Merge pull request #768 from steveukx/changeset-release/main

steveukx · web-flow · commit 94c24623bf2f · 2022-03-11T12:21:54.000Z
Version Packages
diff --git a/.changeset/silent-dodos-deny.md b/.changeset/silent-dodos-deny.md
diff --git a/simple-git/CHANGELOG.md b/simple-git/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change History & Release Notes
 
+## 3.3.0
+
+### Minor Changes
+
+- d119ec4: Resolves potential command injection vulnerability by preventing use of `--upload-pack` in `git.fetch`
+
 ## 3.2.6
 
 ### Patch Changes
diff --git a/simple-git/package.json b/simple-git/package.json
@@ -1,7 +1,7 @@
 {
   "name": "simple-git",
   "description": "Simple GIT interface for node.js",
-  "version": "3.2.6",
+  "version": "3.3.0",
   "author": "Steve King <steve@mydev.co>",
   "contributors": [
     {

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "simple-git",`
`3`	`3`	`"description": "Simple GIT interface for node.js",`
`4`		`- "version": "3.2.6",`
	`4`	`+ "version": "3.3.0",`
`5`	`5`	`"author": "Steve King <[email protected]>",`
`6`	`6`	`"contributors": [`
`7`	`7`	`{`