1
0
Fork 0

Update lerna dependency. (#1149)

* fix audit

* update linter
pull/1140/head^2
Thomas Boop 2022-08-08 14:39:23 -04:00 committed by GitHub
parent 4beda9cbc0
commit 30995490f2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 6491 additions and 6653 deletions

13116
package-lock.json generated

File diff suppressed because it is too large Load Diff

View File

@ -24,7 +24,7 @@
"eslint-plugin-jest": "^22.21.0", "eslint-plugin-jest": "^22.21.0",
"flow-bin": "^0.115.0", "flow-bin": "^0.115.0",
"jest": "^27.2.5", "jest": "^27.2.5",
"lerna": "^4.0.0", "lerna": "^5.4.0",
"prettier": "^1.19.1", "prettier": "^1.19.1",
"ts-jest": "^27.0.5", "ts-jest": "^27.0.5",
"typescript": "^3.9.9" "typescript": "^3.9.9"

View File

@ -132,10 +132,12 @@ describe('@actions/core', () => {
it('exportVariable does not allow delimiter as value', () => { it('exportVariable does not allow delimiter as value', () => {
const command = 'ENV' const command = 'ENV'
createFileCommandFile(command) createFileCommandFile(command)
expect(() => { expect(() => {
core.exportVariable('my var', `good stuff ${DELIMITER} bad stuff`) core.exportVariable('my var', `good stuff ${DELIMITER} bad stuff`)
}).toThrow(`Unexpected input: value should not contain the delimiter "${DELIMITER}"`) }).toThrow(
`Unexpected input: value should not contain the delimiter "${DELIMITER}"`
)
const filePath = path.join(__dirname, `test/${command}`) const filePath = path.join(__dirname, `test/${command}`)
fs.unlinkSync(filePath) fs.unlinkSync(filePath)
@ -144,11 +146,13 @@ describe('@actions/core', () => {
it('exportVariable does not allow delimiter as name', () => { it('exportVariable does not allow delimiter as name', () => {
const command = 'ENV' const command = 'ENV'
createFileCommandFile(command) createFileCommandFile(command)
expect(() => { expect(() => {
core.exportVariable(`good stuff ${DELIMITER} bad stuff`, 'test') core.exportVariable(`good stuff ${DELIMITER} bad stuff`, 'test')
}).toThrow(`Unexpected input: name should not contain the delimiter "${DELIMITER}"`) }).toThrow(
`Unexpected input: name should not contain the delimiter "${DELIMITER}"`
)
const filePath = path.join(__dirname, `test/${command}`) const filePath = path.join(__dirname, `test/${command}`)
fs.unlinkSync(filePath) fs.unlinkSync(filePath)
}) })

View File

@ -4,7 +4,7 @@ import {toCommandProperties, toCommandValue} from './utils'
import * as os from 'os' import * as os from 'os'
import * as path from 'path' import * as path from 'path'
import { v4 as uuidv4 } from 'uuid' import {v4 as uuidv4} from 'uuid'
import {OidcClient} from './oidc-utils' import {OidcClient} from './oidc-utils'
@ -89,13 +89,17 @@ export function exportVariable(name: string, val: any): void {
if (filePath) { if (filePath) {
const delimiter = `ghadelimiter_${uuidv4()}` const delimiter = `ghadelimiter_${uuidv4()}`
// These should realistically never happen, but just in case someone finds a way to exploit uuid generation let's not allow keys or values that contain the delimiter. // These should realistically never happen, but just in case someone finds a way to exploit uuid generation let's not allow keys or values that contain the delimiter.
if (name.includes(delimiter)) { if (name.includes(delimiter)) {
throw new Error(`Unexpected input: name should not contain the delimiter "${delimiter}"`) throw new Error(
`Unexpected input: name should not contain the delimiter "${delimiter}"`
)
} }
if (convertedVal.includes(delimiter)) { if (convertedVal.includes(delimiter)) {
throw new Error(`Unexpected input: value should not contain the delimiter "${delimiter}"`) throw new Error(
`Unexpected input: value should not contain the delimiter "${delimiter}"`
)
} }
const commandValue = `${name}<<${delimiter}${os.EOL}${convertedVal}${os.EOL}${delimiter}` const commandValue = `${name}<<${delimiter}${os.EOL}${convertedVal}${os.EOL}${delimiter}`