@fern-api/generator-cli 0.6.11 → 0.6.14

package/dist/api.d.ts

@@ -532,6 +532,12 @@ interface GithubStepConfig {
     branch?: string;
     /** Commit message for the generation */
     commitMessage?: string;
+    /** User-facing changelog entry for PR body. When present, used instead of commit message body. */
+    changelogEntry?: string;
+    /** Structured PR description with Before/After code fences for breaking changes. Takes priority over changelogEntry for PR body. */
+    prDescription?: string;
+    /** One-sentence justification for WHY the version bump was chosen. Prepended to PR body when present. */
+    versionBumpReason?: string;
     /** Skip push/PR creation, just prepare branches locally */
     previewMode?: boolean;
     /** Generator name for namespaced fern-generation-base tag */

package/dist/api.js

@@ -902,7 +902,7 @@ module.exports = __toCommonJS(api_exports2);
 var import_promises = require("fs/promises");
 var import_path = __toESM(require("path"), 1);
 
-// ../../node_modules/.pnpm/simple-git@3.30.0/node_modules/simple-git/dist/esm/index.js
+// ../../node_modules/.pnpm/simple-git@3.33.0/node_modules/simple-git/dist/esm/index.js
 var import_node_buffer = require("buffer");
 var import_file_exists = __toESM(require_dist(), 1);
 var import_debug = __toESM(require_src(), 1);
@@ -1153,7 +1153,7 @@ var init_argument_filters = __esm({
       return typeof input === "number";
     };
     filterString = (input) => {
-      return typeof input === "string";
+      return typeof input === "string" || isPathSpec(input);
     };
     filterStringOrStringArray = (input) => {
       return filterString(input) || Array.isArray(input) && input.every(filterString);
@@ -3528,15 +3528,15 @@ function parser3(indexX, indexY, handler) {
   return [`${indexX}${indexY}`, handler];
 }
 function conflicts(indexX, ...indexY) {
-  return indexY.map((y) => parser3(indexX, y, (result, file) => append(result.conflicted, file)));
+  return indexY.map((y) => parser3(indexX, y, (result, file) => result.conflicted.push(file)));
 }
 function splitLine(result, lineStr) {
   const trimmed2 = lineStr.trim();
   switch (" ") {
     case trimmed2.charAt(2):
-      return data(trimmed2.charAt(0), trimmed2.charAt(1), trimmed2.substr(3));
+      return data(trimmed2.charAt(0), trimmed2.charAt(1), trimmed2.slice(3));
     case trimmed2.charAt(1):
-      return data(" ", trimmed2.charAt(0), trimmed2.substr(2));
+      return data(" ", trimmed2.charAt(0), trimmed2.slice(2));
     default:
       return;
   }
@@ -3584,58 +3584,54 @@ var init_StatusSummary = __esm({
       parser3(
         " ",
         "A",
-        (result, file) => append(result.created, file)
+        (result, file) => result.created.push(file)
       ),
       parser3(
         " ",
         "D",
-        (result, file) => append(result.deleted, file)
+        (result, file) => result.deleted.push(file)
       ),
       parser3(
         " ",
         "M",
-        (result, file) => append(result.modified, file)
-      ),
-      parser3(
-        "A",
-        " ",
-        (result, file) => append(result.created, file) && append(result.staged, file)
-      ),
-      parser3(
-        "A",
-        "M",
-        (result, file) => append(result.created, file) && append(result.staged, file) && append(result.modified, file)
-      ),
-      parser3(
-        "D",
-        " ",
-        (result, file) => append(result.deleted, file) && append(result.staged, file)
-      ),
-      parser3(
-        "M",
-        " ",
-        (result, file) => append(result.modified, file) && append(result.staged, file)
-      ),
-      parser3(
-        "M",
-        "M",
-        (result, file) => append(result.modified, file) && append(result.staged, file)
+        (result, file) => result.modified.push(file)
       ),
+      parser3("A", " ", (result, file) => {
+        result.created.push(file);
+        result.staged.push(file);
+      }),
+      parser3("A", "M", (result, file) => {
+        result.created.push(file);
+        result.staged.push(file);
+        result.modified.push(file);
+      }),
+      parser3("D", " ", (result, file) => {
+        result.deleted.push(file);
+        result.staged.push(file);
+      }),
+      parser3("M", " ", (result, file) => {
+        result.modified.push(file);
+        result.staged.push(file);
+      }),
+      parser3("M", "M", (result, file) => {
+        result.modified.push(file);
+        result.staged.push(file);
+      }),
       parser3("R", " ", (result, file) => {
-        append(result.renamed, renamedFile(file));
+        result.renamed.push(renamedFile(file));
       }),
       parser3("R", "M", (result, file) => {
         const renamed = renamedFile(file);
-        append(result.renamed, renamed);
-        append(result.modified, renamed.to);
+        result.renamed.push(renamed);
+        result.modified.push(renamed.to);
       }),
       parser3("!", "!", (_result, _file) => {
-        append(_result.ignored = _result.ignored || [], _file);
+        (_result.ignored = _result.ignored || []).push(_file);
       }),
       parser3(
         "?",
         "?",
-        (result, file) => append(result.not_added, file)
+        (result, file) => result.not_added.push(file)
       ),
       ...conflicts(
         "A",
@@ -3793,6 +3789,48 @@ var init_version = __esm({
     ];
   }
 });
+function createCloneTask(api, task, repoPath, ...args) {
+  if (!filterString(repoPath)) {
+    return configurationErrorTask(`git.${api}() requires a string 'repoPath'`);
+  }
+  return task(repoPath, filterType(args[0], filterString), getTrailingOptions(arguments));
+}
+function clone_default() {
+  return {
+    clone(repo, ...rest) {
+      return this._runTask(
+        createCloneTask("clone", cloneTask, filterType(repo, filterString), ...rest),
+        trailingFunctionArgument(arguments)
+      );
+    },
+    mirror(repo, ...rest) {
+      return this._runTask(
+        createCloneTask("mirror", cloneMirrorTask, filterType(repo, filterString), ...rest),
+        trailingFunctionArgument(arguments)
+      );
+    }
+  };
+}
+var cloneTask;
+var cloneMirrorTask;
+var init_clone = __esm({
+  "src/lib/tasks/clone.ts"() {
+    "use strict";
+    init_task();
