18 -0800 Subject: [PATCH] [Manual Backport 1.x][CVE-2022-25860] Bumps simple-git from 3.15.1 to 3.16.0 (#3350) Backport PR https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3345 Issue Resolved https://github.com/opensearch-project/OpenSearch-Dashboards/issues/3329 Signed-off-by: Anan Zhuang Signed-off-by: Anan Zhuang --- CHANGELOG.md | 1 + package.json | 2 +- packages/osd-opensearch/package.json | 2 +- yarn.lock | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8fd7464d2ec6..0ba7ea142f88 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -22,6 +22,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) - [CVE-2022-25901] Bump supertest ([#3222](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3322)) - [CVE-2022-46175] Bumps json5 version from 1.0.1 and 2.2.1 to 1.0.2 and 2.2.3 ([#3201](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3201)) - [CVE-2022-25912] Bumps simple-git from 3.4.0 to 3.15.0 ([#3036](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3036)) +- [CVE-2022-25860] Bumps simple-git from 3.15.1 to 3.16.0 ([#3345](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3345)) ### 📈 Features/Enhancements diff --git a/package.json b/package.json index c2cf2aa89415..31006c06f475 100644 --- a/package.json +++ b/package.json @@ -468,7 +468,7 @@ "resize-observer-polyfill": "^1.5.0", "sass-lint": "^1.12.1", "selenium-webdriver": "^4.0.0-alpha.7", - "simple-git": "^3.15.0", + "simple-git": "^3.16.0", "sinon": "^7.4.2", "strip-ansi": "^6.0.0", "supertest": "^6.3.3", diff --git a/packages/osd-opensearch/package.json b/packages/osd-opensearch/package.json index d8082a68c729..90605e5f66f6 100644 --- a/packages/osd-opensearch/package.json +++ b/packages/osd-opensearch/package.json @@ -22,7 +22,7 @@ "getopts": "^2.2.5", "glob": "^7.1.7", "node-fetch": "^2.6.7", - "simple-git": "^3.15.0", + "simple-git": "^3.16.0", "tar-fs": "^2.1.0", "tree-kill": "^1.2.2", "yauzl": "^2.10.0" diff --git a/yarn.lock b/yarn.lock index 510cbd27e6c3..0229378ea839 100644 --- a/yarn.lock +++ b/yarn.lock @@ -19162,7 +19162,7 @@ signal-exit@^3.0.0, signal-exit@^3.0.2: resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.2.tgz#b5fdc08f1287ea1178628e415e25132b73646c6d" integrity sha1-tf3AjxKH6hF4Yo5BXiUTK3NkbG0= -simple-git@^3.15.0: +simple-git@^3.16.0: version "3.16.0" resolved "https://registry.yarnpkg.com/simple-git/-/simple-git-3.16.0.tgz#421773e24680f5716999cc4a1d60127b4b6a9dec" integrity sha512-zuWYsOLEhbJRWVxpjdiXl6eyAyGo/KzVW+KFhhw9MqEEJttcq+32jTWSGyxTdf9e/YCohxRE+9xpWFj9FdiJNw==