[Snyk] Upgrade shelljs from 0.7.8 to 0.8.5 #2

snyk-bot · 2022-07-27T06:06:30Z

Snyk has created this PR to upgrade shelljs from 0.7.8 to 0.8.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 6 versions ahead of your current version.
The recommended version was released 7 months ago, on 2022-01-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Privilege Management SNYK-JS-SHELLJS-2332187	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: shelljs

0.8.5 - 2022-01-07
This was a small security fix for #1058.
0.8.4 - 2020-04-25
Small patch release to fix a circular dependency warning in node v14. See #973.
0.8.3 - 2018-11-13
Closed issues:
- Shelljs print stderr to console even if exec-only "silent" is true #905
- refactor: remove common.state.tempDir #902
- Can't suppress stdout for echo #899
- exec() doesn't apply the arguments correctly #895
- shell.exec('npm pack') painfully slow #885
- shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881
- test infra: mocks and skipOnWin conflict #862
- Support for shell function completion on IDE #859
- echo command shows options in stdout #855
- silent does not always work #851
- Appveyor installs the latest npm, instead of the latest compatible npm #844
- Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830
- inconsistent result when trying to echo to a file #798
- Prevent require()ing executable-only files #789
- Cannot set property to of [object String] which has only a getter #752
- which() should check executability before returning a value #657
- Bad encoding experience #456
- phpcs very slow #440
- Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254
- .to\(file\) does not mute STDIO output #146
- Escaping shell arguments to exec() #143
- Allow multiple string arguments for exec() #103
- cp does not recursively copy from readonly location #98
- Handling permissions errors on file I/O #64
Merged pull requests:
- Add test case for sed on empty file #904 (wyardley)
- refactor: don't expose tempdir in common.state #903 (nfischer)
- chore(ci): fix codecov on travis #897 (nfischer)
- chore(npm): add ci-or-install script #896 (nfischer)
- Fix silent exec #892 (nfischer)
- chore(appveyor): run entire test matrix #886 (nfischer)
- docs: remove gitter badge #880 (nfischer)
- grep includes the i flag #876 (ppsleep)
- Fix(which): match only executable files (#657) #874 (termosa)
- chore: rename some tests #871 (nfischer)
- Fix cp from readonly source #870 (nfischer)
- chore: bump dev dependencies and add package-lock #864 (nfischer)
- fix(mocks): fix conflict between mocks and skip #863 (nfischer)
- chore: output npm version in travis #850 (nfischer)
- Prevent require-ing bin/shjs #848 (freitagbr)
- chore(appveyor): do not use latest npm #847 (nfischer)
- chore: update shelljs-release version #846 (nfischer)
0.8.2 - 2018-05-08
Closed issues:
- High severity vulnerability in shelljs 0.8.1 #842
- Add test for ls() on a symlink to a directory #795
- Harden shell.exec by writing the child process in a source file #782
- shell.exec() doesn't respond correctly to config.fatal = true #735
- Merge 'exec: internal error' with ShellJSInternalError #734
- exec returning null from command #724
- Only Get Stderr from Exec #371
- Execute child.stdout.on before child.on("exit") #224
Merged pull requests:
- Workaround codecov bug of miscalculation of coverage (#795) #838 (dwi2)
- Update doc comments and regenerate README.md. #825 (Zearin)
- chore: update contributing guidelines #817 (nfischer)
- chore(lint): don't allow excess trailing newlines #816 (nfischer)
- Remove separate "internal error" from exec #802 (freitagbr)
0.8.1 - 2018-01-20
Closed issues:
- Exec failing with internal error when piping large output #818
- using sed to replace just the first occurrence of a string #813
Merged pull requests:
- Revert "refactor(exec): remove paramsFile (#807)" #819 (nfischer)
0.8.0 - 2018-01-12
Read more
0.7.8 - 2017-06-07
Closed issues:
- Add node v8 to CI #729
- Exec not working in Electron ! #726
- is rechoir used anywhere? #723
- ShellJS: internal error on shelljs.mkdir('myFile/myDir') #720
- Can't make sed perform global replace #719
- grep: option not recognized: l #717
- Problems getting code, stdout, stderr #715
- Copying hidden files fails on Windows 10 #711
- How am I suppose to handle errors with ShellJS? #707
- use cp('-r', './src', './dist') bug #705
- Way to ignore files in globs. #699
- Buffer constructor is deprecated #694
- source command not working via exec method. #693
- Would you be interested in a PR for open? #692
- Get rid of common.platform in favor of process.platform #670
- Passing empty string to cp throws internal error #664
- Why does sed split files into an array, call replace on each line and rejoin? #645
- feat: cp & mv should not overwrite recently created files #631
- Echo tests unnecessarily run tests in own process #622
- rm -rf on a symbolic link to a dir deletes its contents #587
- "Cannot extract package" with node-webkit #181
- EBADF, bad file descriptor #180
Merged pull requests:
- Add node 8 to CI #730 (freitagbr)
- Deprecate common.getUserHome, advise using os.homedir instead #725 (freitagbr)
- fix(mkdir): improve error handling around files #721 (nfischer)
- Properly handle directories as arguments #713 (nfischer)
- Add common.buffer #710 (freitagbr)
- Fix common.expand error #709 (freitagbr)
- Echo test mocks #708 (freitagbr)
- refactor: remove unnecessary common.js imports #703 (nfischer)
- Fix #631 throw error when overwriting recently created file #702 (uttpal)
- Small clarification of verbose flag #691 (zommerfelds)
- fix(grep, sed, sort, uniq): Split only on newline characters #690 (freitagbr)
- Refactor: Use process.platform across codebase #689 (freitagbr)
- Remove contents of symlink to dir with rm -rf #688 (freitagbr)
- Echo stdout #677 (nfischer)