+    init_utils();
+    init_pathspec();
+    cloneTask = (repo, directory, customArgs) => {
+      const commands = ["clone", ...customArgs];
+      filterString(repo) && commands.push(pathspec(repo));
+      filterString(directory) && commands.push(pathspec(directory));
+      return straightThroughStringTask(commands);
+    };
+    cloneMirrorTask = (repo, directory, customArgs) => {
+      append(customArgs, "--mirror");
+      return cloneTask(repo, directory, customArgs);
+    };
+  }
+});
 var simple_git_api_exports = {};
 __export2(simple_git_api_exports, {
   SimpleGitApi: () => SimpleGitApi
@@ -3819,6 +3857,7 @@ var init_simple_git_api = __esm({
     init_task();
     init_version();
     init_utils();
+    init_clone();
     SimpleGitApi = class {
       constructor(_executor) {
         this._executor = _executor;
@@ -3921,6 +3960,7 @@ var init_simple_git_api = __esm({
     Object.assign(
       SimpleGitApi.prototype,
       checkout_default(),
+      clone_default(),
       commit_default(),
       config_default(),
       count_objects_default(),
@@ -4244,35 +4284,6 @@ var init_check_ignore = __esm({
     init_CheckIgnore();
   }
 });
-var clone_exports = {};
-__export2(clone_exports, {
-  cloneMirrorTask: () => cloneMirrorTask,
-  cloneTask: () => cloneTask
-});
-function disallowedCommand(command) {
-  return /^--upload-pack(=|$)/.test(command);
-}
-function cloneTask(repo, directory, customArgs) {
-  const commands = ["clone", ...customArgs];
-  filterString(repo) && commands.push(repo);
-  filterString(directory) && commands.push(directory);
-  const banned = commands.find(disallowedCommand);
-  if (banned) {
-    return configurationErrorTask(`git.fetch: potential exploit argument blocked.`);
-  }
-  return straightThroughStringTask(commands);
-}
-function cloneMirrorTask(repo, directory, customArgs) {
-  append(customArgs, "--mirror");
-  return cloneTask(repo, directory, customArgs);
-}
-var init_clone = __esm({
-  "src/lib/tasks/clone.ts"() {
-    "use strict";
-    init_task();
-    init_utils();
-  }
-});
 function parseFetchResult(stdOut, stdErr) {
   const result = {
     raw: stdOut,
@@ -4328,7 +4339,7 @@ var fetch_exports = {};
 __export2(fetch_exports, {
   fetchTask: () => fetchTask
 });
-function disallowedCommand2(command) {
+function disallowedCommand(command) {
   return /^--upload-pack(=|$)/.test(command);
 }
 function fetchTask(remote, branch, customArgs) {
@@ -4336,7 +4347,7 @@ function fetchTask(remote, branch, customArgs) {
   if (remote && branch) {
     commands.push(remote, branch);
   }
-  const banned = commands.find(disallowedCommand2);
+  const banned = commands.find(disallowedCommand);
   if (banned) {
     return configurationErrorTask(`git.fetch: potential exploit argument blocked.`);
   }
@@ -4652,7 +4663,7 @@ var require_git = __commonJS2({
     var { GitExecutor: GitExecutor2 } = (init_git_executor(), __toCommonJS2(git_executor_exports));
     var { SimpleGitApi: SimpleGitApi2 } = (init_simple_git_api(), __toCommonJS2(simple_git_api_exports));
     var { Scheduler: Scheduler2 } = (init_scheduler(), __toCommonJS2(scheduler_exports));
-    var { configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS2(task_exports));
+    var { adhocExecTask: adhocExecTask2, configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS2(task_exports));
     var {
       asArray: asArray2,
       filterArray: filterArray2,
@@ -4673,7 +4684,6 @@ var require_git = __commonJS2({
     } = (init_branch(), __toCommonJS2(branch_exports));
     var { checkIgnoreTask: checkIgnoreTask2 } = (init_check_ignore(), __toCommonJS2(check_ignore_exports));
     var { checkIsRepoTask: checkIsRepoTask2 } = (init_check_is_repo(), __toCommonJS2(check_is_repo_exports));
-    var { cloneTask: cloneTask2, cloneMirrorTask: cloneMirrorTask2 } = (init_clone(), __toCommonJS2(clone_exports));
     var { cleanWithOptionsTask: cleanWithOptionsTask2, isCleanOptionsArray: isCleanOptionsArray2 } = (init_clean(), __toCommonJS2(clean_exports));
     var { diffSummaryTask: diffSummaryTask2 } = (init_diff(), __toCommonJS2(diff_exports));
     var { fetchTask: fetchTask2 } = (init_fetch(), __toCommonJS2(fetch_exports));
@@ -4728,24 +4738,6 @@ var require_git = __commonJS2({
         trailingFunctionArgument2(arguments)
       );
     };
-    function createCloneTask(api, task, repoPath, localPath) {
-      if (typeof repoPath !== "string") {
-        return configurationErrorTask2(`git.${api}() requires a string 'repoPath'`);
-      }
-      return task(repoPath, filterType2(localPath, filterString2), getTrailingOptions2(arguments));
-    }
-    Git2.prototype.clone = function() {
-      return this._runTask(
-        createCloneTask("clone", cloneTask2, ...arguments),
-        trailingFunctionArgument2(arguments)
-      );
-    };
-    Git2.prototype.mirror = function() {
-      return this._runTask(
-        createCloneTask("mirror", cloneMirrorTask2, ...arguments),
-        trailingFunctionArgument2(arguments)
-      );
-    };
     Git2.prototype.mv = function(from, to) {
       return this._runTask(moveTask2(from, to), trailingFunctionArgument2(arguments));
     };
@@ -4778,10 +4770,13 @@ var require_git = __commonJS2({
       );
     };
     Git2.prototype.silent = function(silence) {
-      console.warn(
-        "simple-git deprecation notice: git.silent: logging should be configured using the `debug` library / `DEBUG` environment variable, this will be an error in version 3"
+      return this._runTask(
+        adhocExecTask2(
+          () => console.warn(
+            "simple-git deprecation notice: git.silent: logging should be configured using the `debug` library / `DEBUG` environment variable, this method will be removed."
+          )
+        )
       );
-      return this;
     };
     Git2.prototype.tags = function(options, then) {
       return this._runTask(
@@ -5007,7 +5002,13 @@ var require_git = __commonJS2({
       return this._runTask(task);
     };
     Git2.prototype.clearQueue = function() {
-      return this;
+      return this._runTask(
+        adhocExecTask2(
+          () => console.warn(
+            "simple-git deprecation notice: clearQueue() is deprecated and will be removed, switch to using the abortPlugin instead."
+          )
+        )
+      );
     };
     Git2.prototype.checkIgnore = function(pathnames, then) {
       return this._runTask(
@@ -5077,19 +5078,36 @@ function abortPlugin(signal) {
 function isConfigSwitch(arg) {
   return typeof arg === "string" && arg.trim().toLowerCase() === "-c";
 }
-function preventProtocolOverride(arg, next) {
-  if (!isConfigSwitch(arg)) {
-    return;
-  }
-  if (!/^\s*protocol(.[a-z]+)?.allow/.test(next)) {
-    return;
+function isCloneUploadPackSwitch(char, arg) {
+  if (typeof arg !== "string" || !arg.includes(char)) {
+    return false;
   }
-  throw new GitPluginError(
-    void 0,
-    "unsafe",
-    "Configuring protocol.allow is not permitted without enabling allowUnsafeExtProtocol"
-  );
+  const cleaned = arg.trim().replace(/\0/g, "");
+  return /^(--no)?-{1,2}[\dlsqvnobucj]+(\s|$)/.test(cleaned);
+}
+function preventConfigBuilder(config, setting, message = String(config)) {
+  const regex = typeof config === "string" ? new RegExp(`\\s*${config}`, "i") : config;
+  return function preventCommand(options, arg, next) {
+    if (options[setting] !== true && isConfigSwitch(arg) && regex.test(next)) {
+      throw new GitPluginError(
+        void 0,
+        "unsafe",
+        `Configuring ${message} is not permitted without enabling ${setting}`
+      );
+    }
+  };
 }
+var preventUnsafeConfig = [
+  preventConfigBuilder(
+    /^\s*protocol(.[a-z]+)?.allow/i,
+    "allowUnsafeProtocolOverride",
+    "protocol.allow"
+  ),
+  preventConfigBuilder("core.sshCommand", "allowUnsafeSshCommand"),
+  preventConfigBuilder("core.gitProxy", "allowUnsafeGitProxy"),
+  preventConfigBuilder("core.hooksPath", "allowUnsafeHooksPath"),
+  preventConfigBuilder("diff.external", "allowUnsafeDiffExternal")
+];
 function preventUploadPack(arg, method) {
   if (/^\s*--(upload|receive)-pack/.test(arg)) {
     throw new GitPluginError(
@@ -5098,7 +5116,7 @@ function preventUploadPack(arg, method) {
       `Use of --upload-pack or --receive-pack is not permitted without enabling allowUnsafePack`
     );
   }
-  if (method === "clone" && /^\s*-u\b/.test(arg)) {
+  if (method === "clone" && isCloneUploadPackSwitch("u", arg)) {
     throw new GitPluginError(
       void 0,
       "unsafe",
@@ -5114,16 +5132,16 @@ function preventUploadPack(arg, method) {
   }
 }
 function blockUnsafeOperationsPlugin({
-  allowUnsafeProtocolOverride = false,
-  allowUnsafePack = false
+  allowUnsafePack = false,
+  ...options
 } = {}) {
   return {
     type: "spawn.args",
     action(args, context) {
       args.forEach((current, index) => {
         const next = index < args.length ? args[index + 1] : "";
-        allowUnsafeProtocolOverride || preventProtocolOverride(current, next);
         allowUnsafePack || preventUploadPack(current, context.method);
+        preventUnsafeConfig.forEach((helper) => helper(options, current, next));
       });
       return args;
     }
@@ -5207,7 +5225,7 @@ init_utils();
 var WRONG_NUMBER_ERR = `Invalid value supplied for custom binary, requires a single string or an array containing either one or two strings`;
 var WRONG_CHARS_ERR = `Invalid value supplied for custom binary, restricted characters must be removed or supply the unsafe.allowUnsafeCustomBinary option`;
 function isBadArgument(arg) {
-  return !arg || !/^([a-z]:)?([a-z0-9/.\\_-]+)$/i.test(arg);
+  return !arg || !/^([a-z]:)?([a-z0-9/.\\_~-]+)$/i.test(arg);
 }
 function toBinaryConfig(input, allowUnsafe) {
   if (input.length < 1 || input.length > 2) {
@@ -5435,12 +5453,12 @@ function gitInstanceFactory(baseDir, options) {
     plugins.add(commandConfigPrefixingPlugin(config.config));
   }
   plugins.add(blockUnsafeOperationsPlugin(config.unsafe));
-  plugins.add(suffixPathsPlugin());
   plugins.add(completionDetectionPlugin(config.completion));
   config.abort && plugins.add(abortPlugin(config.abort));
   config.progress && plugins.add(progressMonitorPlugin(config.progress));
   config.timeout && plugins.add(timeoutPlugin(config.timeout));
   config.spawnOptions && plugins.add(spawnOptionsPlugin(config.spawnOptions));
+  plugins.add(suffixPathsPlugin());
   plugins.add(errorDetectionPlugin(errorDetectionHandler(true)));
   config.errors && plugins.add(errorDetectionPlugin(config.errors));
   customBinaryPlugin(plugins, config.binary, config.unsafe?.allowUnsafeCustomBinary);
@@ -5748,6 +5766,21 @@ async function doesPathExist(filepath) {
   }
 }
 
+// ../commons/core-utils/lib/extractErrorMessage.js
+function extractErrorMessage(e) {
+  if (typeof e === "string") {
+    return e.length > 0 ? e : "Unknown error";
+  }
+  if (e instanceof Error) {
+    return e.message.length > 0 ? e.message : "Unknown error";
+  }
+  if (typeof e === "object" && e !== null && "message" in e && typeof e["message"] === "string") {
+    return e["message"].length > 0 ? e["message"] : "Unknown error";
+  }
+  const stringified = String(e);
+  return stringified.length > 0 ? stringified : "Unknown error";
+}
+
 // ../commons/github/lib/cloneRepository.js
 var import_child_process2 = require("child_process");
 var import_tmp_promise = __toESM(require("tmp-promise"), 1);
@@ -5769,7 +5802,7 @@ function parseRepository(githubRepository) {
   } else if (parts.length === 3 && parts[0] != null && parts[1] != null && parts[2] != null) {
     [remote, owner, repo] = parts;
   } else {
-    throw new Error(`Failed to parse GitHub repostiory ${githubRepository}`);
+    throw new Error(`Failed to parse GitHub repository ${githubRepository}`);
   }
   return newRepositoryReference({ remote, owner, repo });
 }
@@ -5850,7 +5883,7 @@ async function cloneRepository({ githubRepository, installationToken, targetDire
     await git.clone(cloneUrl, ".");
   } catch (error) {
     const elapsed = Date.now() - startTime;
-    const errorMessage = error instanceof Error ? error.message : String(error);
+    const errorMessage = extractErrorMessage(error);
     if (errorMessage.includes("ENOENT") || errorMessage.includes("spawn git")) {
       const diagnostics = getGitDiagnostics();
       throw new Error(`Failed to clone repository: git command not found. Self-hosted GitHub mode requires git to be installed on the host machine where the Fern CLI runs. URL: ${sanitizedUrl}. Elapsed: ${elapsed}ms. Debug info: ${diagnostics}. Original error: ${errorMessage}`);
@@ -8922,7 +8955,7 @@ var ReadmeGenerator = class {
     await writer.writeLine();
     await writer.writeLine("```groovy");
     await writer.writeLine("dependencies {");
-    await writer.writeLine(`  implementation '${maven.group}:${maven.artifact}'`);
+    await writer.writeLine(`  implementation '${maven.group}:${maven.artifact}:${maven.version}'`);
     await writer.writeLine("}");
     await writer.writeLine("```");
     await writer.writeLine();
@@ -9735,7 +9768,7 @@ async function findExistingUpdatablePR(octokit, owner, repo, baseBranch, logger)
     }
     return void 0;
   } catch (error) {
-    logger.debug(`Error finding existing PRs: ${error instanceof Error ? error.message : String(error)}`);
+    logger.debug(`Error finding existing PRs: ${extractErrorMessage(error)}`);
     return void 0;
   }
 }
@@ -9762,16 +9795,22 @@ async function checkPRHasOnlyGenerationCommits(octokit, owner, repo, pullNumber,
     }
     return true;
   } catch (error) {
-    logger.debug(`Error checking PR commits: ${error instanceof Error ? error.message : String(error)}`);
+    logger.debug(`Error checking PR commits: ${extractErrorMessage(error)}`);
     return false;
   }
 }
 
 // src/pipeline/github/parseCommitMessage.ts
-function parseCommitMessageForPR(commitMessage) {
+function parseCommitMessageForPR(commitMessage, changelogEntry, prDescription, versionBumpReason) {
   const lines = commitMessage.split("\n");
   const prTitle = lines[0]?.trim() || "SDK Generation";
-  const prBody = lines.slice(1).join("\n").trim() || "Automated SDK generation by Fern";
+  const bodyFromCommit = lines.slice(1).join("\n").trim() || "Automated SDK generation by Fern";
+  let prBody = prDescription?.trim() || changelogEntry?.trim() || bodyFromCommit;
+  if (versionBumpReason?.trim()) {
+    prBody = `**Version Bump:** ${versionBumpReason.trim()}
+
+${prBody}`;
+  }
   return { prTitle, prBody };
 }
 
@@ -10031,14 +10070,17 @@ var GithubStep = class extends BaseStep {
           this.logger.debug(`Pushed ${tagName} tag for generation tracking`);
           result.generationBaseTagSha = generationBaseSha;
         } catch (error) {
-          this.logger.debug(
-            `Could not push generation tag: ${error instanceof Error ? error.message : String(error)}`
-          );
+          this.logger.debug(`Could not push generation tag: ${extractErrorMessage(error)}`);
         }
       }
     }
     const finalCommitMessage = this.config.commitMessage ?? "SDK Generation";
-    const { prTitle, prBody } = parseCommitMessageForPR(finalCommitMessage);
+    const { prTitle, prBody } = parseCommitMessageForPR(
+      finalCommitMessage,
+      this.config.changelogEntry,
+      this.config.prDescription,
+      this.config.versionBumpReason
+    );
     const replaySection = formatReplayPrBody(replayResult, { branchName: prBranch, repoUri: this.config.uri });
     const enrichedBody = replaySection != null ? prBody + "\n\n---\n\n" + replaySection : prBody;
     if (isUpdatingExistingPR && existingPR != null) {
@@ -10055,9 +10097,7 @@ var GithubStep = class extends BaseStep {
         });
         this.logger.debug(`Updated PR #${existingPR.number} title and body`);
       } catch (error) {
-        this.logger.debug(
-          `Failed to update PR title/body: ${error instanceof Error ? error.message : String(error)}`
-        );
+        this.logger.debug(`Failed to update PR title/body: ${extractErrorMessage(error)}`);
       }
     } else {
       const head = `${owner}:${prBranch}`;
@@ -10074,7 +10114,7 @@ var GithubStep = class extends BaseStep {
         result.prUrl = pullRequest.html_url;
         result.prNumber = pullRequest.number;
       } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
+        const message = extractErrorMessage(error);
         if (message.includes("A pull request already exists for")) {
           this.logger.warn(`A pull request already exists for ${head}`);
         } else {
@@ -10440,7 +10480,7 @@ var PostGenerationPipeline = class {
       } catch (error) {
         result.success = false;
         result.errors = result.errors ?? [];
-        const errorMessage = error instanceof Error ? error.message : String(error);
+        const errorMessage = extractErrorMessage(error);
         result.errors.push(`${step.name} step error: ${errorMessage}`);
       }
     }

package/dist/cli.js

@@ -7678,7 +7678,7 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/simple-git@3.30.0/node_modules/simple-git/dist/esm/index.js
+// ../../node_modules/.pnpm/simple-git@3.33.0/node_modules/simple-git/dist/esm/index.js
 function pathspec(...paths) {
   const key = new String(paths);
   cache.set(key, paths);
@@ -8778,15 +8778,15 @@ function parser3(indexX, indexY, handler2) {
   return [`${indexX}${indexY}`, handler2];
 }
 function conflicts(indexX, ...indexY) {
-  return indexY.map((y) => parser3(indexX, y, (result, file) => append(result.conflicted, file)));
+  return indexY.map((y) => parser3(indexX, y, (result, file) => result.conflicted.push(file)));
 }
 function splitLine(result, lineStr) {
   const trimmed2 = lineStr.trim();
   switch (" ") {
     case trimmed2.charAt(2):
-      return data(trimmed2.charAt(0), trimmed2.charAt(1), trimmed2.substr(3));
+      return data(trimmed2.charAt(0), trimmed2.charAt(1), trimmed2.slice(3));
     case trimmed2.charAt(1):
-      return data(" ", trimmed2.charAt(0), trimmed2.substr(2));
+      return data(" ", trimmed2.charAt(0), trimmed2.slice(2));
     default:
       return;
   }
@@ -8863,6 +8863,28 @@ function versionParser(stdOut) {
   }
   return parseStringResponse(versionResponse(0, 0, 0, stdOut), parsers7, stdOut);
 }
+function createCloneTask(api, task, repoPath, ...args) {
+  if (!filterString(repoPath)) {
+    return configurationErrorTask(`git.${api}() requires a string 'repoPath'`);
+  }
+  return task(repoPath, filterType(args[0], filterString), getTrailingOptions(arguments));
+}
+function clone_default() {
+  return {
+    clone(repo, ...rest) {
+      return this._runTask(
+        createCloneTask("clone", cloneTask, filterType(repo, filterString), ...rest),
+        trailingFunctionArgument(arguments)
+      );
+    },
+    mirror(repo, ...rest) {
+      return this._runTask(
+        createCloneTask("mirror", cloneMirrorTask, filterType(repo, filterString), ...rest),
+        trailingFunctionArgument(arguments)
+      );
+    }
+  };
+}
 function applyPatchTask(patches, customArgs) {
   return straightThroughStringTask(["apply", ...customArgs, ...patches]);
 }
@@ -8972,23 +8994,6 @@ function checkIgnoreTask(paths) {
     parser: parseCheckIgnore
   };
 }
-function disallowedCommand(command) {
-  return /^--upload-pack(=|$)/.test(command);
-}
-function cloneTask(repo, directory, customArgs) {
-  const commands = ["clone", ...customArgs];
-  filterString(repo) && commands.push(repo);
-  filterString(directory) && commands.push(directory);
-  const banned = commands.find(disallowedCommand);
-  if (banned) {
-    return configurationErrorTask(`git.fetch: potential exploit argument blocked.`);
-  }
-  return straightThroughStringTask(commands);
-}
-function cloneMirrorTask(repo, directory, customArgs) {
-  append(customArgs, "--mirror");
-  return cloneTask(repo, directory, customArgs);
-}
 function parseFetchResult(stdOut, stdErr) {
   const result = {
     raw: stdOut,
@@ -9000,7 +9005,7 @@ function parseFetchResult(stdOut, stdErr) {
   };
   return parseStringResponse(result, parsers10, [stdOut, stdErr]);
 }
-function disallowedCommand2(command) {
+function disallowedCommand(command) {
   return /^--upload-pack(=|$)/.test(command);
 }
 function fetchTask(remote, branch, customArgs) {
@@ -9008,7 +9013,7 @@ function fetchTask(remote, branch, customArgs) {
   if (remote && branch) {
     commands.push(remote, branch);
   }
-  const banned = commands.find(disallowedCommand2);
+  const banned = commands.find(disallowedCommand);
   if (banned) {
     return configurationErrorTask(`git.fetch: potential exploit argument blocked.`);
   }
@@ -9210,18 +9215,24 @@ function abortPlugin(signal) {
 function isConfigSwitch(arg) {
   return typeof arg === "string" && arg.trim().toLowerCase() === "-c";
 }
-function preventProtocolOverride(arg, next) {
-  if (!isConfigSwitch(arg)) {
-    return;
-  }
-  if (!/^\s*protocol(.[a-z]+)?.allow/.test(next)) {
-    return;
+function isCloneUploadPackSwitch(char, arg) {
+  if (typeof arg !== "string" || !arg.includes(char)) {
+    return false;
   }
-  throw new GitPluginError(
-    void 0,
-    "unsafe",
-    "Configuring protocol.allow is not permitted without enabling allowUnsafeExtProtocol"
-  );
+  const cleaned = arg.trim().replace(/\0/g, "");
+  return /^(--no)?-{1,2}[\dlsqvnobucj]+(\s|$)/.test(cleaned);
+}
+function preventConfigBuilder(config, setting, message = String(config)) {
+  const regex = typeof config === "string" ? new RegExp(`\\s*${config}`, "i") : config;
+  return function preventCommand(options, arg, next) {
+    if (options[setting] !== true && isConfigSwitch(arg) && regex.test(next)) {
+      throw new GitPluginError(
+        void 0,
+        "unsafe",
+        `Configuring ${message} is not permitted without enabling ${setting}`
+      );
+    }
+  };
 }
 function preventUploadPack(arg, method) {
   if (/^\s*--(upload|receive)-pack/.test(arg)) {
@@ -9231,7 +9242,7 @@ function preventUploadPack(arg, method) {
       `Use of --upload-pack or --receive-pack is not permitted without enabling allowUnsafePack`
     );
   }
-  if (method === "clone" && /^\s*-u\b/.test(arg)) {
+  if (method === "clone" && isCloneUploadPackSwitch("u", arg)) {
     throw new GitPluginError(
       void 0,
       "unsafe",
@@ -9247,16 +9258,16 @@ function preventUploadPack(arg, method) {
   }
 }
 function blockUnsafeOperationsPlugin({
-  allowUnsafeProtocolOverride = false,
-  allowUnsafePack = false
+  allowUnsafePack = false,
+  ...options
 } = {}) {
   return {
     type: "spawn.args",
     action(args, context) {
       args.forEach((current, index) => {
         const next = index < args.length ? args[index + 1] : "";
-        allowUnsafeProtocolOverride || preventProtocolOverride(current, next);
         allowUnsafePack || preventUploadPack(current, context.method);
+        preventUnsafeConfig.forEach((helper) => helper(options, current, next));
       });
       return args;
     }
@@ -9334,7 +9345,7 @@ function completionDetectionPlugin({
   };
 }
 function isBadArgument(arg) {
-  return !arg || !/^([a-z]:)?([a-z0-9/.\\_-]+)$/i.test(arg);
+  return !arg || !/^([a-z]:)?([a-z0-9/.\\_~-]+)$/i.test(arg);
 }
 function toBinaryConfig(input, allowUnsafe) {
   if (input.length < 1 || input.length > 2) {
@@ -9522,20 +9533,20 @@ function gitInstanceFactory(baseDir, options) {
     plugins.add(commandConfigPrefixingPlugin(config.config));
   }
   plugins.add(blockUnsafeOperationsPlugin(config.unsafe));
-  plugins.add(suffixPathsPlugin());
   plugins.add(completionDetectionPlugin(config.completion));
   config.abort && plugins.add(abortPlugin(config.abort));
   config.progress && plugins.add(progressMonitorPlugin(config.progress));
   config.timeout && plugins.add(timeoutPlugin(config.timeout));
   config.spawnOptions && plugins.add(spawnOptionsPlugin(config.spawnOptions));
+  plugins.add(suffixPathsPlugin());
   plugins.add(errorDetectionPlugin(errorDetectionHandler(true)));
   config.errors && plugins.add(errorDetectionPlugin(config.errors));
   customBinaryPlugin(plugins, config.binary, config.unsafe?.allowUnsafeCustomBinary);
   return new Git(config, plugins);
 }
-var import_node_buffer, import_file_exists, import_debug, import_child_process, import_promise_deferred, import_node_path, import_promise_deferred2, import_node_events, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __hasOwnProp2, __esm2, __commonJS2, __export2, __copyProps2, __toCommonJS, cache, init_pathspec, GitError, init_git_error, GitResponseError, init_git_response_error, TaskConfigurationError, init_task_configuration_error, NULL, NOOP, objectToString, init_util, filterArray, filterNumber, filterString, filterStringOrStringArray, filterHasLength, init_argument_filters, ExitCodes, init_exit_codes, GitOutputStreams, init_git_output_streams, LineParser, RemoteLineParser, init_line_parser, defaultOptions, init_simple_git_options, init_task_options, init_task_parser, utils_exports, init_utils, check_is_repo_exports, CheckRepoActions, onError, parser2, init_check_is_repo, CleanResponse, removalRegexp, dryRunRemovalRegexp, isFolderRegexp, init_CleanSummary, task_exports, EMPTY_COMMANDS, init_task, clean_exports, CONFIG_ERROR_INTERACTIVE_MODE, CONFIG_ERROR_MODE_REQUIRED, CONFIG_ERROR_UNKNOWN_OPTION, CleanOptions, CleanOptionValues, init_clean, ConfigList, init_ConfigList, GitConfigScope, init_config, DiffNameStatus, diffNameStatus, init_diff_name_status, disallowedOptions, Query, _a3, GrepQuery, init_grep, reset_exports, ResetMode, validResetModes, init_reset, init_git_logger, TasksPendingQueue, init_tasks_pending_queue, GitExecutorChain, init_git_executor_chain, git_executor_exports, GitExecutor, init_git_executor, init_task_callback, init_change_working_directory, init_checkout, parser22, init_count_objects, parsers, init_parse_commit, init_commit, init_first_commit, init_hash_object, InitSummary, initResponseRegex, reInitResponseRegex, init_InitSummary, bareCommand, init_init, logFormatRegex, init_log_format, DiffSummary, init_DiffSummary, statParser, numStatParser, nameOnlyParser, nameStatusParser, diffSummaryParsers, init_parse_diff_summary, START_BOUNDARY, COMMIT_BOUNDARY, SPLITTER, defaultFieldNames, init_parse_list_log_summary, diff_exports, init_diff, excludeOptions, init_log, MergeSummaryConflict, MergeSummaryDetail, init_MergeSummary, PullSummary, PullFailedSummary, init_PullSummary, remoteMessagesObjectParsers, init_parse_remote_objects, parsers2, RemoteMessageSummary, init_parse_remote_messages, FILE_UPDATE_REGEX, SUMMARY_REGEX, ACTION_REGEX, parsers3, errorParsers, parsePullDetail, parsePullResult, init_parse_pull, parsers4, parseMergeResult, parseMergeDetail, init_parse_merge, init_merge, parsers5, parsePushResult, parsePushDetail, init_parse_push, push_exports, init_push, init_show, fromPathRegex, FileStatusSummary, init_FileStatusSummary, StatusSummary, parsers6, parseStatusSummary, init_StatusSummary, ignoredOptions, init_status, NOT_INSTALLED, parsers7, init_version, simple_git_api_exports, SimpleGitApi, init_simple_git_api, scheduler_exports, createScheduledTask, Scheduler, init_scheduler, apply_patch_exports, init_apply_patch, BranchDeletionBatch, init_BranchDeleteSummary, deleteSuccessRegex, deleteErrorRegex, parsers8, parseBranchDeletions, init_parse_branch_delete, BranchSummaryResult, init_BranchSummary, parsers9, currentBranchParser, init_parse_branch, branch_exports, init_branch, parseCheckIgnore, init_CheckIgnore, check_ignore_exports, init_check_ignore, clone_exports, init_clone, parsers10, init_parse_fetch, fetch_exports, init_fetch, parsers11, init_parse_move, move_exports, init_move, pull_exports, init_pull, init_GetRemoteSummary, remote_exports, init_remote, stash_list_exports, init_stash_list, sub_module_exports, init_sub_module, TagList, parseTagList, init_TagList, tag_exports, init_tag, require_git, GitConstructError, GitPluginError, never, WRONG_NUMBER_ERR, WRONG_CHARS_ERR, PluginStore, Git, simpleGit;
+var import_node_buffer, import_file_exists, import_debug, import_child_process, import_promise_deferred, import_node_path, import_promise_deferred2, import_node_events, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __hasOwnProp2, __esm2, __commonJS2, __export2, __copyProps2, __toCommonJS, cache, init_pathspec, GitError, init_git_error, GitResponseError, init_git_response_error, TaskConfigurationError, init_task_configuration_error, NULL, NOOP, objectToString, init_util, filterArray, filterNumber, filterString, filterStringOrStringArray, filterHasLength, init_argument_filters, ExitCodes, init_exit_codes, GitOutputStreams, init_git_output_streams, LineParser, RemoteLineParser, init_line_parser, defaultOptions, init_simple_git_options, init_task_options, init_task_parser, utils_exports, init_utils, check_is_repo_exports, CheckRepoActions, onError, parser2, init_check_is_repo, CleanResponse, removalRegexp, dryRunRemovalRegexp, isFolderRegexp, init_CleanSummary, task_exports, EMPTY_COMMANDS, init_task, clean_exports, CONFIG_ERROR_INTERACTIVE_MODE, CONFIG_ERROR_MODE_REQUIRED, CONFIG_ERROR_UNKNOWN_OPTION, CleanOptions, CleanOptionValues, init_clean, ConfigList, init_ConfigList, GitConfigScope, init_config, DiffNameStatus, diffNameStatus, init_diff_name_status, disallowedOptions, Query, _a3, GrepQuery, init_grep, reset_exports, ResetMode, validResetModes, init_reset, init_git_logger, TasksPendingQueue, init_tasks_pending_queue, GitExecutorChain, init_git_executor_chain, git_executor_exports, GitExecutor, init_git_executor, init_task_callback, init_change_working_directory, init_checkout, parser22, init_count_objects, parsers, init_parse_commit, init_commit, init_first_commit, init_hash_object, InitSummary, initResponseRegex, reInitResponseRegex, init_InitSummary, bareCommand, init_init, logFormatRegex, init_log_format, DiffSummary, init_DiffSummary, statParser, numStatParser, nameOnlyParser, nameStatusParser, diffSummaryParsers, init_parse_diff_summary, START_BOUNDARY, COMMIT_BOUNDARY, SPLITTER, defaultFieldNames, init_parse_list_log_summary, diff_exports, init_diff, excludeOptions, init_log, MergeSummaryConflict, MergeSummaryDetail, init_MergeSummary, PullSummary, PullFailedSummary, init_PullSummary, remoteMessagesObjectParsers, init_parse_remote_objects, parsers2, RemoteMessageSummary, init_parse_remote_messages, FILE_UPDATE_REGEX, SUMMARY_REGEX, ACTION_REGEX, parsers3, errorParsers, parsePullDetail, parsePullResult, init_parse_pull, parsers4, parseMergeResult, parseMergeDetail, init_parse_merge, init_merge, parsers5, parsePushResult, parsePushDetail, init_parse_push, push_exports, init_push, init_show, fromPathRegex, FileStatusSummary, init_FileStatusSummary, StatusSummary, parsers6, parseStatusSummary, init_StatusSummary, ignoredOptions, init_status, NOT_INSTALLED, parsers7, init_version, cloneTask, cloneMirrorTask, init_clone, simple_git_api_exports, SimpleGitApi, init_simple_git_api, scheduler_exports, createScheduledTask, Scheduler, init_scheduler, apply_patch_exports, init_apply_patch, BranchDeletionBatch, init_BranchDeleteSummary, deleteSuccessRegex, deleteErrorRegex, parsers8, parseBranchDeletions, init_parse_branch_delete, BranchSummaryResult, init_BranchSummary, parsers9, currentBranchParser, init_parse_branch, branch_exports, init_branch, parseCheckIgnore, init_CheckIgnore, check_ignore_exports, init_check_ignore, parsers10, init_parse_fetch, fetch_exports, init_fetch, parsers11, init_parse_move, move_exports, init_move, pull_exports, init_pull, init_GetRemoteSummary, remote_exports, init_remote, stash_list_exports, init_stash_list, sub_module_exports, init_sub_module, TagList, parseTagList, init_TagList, tag_exports, init_tag, require_git, GitConstructError, GitPluginError, preventUnsafeConfig, never, WRONG_NUMBER_ERR, WRONG_CHARS_ERR, PluginStore, Git, simpleGit;
 var init_esm4 = __esm({
-  "../../node_modules/.pnpm/simple-git@3.30.0/node_modules/simple-git/dist/esm/index.js"() {
+  "../../node_modules/.pnpm/simple-git@3.33.0/node_modules/simple-git/dist/esm/index.js"() {
     "use strict";
     import_node_buffer = require("buffer");
     import_file_exists = __toESM(require_dist(), 1);
@@ -9631,7 +9642,7 @@ var init_esm4 = __esm({
           return typeof input === "number";
         };
         filterString = (input) => {
-          return typeof input === "string";
+          return typeof input === "string" || isPathSpec(input);
         };
         filterStringOrStringArray = (input) => {
           return filterString(input) || Array.isArray(input) && input.every(filterString);
@@ -11010,58 +11021,54 @@ var init_esm4 = __esm({
           parser3(
             " ",
             "A",
-            (result, file) => append(result.created, file)
-          ),
-          parser3(
-            " ",
-            "D",
-            (result, file) => append(result.deleted, file)
-          ),
-          parser3(
-            " ",
-            "M",
-            (result, file) => append(result.modified, file)
+            (result, file) => result.created.push(file)
           ),
           parser3(
-            "A",
             " ",
-            (result, file) => append(result.created, file) && append(result.staged, file)
-          ),
-          parser3(
-            "A",
-            "M",
-            (result, file) => append(result.created, file) && append(result.staged, file) && append(result.modified, file)
-          ),
-          parser3(
             "D",
-            " ",
-            (result, file) => append(result.deleted, file) && append(result.staged, file)
+            (result, file) => result.deleted.push(file)
           ),
           parser3(
-            "M",
             " ",
-            (result, file) => append(result.modified, file) && append(result.staged, file)
-          ),
-          parser3(
-            "M",
             "M",
-            (result, file) => append(result.modified, file) && append(result.staged, file)
+            (result, file) => result.modified.push(file)
           ),
+          parser3("A", " ", (result, file) => {
+            result.created.push(file);
+            result.staged.push(file);
+          }),
+          parser3("A", "M", (result, file) => {
+            result.created.push(file);
+            result.staged.push(file);
+            result.modified.push(file);
+          }),
+          parser3("D", " ", (result, file) => {
+            result.deleted.push(file);
+            result.staged.push(file);
+          }),
+          parser3("M", " ", (result, file) => {
+            result.modified.push(file);
+            result.staged.push(file);
+          }),
+          parser3("M", "M", (result, file) => {
+            result.modified.push(file);
+            result.staged.push(file);
+          }),
           parser3("R", " ", (result, file) => {
-            append(result.renamed, renamedFile(file));
+            result.renamed.push(renamedFile(file));
           }),
           parser3("R", "M", (result, file) => {
             const renamed = renamedFile(file);
-            append(result.renamed, renamed);
-            append(result.modified, renamed.to);
+            result.renamed.push(renamed);
+            result.modified.push(renamed.to);
           }),
           parser3("!", "!", (_result, _file) => {
-            append(_result.ignored = _result.ignored || [], _file);
+            (_result.ignored = _result.ignored || []).push(_file);
           }),
           parser3(
             "?",
             "?",
-            (result, file) => append(result.not_added, file)
+            (result, file) => result.not_added.push(file)
           ),
           ...conflicts(
             "A",
@@ -11154,6 +11161,24 @@ var init_esm4 = __esm({
         ];
       }
     });
+    init_clone = __esm2({
+      "src/lib/tasks/clone.ts"() {
+        "use strict";
+        init_task();
+        init_utils();
+        init_pathspec();
+        cloneTask = (repo, directory, customArgs) => {
+          const commands = ["clone", ...customArgs];
+          filterString(repo) && commands.push(pathspec(repo));
+          filterString(directory) && commands.push(pathspec(directory));
+          return straightThroughStringTask(commands);
+        };
+        cloneMirrorTask = (repo, directory, customArgs) => {
+          append(customArgs, "--mirror");
+          return cloneTask(repo, directory, customArgs);
+        };
+      }
+    });
     simple_git_api_exports = {};
     __export2(simple_git_api_exports, {
       SimpleGitApi: () => SimpleGitApi
@@ -11179,6 +11204,7 @@ var init_esm4 = __esm({
         init_task();
         init_version();
         init_utils();
+        init_clone();
         SimpleGitApi = class {
           constructor(_executor) {
             this._executor = _executor;
@@ -11281,6 +11307,7 @@ var init_esm4 = __esm({
         Object.assign(
           SimpleGitApi.prototype,
           checkout_default(),
+          clone_default(),
           commit_default(),
           config_default(),
           count_objects_default(),
@@ -11484,18 +11511,6 @@ var init_esm4 = __esm({
         init_CheckIgnore();
       }
     });
-    clone_exports = {};
-    __export2(clone_exports, {
-      cloneMirrorTask: () => cloneMirrorTask,
-      cloneTask: () => cloneTask
-    });
-    init_clone = __esm2({
-      "src/lib/tasks/clone.ts"() {
-        "use strict";
-        init_task();
-        init_utils();
-      }
-    });
     init_parse_fetch = __esm2({
       "src/lib/parsers/parse-fetch.ts"() {
         "use strict";
@@ -11677,7 +11692,7 @@ var init_esm4 = __esm({
         var { GitExecutor: GitExecutor2 } = (init_git_executor(), __toCommonJS(git_executor_exports));
         var { SimpleGitApi: SimpleGitApi2 } = (init_simple_git_api(), __toCommonJS(simple_git_api_exports));
         var { Scheduler: Scheduler2 } = (init_scheduler(), __toCommonJS(scheduler_exports));
-        var { configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS(task_exports));
+        var { adhocExecTask: adhocExecTask2, configurationErrorTask: configurationErrorTask2 } = (init_task(), __toCommonJS(task_exports));
         var {
           asArray: asArray2,
           filterArray: filterArray2,
@@ -11698,7 +11713,6 @@ var init_esm4 = __esm({
         } = (init_branch(), __toCommonJS(branch_exports));
         var { checkIgnoreTask: checkIgnoreTask2 } = (init_check_ignore(), __toCommonJS(check_ignore_exports));
         var { checkIsRepoTask: checkIsRepoTask2 } = (init_check_is_repo(), __toCommonJS(check_is_repo_exports));
-        var { cloneTask: cloneTask2, cloneMirrorTask: cloneMirrorTask2 } = (init_clone(), __toCommonJS(clone_exports));
         var { cleanWithOptionsTask: cleanWithOptionsTask2, isCleanOptionsArray: isCleanOptionsArray2 } = (init_clean(), __toCommonJS(clean_exports));
         var { diffSummaryTask: diffSummaryTask2 } = (init_diff(), __toCommonJS(diff_exports));
         var { fetchTask: fetchTask2 } = (init_fetch(), __toCommonJS(fetch_exports));
@@ -11753,24 +11767,6 @@ var init_esm4 = __esm({
             trailingFunctionArgument2(arguments)
           );
         };
-        function createCloneTask(api, task, repoPath, localPath) {
-          if (typeof repoPath !== "string") {
-            return configurationErrorTask2(`git.${api}() requires a string 'repoPath'`);
-          }
-          return task(repoPath, filterType2(localPath, filterString2), getTrailingOptions2(arguments));
-        }
-        Git2.prototype.clone = function() {
-          return this._runTask(
-            createCloneTask("clone", cloneTask2, ...arguments),
-            trailingFunctionArgument2(arguments)
-          );
-        };
-        Git2.prototype.mirror = function() {
-          return this._runTask(
-            createCloneTask("mirror", cloneMirrorTask2, ...arguments),
-            trailingFunctionArgument2(arguments)
-          );
-        };
         Git2.prototype.mv = function(from, to) {
           return this._runTask(moveTask2(from, to), trailingFunctionArgument2(arguments));
         };
@@ -11803,10 +11799,13 @@ var init_esm4 = __esm({
           );
         };
         Git2.prototype.silent = function(silence) {
-          console.warn(
-            "simple-git deprecation notice: git.silent: logging should be configured using the `debug` library / `DEBUG` environment variable, this will be an error in version 3"
+          return this._runTask(
+            adhocExecTask2(
+              () => console.warn(
+                "simple-git deprecation notice: git.silent: logging should be configured using the `debug` library / `DEBUG` environment variable, this method will be removed."
+              )
+            )
           );
-          return this;
         };
         Git2.prototype.tags = function(options, then) {
           return this._runTask(
@@ -12032,7 +12031,13 @@ var init_esm4 = __esm({
           return this._runTask(task);
         };
         Git2.prototype.clearQueue = function() {
-          return this;
+          return this._runTask(
+            adhocExecTask2(
+              () => console.warn(
+                "simple-git deprecation notice: clearQueue() is deprecated and will be removed, switch to using the abortPlugin instead."
+              )
+            )
+          );
         };
         Git2.prototype.checkIgnore = function(pathnames, then) {
           return this._runTask(
@@ -12075,6 +12080,17 @@ var init_esm4 = __esm({
     init_diff_name_status();
     init_grep();
     init_reset();
+    preventUnsafeConfig = [
+      preventConfigBuilder(
+        /^\s*protocol(.[a-z]+)?.allow/i,
+        "allowUnsafeProtocolOverride",
+        "protocol.allow"
+      ),
+      preventConfigBuilder("core.sshCommand", "allowUnsafeSshCommand"),
+      preventConfigBuilder("core.gitProxy", "allowUnsafeGitProxy"),
+      preventConfigBuilder("core.hooksPath", "allowUnsafeHooksPath"),
+      preventConfigBuilder("diff.external", "allowUnsafeDiffExternal")
+    ];
     init_utils();
     init_utils();
     never = (0, import_promise_deferred2.deferred)().promise;
@@ -21688,6 +21704,21 @@ CLI Version: ${options.cliVersion}`;
   }
 });
 
+// ../commons/core-utils/lib/extractErrorMessage.js
+function extractErrorMessage(e) {
+  if (typeof e === "string") {
+    return e.length > 0 ? e : "Unknown error";
+  }
+  if (e instanceof Error) {
+    return e.message.length > 0 ? e.message : "Unknown error";
+  }
+  if (typeof e === "object" && e !== null && "message" in e && typeof e["message"] === "string") {
+    return e["message"].length > 0 ? e["message"] : "Unknown error";
+  }
+  const stringified = String(e);
+  return stringified.length > 0 ? stringified : "Unknown error";
+}
+
 // ../commons/path-utils/lib/convertToOsPath.js
 function convertToOsPath(path5) {
   return path5.replace(/\\/g, "/");
@@ -23638,7 +23669,7 @@ function parseRepository(githubRepository) {
   } else if (parts.length === 3 && parts[0] != null && parts[1] != null && parts[2] != null) {
     [remote, owner, repo] = parts;
   } else {
-    throw new Error(`Failed to parse GitHub repostiory ${githubRepository}`);
+    throw new Error(`Failed to parse GitHub repository ${githubRepository}`);
   }
   return newRepositoryReference({ remote, owner, repo });
 }
@@ -23719,7 +23750,7 @@ async function cloneRepository({ githubRepository, installationToken, targetDire
     await git.clone(cloneUrl, ".");
   } catch (error) {
     const elapsed = Date.now() - startTime;
-    const errorMessage = error instanceof Error ? error.message : String(error);
+    const errorMessage = extractErrorMessage(error);
     if (errorMessage.includes("ENOENT") || errorMessage.includes("spawn git")) {
       const diagnostics = getGitDiagnostics();
       throw new Error(`Failed to clone repository: git command not found. Self-hosted GitHub mode requires git to be installed on the host machine where the Fern CLI runs. URL: ${sanitizedUrl}. Elapsed: ${elapsed}ms. Debug info: ${diagnostics}. Original error: ${errorMessage}`);
@@ -30687,7 +30718,7 @@ var ReadmeGenerator = class {
     await writer.writeLine();
     await writer.writeLine("```groovy");
     await writer.writeLine("dependencies {");
-    await writer.writeLine(`  implementation '${maven.group}:${maven.artifact}'`);
+    await writer.writeLine(`  implementation '${maven.group}:${maven.artifact}:${maven.version}'`);
     await writer.writeLine("}");
     await writer.writeLine("```");
     await writer.writeLine();
@@ -31334,7 +31365,7 @@ async function findExistingUpdatablePR(octokit, owner, repo, baseBranch, logger)
     }
     return void 0;
   } catch (error) {
-    logger.debug(`Error finding existing PRs: ${error instanceof Error ? error.message : String(error)}`);
+    logger.debug(`Error finding existing PRs: ${extractErrorMessage(error)}`);
     return void 0;
   }
 }
@@ -31361,16 +31392,22 @@ async function checkPRHasOnlyGenerationCommits(octokit, owner, repo, pullNumber,
     }
     return true;
   } catch (error) {
-    logger.debug(`Error checking PR commits: ${error instanceof Error ? error.message : String(error)}`);
+    logger.debug(`Error checking PR commits: ${extractErrorMessage(error)}`);
     return false;
   }
 }
 
 // src/pipeline/github/parseCommitMessage.ts
-function parseCommitMessageForPR(commitMessage) {
+function parseCommitMessageForPR(commitMessage, changelogEntry, prDescription, versionBumpReason) {
   const lines = commitMessage.split("\n");
   const prTitle = lines[0]?.trim() || "SDK Generation";
-  const prBody = lines.slice(1).join("\n").trim() || "Automated SDK generation by Fern";
+  const bodyFromCommit = lines.slice(1).join("\n").trim() || "Automated SDK generation by Fern";
+  let prBody = prDescription?.trim() || changelogEntry?.trim() || bodyFromCommit;
+  if (versionBumpReason?.trim()) {
+    prBody = `**Version Bump:** ${versionBumpReason.trim()}
+
+${prBody}`;
+  }
   return { prTitle, prBody };
 }
 
@@ -31594,14 +31631,17 @@ var GithubStep = class extends BaseStep {
           this.logger.debug(`Pushed ${tagName} tag for generation tracking`);
           result.generationBaseTagSha = generationBaseSha;
         } catch (error) {
-          this.logger.debug(
-            `Could not push generation tag: ${error instanceof Error ? error.message : String(error)}`
-          );
+          this.logger.debug(`Could not push generation tag: ${extractErrorMessage(error)}`);
         }
       }
     }
     const finalCommitMessage = this.config.commitMessage ?? "SDK Generation";
-    const { prTitle, prBody } = parseCommitMessageForPR(finalCommitMessage);
+    const { prTitle, prBody } = parseCommitMessageForPR(
+      finalCommitMessage,
+      this.config.changelogEntry,
+      this.config.prDescription,
+      this.config.versionBumpReason
+    );
     const replaySection = formatReplayPrBody(replayResult, { branchName: prBranch, repoUri: this.config.uri });
     const enrichedBody = replaySection != null ? prBody + "\n\n---\n\n" + replaySection : prBody;
     if (isUpdatingExistingPR && existingPR != null) {
@@ -31618,9 +31658,7 @@ var GithubStep = class extends BaseStep {
         });
         this.logger.debug(`Updated PR #${existingPR.number} title and body`);
       } catch (error) {
-        this.logger.debug(
-          `Failed to update PR title/body: ${error instanceof Error ? error.message : String(error)}`
-        );
+        this.logger.debug(`Failed to update PR title/body: ${extractErrorMessage(error)}`);
       }
     } else {
       const head = `${owner}:${prBranch}`;
@@ -31637,7 +31675,7 @@ var GithubStep = class extends BaseStep {
         result.prUrl = pullRequest.html_url;
         result.prNumber = pullRequest.number;
       } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
+        const message = extractErrorMessage(error);
         if (message.includes("A pull request already exists for")) {
           this.logger.warn(`A pull request already exists for ${head}`);
         } else {
@@ -32003,7 +32041,7 @@ var PostGenerationPipeline = class {
       } catch (error) {
         result.success = false;
         result.errors = result.errors ?? [];
-        const errorMessage = error instanceof Error ? error.message : String(error);
+        const errorMessage = extractErrorMessage(error);
         result.errors.push(`${step.name} step error: ${errorMessage}`);
       }
     }
@@ -32383,7 +32421,7 @@ void yargs_default(hideBin(process.argv)).scriptName(process.env.CLI_NAME ?? "ge
         try {
           config = JSON.parse(configContent);
         } catch (parseError) {
-          const parseMessage = parseError instanceof Error ? parseError.message : String(parseError);
+          const parseMessage = extractErrorMessage(parseError);
           throw new Error(`Failed to parse pipeline config as JSON: ${parseMessage}`);
         }
         config.outputDir = resolve(wd, argv["output-dir"]);
@@ -32417,7 +32455,7 @@ ${result.errors.map((e) => `  - ${e}`).join("\n")}
         process.stdout.write(JSON.stringify(result) + "\n");
         process.exitCode = result.success ? 0 : 1;
       } catch (error) {
-        const errorMessage = error instanceof Error ? error.message : String(error);
+        const errorMessage = extractErrorMessage(error);
         process.stderr.write(`Pipeline failed: ${errorMessage}
 `);
         process.exitCode = 1;
@@ -32496,7 +32534,7 @@ ${result.errors.map((e) => `  - ${e}`).join("\n")}
           process.stdout.write(JSON.stringify(result, null, 2) + "\n");
           process.exit(0);
         } catch (error) {
-          const errorMessage = error instanceof Error ? error.message : String(error);
+          const errorMessage = extractErrorMessage(error);
           process.stderr.write(`Replay init failed: ${errorMessage}
 `);
           process.exit(1);
@@ -32578,7 +32616,7 @@ Bootstrap complete! Lockfile saved to ${outputDir}/.fern/replay.lock
           }
           process.exit(0);
         } catch (error) {
-          const errorMessage = error instanceof Error ? error.message : String(error);
+          const errorMessage = extractErrorMessage(error);
           process.stderr.write(`Bootstrap failed: ${errorMessage}
 `);
           process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fern-api/generator-cli",
-  "version": "0.6.11",
+  "version": "0.6.14",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fern-api/fern.git",