Skip to content

fix(deps): update dependency simple-git to ~3.33.0 - autoclosed#173

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/simple-git-3.x
Closed

fix(deps): update dependency simple-git to ~3.33.0 - autoclosed#173
renovate[bot] wants to merge 1 commit intomainfrom
renovate/simple-git-3.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 27, 2026

This PR contains the following updates:

Package Change Age Confidence
simple-git (source) ~3.15.0~3.33.0 age confidence

Release Notes

steveukx/git-js (simple-git)

v3.33.0

Compare Source

Minor Changes
  • a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to
    avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.
Patch Changes

v3.32.3

Compare Source

Patch Changes

v3.32.2

Compare Source

Patch Changes
  • 8d02097: Enhanced clone unsafe switch detection.

v3.32.1

Compare Source

Patch Changes
  • 23b070f: Fix regex for detecting unsafe clone options

    Thanks to @​stevenwdv for reporting this issue.

v3.32.0

Compare Source

Minor Changes
  • 1effd8e: Enhances the unsafe plugin to block additional cases where the -u switch may be disguised
    along with other single character options.

    Thanks to @​JuHwiSang for identifying this as vulnerability.

Patch Changes
  • d5fd4fe: Use task runner for logging use of deprecated (already no-op) functions.

v3.31.1

Compare Source

Patch Changes
  • a44184f: Resolve NPM publish steps

v3.30.0

Compare Source

Minor Changes
  • bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

    Previously git.status would report the current branch name as No. Thank you to @​MaddyGuthridge for identifying this issue.

v3.29.0

Compare Source

Minor Changes
  • 240ec64: Support for absolute paths on Windows when using git.checkIngore, previously Windows would report
    paths with duplicate separators \\\\ between directories.

    Following this change all paths returned from git.checkIgnore will be normalized through node:path,
    this should have no impact on non-windows users where the git binary doesn't wrap absolute paths with
    quotes.

    Thanks to @​Maxim-Mazurok for reporting this issue.

  • 9872f84: Support the use of git.branch(['--show-current']) to limit the branch list to only the current branch.

    Thanks to @​peterbe for pointing out the use-case.

  • 5736bd8: Change to biome for lint and format

v3.28.0

Compare Source

Minor Changes
  • 2adf47d: Allow repeating git options like {'--opt': ['value1', 'value2']}

v3.27.0

Compare Source

Minor Changes
  • 52f767b: Add similarity to the DiffResultNameStatusFile interface used when fetching log/diff with the --name-status option.
  • 739b0d9: Diff summary includes original name of renamed files when run wiht the --name-status option.
  • bc90e7e: Fixes an issue with reporting name changes in the files array returned by git.status.
    Thank you @​mark-codesphere for the contribution.
Patch Changes
  • 03e1c64: Resolve error in log parsing when fields have empty values.

v3.26.0

Compare Source

Minor Changes
  • 28d545b: Upgrade build tools and typescript

v3.25.0

Compare Source

Minor Changes
  • 0a5378d: Add support for parsing count-objects
Patch Changes
  • 4aceb15: Upgrade dependencies and build tools

v3.24.0

Compare Source

Minor Changes
  • c355317: Enable the use of a two part custom binary

v3.23.0

Compare Source

Minor Changes
  • 9bfdf08: Bump package manager from yarn v1 to v4
Patch Changes
  • 8a3118d: Fixed a performance issue when parsing stat diff summaries
  • 9f1a174: Update build tools and workflows for Yarn 4 compatibility

v3.22.0

Compare Source

Minor Changes
  • df14065: add status to DiffResult when using --name-status

v3.21.0

Compare Source

Minor Changes
  • 709d80e: Add firstCommit utility interface
Patch Changes

v3.20.0

Compare Source

Minor Changes
  • 2eda817: Use pathspec in git.log to allow use of previously deleted files in file argument

v3.19.1

Compare Source

Patch Changes
  • 2ab1936: keep path splitter without path specs

v3.19.0

Compare Source

Minor Changes
  • f702b61: Create a utility to append pathspec / file lists to tasks through the TaskOptions array/object

v3.18.0

Compare Source

Minor Changes
  • 5100f04: Add new interface for showBuffer to allow using git show on binary files.
Patch Changes
  • f54cd0d: Examples and documentation for outputHandler

v3.17.0

Compare Source

Minor Changes
  • a63cfc2: Timeout plugin can now be configured to ignore data on either stdOut or stdErr in the git process when determining whether to kill the spawned process.

v3.16.1

Compare Source

Patch Changes
  • 066b228: Fix overly permissive regex in push parser

v3.16.0

Compare Source

Minor Changes
  • 97fde2c: Support the use of -B in place of the default -b in checkout methods
  • 0a623e5: Adds vulnerability detection to prevent use of --upload-pack and --receive-pack without explicitly opting in.
Patch Changes
  • ec97a39: Include restricting the use of git push --exec with other allowUnsafePack exclusions, thanks to @​stsewd for the suggestion.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title fix(deps): update dependency simple-git to ~3.33.0 fix(deps): update dependency simple-git to ~3.33.0 - autoclosed Mar 30, 2026
@renovate renovate Bot closed this Mar 30, 2026
@renovate renovate Bot deleted the renovate/simple-git-3.x branch March 30, 2026 17:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants