@jayree/sfdx-plugin-manifest 5.0.85 → 5.0.87

package/CHANGELOG.md

@@ -1,3 +1,39 @@
+## [5.0.87](https://github.com/jayree/sfdx-plugin-manifest/compare/5.0.86...5.0.87) (2026-05-08)
+
+
+### Bug Fixes
+
+* **deps:** bump fast-uri from 3.1.0 to 3.1.2 ([#2227](https://github.com/jayree/sfdx-plugin-manifest/issues/2227)) ([91b72d2](https://github.com/jayree/sfdx-plugin-manifest/commit/91b72d2cdd355b77d579bf0037d7eaf192ea4842))
+  * Fix for https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6
+  * build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/148
+  * build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/149
+  * chore(.npmrc): ignore scripts by @Fdawgs in https://github.com/fastify/fast-uri/pull/150
+  * build(deps-dev): remove @fastify/pre-commit by @Fdawgs in https://github.com/fastify/fast-uri/pull/151
+  * build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/152
+  * ci(ci): add concurrency config by @Fdawgs in https://github.com/fastify/fast-uri/pull/153
+  * build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/154
+  * build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/156
+  * chore(license): standardise license notice by @Fdawgs in https://github.com/fastify/fast-uri/pull/159
+  * style: remove trailing whitespace by @Fdawgs in https://github.com/fastify/fast-uri/pull/161
+  * ci: remove unused github files by @Tony133 in https://github.com/fastify/fast-uri/pull/162
+  * chore: update readme by @Tony133 in https://github.com/fastify/fast-uri/pull/164
+  * build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-manager.yml from 5 to 6 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/165
+  * build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/166
+  * build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in https://github.com/fastify/fast-uri/pull/167
+  * ci: add lock-threads workflow by @Fdawgs in https://github.com/fastify/fast-uri/pull/169
+  * @Tony133 made their first contribution in https://github.com/fastify/fast-uri/pull/162
+  * Fix for https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc
+  * Handle malformed fragment decoding as a parse error by @mcollina in https://github.com/fastify/fast-uri/pull/171
+
+## [5.0.86](https://github.com/jayree/sfdx-plugin-manifest/compare/5.0.85...5.0.86) (2026-05-08)
+
+
+### Bug Fixes
+
+* **deps:** bump basic-ftp from 5.3.0 to 5.3.1 ([#2225](https://github.com/jayree/sfdx-plugin-manifest/issues/2225)) ([a75d4fa](https://github.com/jayree/sfdx-plugin-manifest/commit/a75d4fabd8e9dd2a0908649a87a16bd96f020144))
+  *   Fixed: Protect against unbounded control response, fixes [https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-rpmf-866q-6p89](https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-rpmf-866q-6p89).
+  *   Fixed: Protect against unbounded control response, fixes [https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-rpmf-866q-6p89](https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-rpmf-866q-6p89).
+
 ## [5.0.85](https://github.com/jayree/sfdx-plugin-manifest/compare/5.0.84...5.0.85) (2026-05-08)
 
 

package/README.md

@@ -112,7 +112,7 @@ EXAMPLES
   $ sf jayree manifest cleanup --manifest=package.xml --file=packageignore.xml
 ```
 
-_See code: [src/commands/jayree/manifest/cleanup.ts](https://github.com/jayree/sfdx-plugin-manifest/blob/5.0.85/src/commands/jayree/manifest/cleanup.ts)_
+_See code: [src/commands/jayree/manifest/cleanup.ts](https://github.com/jayree/sfdx-plugin-manifest/blob/5.0.87/src/commands/jayree/manifest/cleanup.ts)_
 
 ### `sf jayree manifest generate`
 
@@ -150,7 +150,7 @@ EXAMPLES
   <Package xmlns='http://soap.sforce.com/2006/04/metadata'>...</Package>
 ```
 
-_See code: [src/commands/jayree/manifest/generate.ts](https://github.com/jayree/sfdx-plugin-manifest/blob/5.0.85/src/commands/jayree/manifest/generate.ts)_
+_See code: [src/commands/jayree/manifest/generate.ts](https://github.com/jayree/sfdx-plugin-manifest/blob/5.0.87/src/commands/jayree/manifest/generate.ts)_
 
 ### `sf jayree manifest git diff REF1 [REF2]`
 
@@ -230,7 +230,7 @@ FLAG DESCRIPTIONS
     Use this flag to create a 'destructiveChanges.xml' and a blank 'package.xml'.
 ```
 
-_See code: [src/commands/jayree/manifest/git/diff.ts](https://github.com/jayree/sfdx-plugin-manifest/blob/5.0.85/src/commands/jayree/manifest/git/diff.ts)_
+_See code: [src/commands/jayree/manifest/git/diff.ts](https://github.com/jayree/sfdx-plugin-manifest/blob/5.0.87/src/commands/jayree/manifest/git/diff.ts)_
 <!-- commandsstop -->
 
 ## Performance Testing

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@jayree/sfdx-plugin-manifest",
-  "version": "5.0.85",
+  "version": "5.0.87",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@jayree/sfdx-plugin-manifest",
-      "version": "5.0.85",
+      "version": "5.0.87",
       "license": "Apache-2.0",
       "dependencies": {
         "@jayree/changelog": "^1.2.31",
@@ -9551,9 +9551,9 @@
       }
     },
     "node_modules/basic-ftp": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.3.0.tgz",
-      "integrity": "sha512-5K9eNNn7ywHPsYnFwjKgYH8Hf8B5emh7JKcPaVjjrMJFQQwGpwowEnZNEtHs7DfR7hCZsmaK3VA4HUK0YarT+w==",
+      "version": "5.3.1",
+      "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.3.1.tgz",
+      "integrity": "sha512-bopVNp6ugyA150DDuZfPFdt1KZ5a94ZDiwX4hMgZDzF+GttD80lEy8kj98kbyhLXnPvhtIo93mdnLIjpCAeeOw==",
       "license": "MIT",
       "engines": {
         "node": ">=10.0.0"
@@ -13332,9 +13332,9 @@
       }
     },
     "node_modules/fast-uri": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz",
-      "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==",
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
+      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
       "funding": [
         {
           "type": "github",

package/oclif.lock

@@ -3873,9 +3873,9 @@ baseline-browser-mapping@^2.9.0:
   integrity sha512-lIyg0szRfYbiy67j9KN8IyeD7q7hcmqnJ1ddWmNt19ItGpNN64mnllmxUNFIOdOm6by97jlL6wfpTTJrmnjWAA==
 
 basic-ftp@^5.0.2:
-  version "5.3.0"
-  resolved "https://registry.yarnpkg.com/basic-ftp/-/basic-ftp-5.3.0.tgz#88f057d1ba8442643c505c4c83bbaa4442b15cfd"
-  integrity sha512-5K9eNNn7ywHPsYnFwjKgYH8Hf8B5emh7JKcPaVjjrMJFQQwGpwowEnZNEtHs7DfR7hCZsmaK3VA4HUK0YarT+w==
+  version "5.3.1"
+  resolved "https://registry.yarnpkg.com/basic-ftp/-/basic-ftp-5.3.1.tgz#3148ee9af43c0522514a4f973fecb1d3cbb6d71e"
+  integrity sha512-bopVNp6ugyA150DDuZfPFdt1KZ5a94ZDiwX4hMgZDzF+GttD80lEy8kj98kbyhLXnPvhtIo93mdnLIjpCAeeOw==
 
 binary-extensions@^2.0.0:
   version "2.3.0"
@@ -5590,9 +5590,9 @@ fast-string-width@^3.0.2:
     fast-string-truncated-width "^3.0.2"
 
 fast-uri@^3.0.1:
-  version "3.1.0"
-  resolved "https://registry.yarnpkg.com/fast-uri/-/fast-uri-3.1.0.tgz#66eecff6c764c0df9b762e62ca7edcfb53b4edfa"
-  integrity sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==
+  version "3.1.2"
+  resolved "https://registry.yarnpkg.com/fast-uri/-/fast-uri-3.1.2.tgz#8af3d4fc9d3e71b11572cc2673b514a7d1a8c8ec"
+  integrity sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==
 
 fast-wrap-ansi@^0.2.0:
   version "0.2.0"

package/oclif.manifest.json

@@ -267,5 +267,5 @@
       ]
     }
   },
-  "version": "5.0.85"
+  "version": "5.0.87"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jayree/sfdx-plugin-manifest",
   "description": "A powerful Salesforce CLI plugin and Node.js library to effortlessly generate, clean up, and manage package.xml and destructiveChanges.xml manifests directly from your Salesforce orgs or from Git changes in your SF projects. Unlock faster, safer, and smarter Salesforce deployments.",
-  "version": "5.0.85",
+  "version": "5.0.87",
   "author": "jayree",
   "type": "module",
   "bugs": "https://github.com/jayree/sfdx-plugin-manifest/issues",