Update dependency pre-commit to v2#8477
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
Conversation
ba87bbe to
1539e73
Compare
1539e73 to
14a1499
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.2.2→2.0.0Release Notes
observing/pre-commit (pre-commit)
v2.0.0Compare Source
engines.nodeis nowdeclared as
">=16.13.0"to match the minimum required bywhich@4.cross-spawnupgraded^5→^7.0.5, fixing the ReDoSvulnerability (GHSA-3xgq-45jj-v275).
cross-spawn'sspawnSyncnow returnsstatus/signal/errorinsteadof
code;index.jswas updated to match.whichupgraded1.2.x→^4. Thespawn-syncruntimedependency is dropped in favor of
cross-spawn's built-inspawnSync..git/hooks/pre-commitwrapper is rewritten.It is now a small bash script that
execs the package'shookfile viaan absolute path (single-line invocation instead of multi-line inline
bash). Anyone parsing the wrapper file will need to adjust.
0777to0755(CIS 6.1.10).
<super>/.git/modules/<sub>/hooks/pre-commit. The previous behaviorsilently walked up to the super-project's
.gitdirectory and installedthere because the gitdir-parsing branch was unreachable. Linked worktrees
(whose
.gitis also a file) are handled correctly too.unsetsGIT_LITERAL_PATHSPECS, so commits triggered fromemacs/magit behave the same as on the command line
(magit FAQ).
cds to the git root before resolvingpre-commitviarequire.resolve, so Yarn Plug'n'Play and GUI git clients that invokehooks with an unexpected cwd resolve dependencies correctly.
pre-commitpackage: switching to abranch without
node_modules(or removing the package) no longer blockscommits — it exits
0with a warning instead of throwing a Nodemodule-not-found stack trace.
nullclose codes and signal-terminated scripts; thehook no longer treats a signal kill as success.
install.jsgitdir parsing against missing matches and badinput;
gitdir:paths are resolved relative to the directory containingthe
.gitfile (was incorrectly resolved against the package root).install.js: typo fix ("backuped"→"backed up").mocha3 → 10,assume1 → 2, droppedistanbulfor
nyc.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.