Skip to content

Bump simple-git from 3.28.0 to 3.31.1 in /js - #210

Open
dependabot[bot] wants to merge 1 commit into
demonstrate-cross-realm-session-vulnerabilityfrom
dependabot/npm_and_yarn/js/simple-git-3.31.1
Open

Bump simple-git from 3.28.0 to 3.31.1 in /js#210
dependabot[bot] wants to merge 1 commit into
demonstrate-cross-realm-session-vulnerabilityfrom
dependabot/npm_and_yarn/js/simple-git-3.31.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 16, 2026

Copy link
Copy Markdown
Contributor

Bumps simple-git from 3.28.0 to 3.31.1.

Release notes

Sourced from simple-git's releases.

simple-git@3.31.1

Patch Changes

  • a44184f: Resolve NPM publish steps

simple-git@3.30.0

Minor Changes

  • bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

    Previously git.status would report the current branch name as No. Thank you to @​MaddyGuthridge for identifying this issue.

Changelog

Sourced from simple-git's changelog.

3.31.1

Patch Changes

  • a44184f: Resolve NPM publish steps

3.31.0

Minor Changes

  • 22dc93f: Custom binary plugin should support the use of ~ character, used by Windows to shorten long folder names and folder names that have spaces in them (eg: C:\Program Files might become C:\PROGRA~1).

    Thanks to @​skyshineb for reporting this issue.

  • 7fbd379: Removes redundant uniqueness checks throughout the git.status parser, each file appears only once in the output from git.

    Thanks to @​nathanael-ruf for contributing this change.

Patch Changes

  • c8beec9: Update simple-git documentation for cwd remove incorrect use of await

    Thank you to @​siderdax for identifying this issue.

  • a0110fe: Build dependencies update

3.30.0

Minor Changes

  • bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

    Previously git.status would report the current branch name as No. Thank you to @​MaddyGuthridge for identifying this issue.

3.29.0

Minor Changes

  • 240ec64: Support for absolute paths on Windows when using git.checkIngore, previously Windows would report paths with duplicate separators \\\\ between directories.

    Following this change all paths returned from git.checkIgnore will be normalized through node:path, this should have no impact on non-windows users where the git binary doesn't wrap absolute paths with quotes.

    Thanks to @​Maxim-Mazurok for reporting this issue.

  • 9872f84: Support the use of git.branch(['--show-current']) to limit the branch list to only the current branch.

... (truncated)

Commits
  • 09dfe4f Version Packages
  • 69388de Version Packages
  • 7fbd379 Removes redundant uniqueness checks throughout the git.status parser, each ...
  • 56244d1 perf(status): Eliminate O(n^2) append bottleneck
  • 22dc93f Custom binary plugin should support the use of ~ character, used by Windows...
  • 9dd70fd Version Packages
  • bc77774 Update the regular expression for empty branches to respect empty local branc...
  • 0b326b4 Version Packages
  • 240ec64 Add test for absolute paths in checkIgnore (#1085)
  • d232dc5 File path formatting for checkIgnore running on Windows (#1084)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for simple-git since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.28.0 to 3.31.1.
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.31.1/simple-git)

---
updated-dependencies:
- dependency-name: simple-git
  dependency-version: 3.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Feb 16, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: area/dependencies, team/ui. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@augment-app-staging

Copy link
Copy Markdown

Small JS dependency bump with the lockfile tagging along.

🤖 Augment PR Summary

Summary: Updates the JS workspace dependency on simple-git to the latest 3.31.x release.

Changes:

  • Bumped simple-git from ^3.28.0 to ^3.31.1 in js/apps/create-keycloak-theme.
  • Refreshed the JS lockfile to align the resolved version with the new range.

Technical Notes:

  • This is a minor/patch-level upgrade within major v3 and should be backwards-compatible.
  • Release notes mention improvements around branch/status handling and Windows path behavior.

🤖 Was this summary useful? React with 👍 or 👎

@augment-app-staging augment-app-staging Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That’s all I found on this one.

Comment augment review to trigger a new review at any time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants