[dependabot]

Bumps the dependencies group with 3 updates in the / directory: conf, simple-git and temp-write.

Updates conf from 10.2.0 to 15.1.0

Release notes

Sourced from conf's releases.

v15.1.0

• Add encryptionAlgorithm option ee03ae8

---

sindresorhus/conf@v15.0.2...v15.1.0

v15.0.2

• Fix build 6287608

---

sindresorhus/conf@v15.0.1...v15.0.2

v15.0.1

• Fix handling of legacy decryption (#204) ce28bd6

---

sindresorhus/conf@v15.0.0...v15.0.1

v15.0.0

There are no known breaking changes, but it's a major release since it contains a large refactor, and that introduces risk.

• Add .appendToArray() method a1dbf86
• Fix constructor validation preventing migrations from fixing invalid schema data a1b43e6
• Fix clear() method to emit single change event 9b83a9d
• Fix store setter to preserve internal migration data ceefe13

---

sindresorhus/conf@v14.0.0...v15.0.0

v14.0.0

Breaking

• Require Node.js 20 b8cc931

Improvements

• Add TypeScript type definitions for dot notation property access (#200) 83cb242

---

sindresorhus/conf@v13.1.0...v14.0.0

v13.1.0

• Add rootSchema and ajvOptions options (#196) 2819caa
• Add TypeScript overload for .delete() to fix dot-notation typing (#197) 8fdcdd7

... (truncated)

Commits

• 49d77e8 15.1.0
• fc9166a Clarify per-user default config location
• ee03ae8 Add encryptionAlgorithm option
• f59aee3 Clarify configFileMode documentation regarding umask
• 01b6920 Minor tweak
• 2d7fb50 15.0.2
• 6287608 Fix build
• 4e97628 15.0.1
• ce28bd6 Fix handling of legacy decryption (#204)
• dd46c07 15.0.0
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates simple-git from 3.36.0 to 4.0.2

Release notes

Sourced from simple-git's releases.

simple-git@4.0.2

Patch Changes

• 68874c2: Add VISUAL environment variable to set of allowUnsafeEditor environment variables.

  Thanks to @​oss-security-shopify for identifying the vulnerability.

• Updated dependencies [68874c2]

  • @​simple-git/argv-parser@​2.0.1

simple-git@4.0.1

Patch Changes

• 365f52d: Prepare package.json before publishing.

simple-git@4.0.0

Major Changes

• 98864c6: Major upgrade to v4. In this version:

  • Removed previously available default export, now uses a consistently named simpleGit export.
  • Removed previously deprecated import simple-git/promise (change to using the main simple-git import).
  • Removed legacy gitP export (change to using the main simpleGit export).

  // v3 - previously supported imports
  import simpleGit from "simple-git";
  import { gitP } from "simple-git";
  import simpleGit from "simple-git/promise";
  const simpleGit = require("simple-git");
  // v4 - consolidates to a single supported import
  import { simpleGit } from "simple-git";
  const { simpleGit } = require("simple-git");

  • Prevents the use of abbreviated long-form git options:

  // v3 - allowed the use of unambiguous long-form options
  git.raw("clone", "--conf=user.name=me", "...");
  // v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError
  git.raw("fetch", "--config=user.name=me", "...");

  • Ambient environment variables are filtered before passing into the git child process.

  // v3

... (truncated)

Changelog

Sourced from simple-git's changelog.

4.0.2

Patch Changes

• 68874c2: Add VISUAL environment variable to set of allowUnsafeEditor environment variables.

  Thanks to @​oss-security-shopify for identifying the vulnerability.

• Updated dependencies [68874c2]

  • @​simple-git/argv-parser@​2.0.1

4.0.1

Patch Changes

• 365f52d: Prepare package.json before publishing.

4.0.0

Major Changes

• 98864c6: Major upgrade to v4. In this version:

  • Removed previously available default export, now uses a consistently named simpleGit export.
  • Removed previously deprecated import simple-git/promise (change to using the main simple-git import).
  • Removed legacy gitP export (change to using the main simpleGit export).

  // v3 - previously supported imports
  import simpleGit from "simple-git";
  import { gitP } from "simple-git";
  import simpleGit from "simple-git/promise";
  const simpleGit = require("simple-git");
  // v4 - consolidates to a single supported import
  import { simpleGit } from "simple-git";
  const { simpleGit } = require("simple-git");

  • Prevents the use of abbreviated long-form git options:

  // v3 - allowed the use of unambiguous long-form options
  git.raw("clone", "--conf=user.name=me", "...");
  // v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError
  git.raw("fetch", "--config=user.name=me", "...");

  Thanks to @​anir0y, @​CFionaBF, @​Leeziao, @​internetteletubbie, @​idisdi, @​the-vibe-dev,

... (truncated)

Commits

• f09081b Version Packages
• 68874c2 Add VISUAL to tracked environment variables for allowUnsafeEditor (#1201)
• f26086d Version Packages
• 365f52d Prepare the main simple-git package.json immediately before publishing.
• 3971917 Version Packages
• d762810 Fix/vulnerability rebase exec (#1198)
• 76f308e Pr/1180 (#1195)
• dfeb116 Fix/exec path vulnerability (#1197)
• 98864c6 V4 (#1193)
• See full diff in compare view

Updates temp-write from 4.0.0 to 6.0.1

Release notes

Sourced from temp-write's releases.

v6.0.1

• Harden input validation 1325d7b

---

sindresorhus/temp-write@v6.0.0...v6.0.1

v6.0.0

Breaking

• Require Node.js 18 046e965

sindresorhus/temp-write@v5.0.0...v6.0.0

v5.0.0

Breaking

• Require Node.js 12
• This package is now pure ESM. Please read this.

Improvements

• Improve stream handling (#13) d5898aa

sindresorhus/temp-write@v4.0.0...v5.0.0

Commits

• 990c5cb 6.0.1
• 1325d7b Harden input validation
• 465ccb0 6.0.0
• 046e965 Require Node.js 18
• 364b1e1 5.0.0
• 90a3bf8 Move to ESM
• d5898aa Improve stream handling (#13)
• 5471e67 Move to GitHub Actions
• a3f7e21 Meta tweaks
• b027c5a Tidelift tasks
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
temp-write	[>= 5.a, < 6]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions