@grunnverk/commands-tree 1.5.1 → 1.5.3

package/dist/index.js

@@ -1,5 +1,5 @@
 import { getLogger, getDryRunLogger, toAIConfig, createLoggerAdapter, createStorageAdapter, isInGitRepository, runGitWithLock, getOutputPath, DEFAULT_OUTPUT_DIRECTORY } from '@grunnverk/core';
-import { safeJsonParse, validatePackageJson, run, runSecure, getGloballyLinkedPackages, getGitStatusSummary, getLinkedDependencies, getLinkCompatibilityProblems } from '@grunnverk/git-tools';
+import { safeJsonParse, validatePackageJson, run, runSecure, getGloballyLinkedPackages, getGitStatusSummary, getLinkedDependencies, getLinkCompatibilityProblems, escapeShellArg } from '@grunnverk/git-tools';
 import * as Commit from '@grunnverk/commands-git';
 import { findAllPackageJsonFiles, PerformanceTimer, optimizePrecommitCommand, recordTestRun } from '@grunnverk/commands-git';
 import { createStorage } from '@grunnverk/shared';
@@ -3943,7 +3943,7 @@ const execute$1 = async (runConfig)=>{
                     commandSpecificOptions += ` --context "${runConfig.commit.context}"`;
                 }
                 if (((_runConfig_commit12 = runConfig.commit) === null || _runConfig_commit12 === void 0 ? void 0 : _runConfig_commit12.contextFiles) && runConfig.commit.contextFiles.length > 0) {
-                    commandSpecificOptions += ` --context-files ${runConfig.commit.contextFiles.join(' ')}`;
+                    commandSpecificOptions += ` --context-files ${runConfig.commit.contextFiles.map((f)=>escapeShellArg(f)).join(' ')}`;
                 }
                 // Push option can be boolean or string (remote name)
                 if ((_runConfig_commit13 = runConfig.commit) === null || _runConfig_commit13 === void 0 ? void 0 : _runConfig_commit13.push) {
@@ -3989,7 +3989,7 @@ const execute$1 = async (runConfig)=>{
                     commandSpecificOptions += ` --context "${runConfig.release.context}"`;
                 }
                 if (((_runConfig_release7 = runConfig.release) === null || _runConfig_release7 === void 0 ? void 0 : _runConfig_release7.contextFiles) && runConfig.release.contextFiles.length > 0) {
-                    commandSpecificOptions += ` --context-files ${runConfig.release.contextFiles.join(' ')}`;
+                    commandSpecificOptions += ` --context-files ${runConfig.release.contextFiles.map((f)=>escapeShellArg(f)).join(' ')}`;
                 }
                 if ((_runConfig_release8 = runConfig.release) === null || _runConfig_release8 === void 0 ? void 0 : _runConfig_release8.messageLimit) {
                     commandSpecificOptions += ` --message-limit ${runConfig.release.messageLimit}`;
@@ -4037,7 +4037,7 @@ const execute$1 = async (runConfig)=>{
             }
             // Link/Unlink externals
             if ((builtInCommand === 'link' || builtInCommand === 'unlink') && ((_runConfig_tree36 = runConfig.tree) === null || _runConfig_tree36 === void 0 ? void 0 : _runConfig_tree36.externals) && runConfig.tree.externals.length > 0) {
-                commandSpecificOptions += ` --externals ${runConfig.tree.externals.join(' ')}`;
+                commandSpecificOptions += ` --externals ${runConfig.tree.externals.map((e)=>escapeShellArg(e)).join(' ')}`;
             }
             commandToRun = `kodrdriv ${builtInCommand}${optionsString}${packageArgString}${commandSpecificOptions}`;
             isBuiltInCommand = true;