@netlify/build 33.0.0 → 33.1.0

package/lib/plugins/compatibility.d.ts

@@ -1,4 +1,4 @@
-import { PackageJson } from 'read-pkg-up';
+import { PackageJson } from 'read-package-up';
 import { FeatureFlags } from '../core/feature_flags.js';
 import { SystemLogger } from '../plugins_core/types.js';
 import { PluginVersion } from './list.js';

package/lib/plugins/manifest/main.d.ts

@@ -1,4 +1,4 @@
-import { PackageJson } from 'read-pkg-up';
+import { PackageJson } from 'read-package-up';
 /**
  * Load plugin's `manifest.yml`
  */

package/lib/plugins/options.d.ts

@@ -1,4 +1,4 @@
-import { PackageJson } from 'read-pkg-up';
+import { PackageJson } from 'read-package-up';
 export declare const getPluginsOptions: any;
 /**
  * Retrieve information about @netlify/build when an error happens there and not

package/lib/plugins/plugin_conditions.d.ts

@@ -1,4 +1,4 @@
-import { PackageJson } from 'read-pkg-up';
+import { PackageJson } from 'read-package-up';
 import { type PluginVersion } from './list.js';
 type ConditionContext = {
     nodeVersion: string;

package/lib/plugins_core/secrets_scanning/secret_prefixes.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Likely secret prefixes used for enhanced secret scanning.
+ * Note: string comparison is case-insensitive so we use all lowercase here.
+ */
+export declare const LIKELY_SECRET_PREFIXES: string[];

package/lib/plugins_core/secrets_scanning/secret_prefixes.js

@@ -0,0 +1,35 @@
+/**
+ * Likely secret prefixes used for enhanced secret scanning.
+ * Note: string comparison is case-insensitive so we use all lowercase here.
+ */
+const AWS_PREFIXES = ['aws_', 'asia', 'akia', 'aida', 'ar0a', 'apka', 'abia', 'asca'];
+const SLACK_PREFIXES = ['xoxb-', 'xwfp-', 'xoxb-', 'xoxp-', 'xapp-'];
+const GCP_PREFIXES = ['aiza', 'ya29'];
+const NETLIFY_PREFIXES = ['nf_'];
+const GITHUB_PREFIXES = ['ghp_', 'gho_', 'ghu_', 'ghs_', 'ghr_', 'github_pat_'];
+const SHOPIFY_PREFIXES = ['shpss_', 'shpat_', 'shpca_', 'shppa_'];
+const SQUARE_PREFIXES = ['sq0atp-'];
+const OTHER_COMMON_PREFIXES = [
+    'pk_',
+    'sk_',
+    'pat_',
+    'sk-',
+    'db_',
+    'api_',
+    'secret_',
+    'auth_',
+    'access_',
+    'twilio_',
+    '-----begin',
+    'ls0t',
+];
+export const LIKELY_SECRET_PREFIXES = [
+    ...AWS_PREFIXES,
+    ...SLACK_PREFIXES,
+    ...GCP_PREFIXES,
+    ...NETLIFY_PREFIXES,
+    ...GITHUB_PREFIXES,
+    ...SHOPIFY_PREFIXES,
+    ...SQUARE_PREFIXES,
+    ...OTHER_COMMON_PREFIXES,
+];

package/lib/plugins_core/secrets_scanning/utils.js

@@ -3,6 +3,7 @@ import path from 'node:path';
 import { createInterface } from 'node:readline';
 import { fdir } from 'fdir';
 import { minimatch } from 'minimatch';
+import { LIKELY_SECRET_PREFIXES } from './secret_prefixes.js';
 /**
  * Determine if the user disabled scanning via env var
  * @param env current envars
@@ -85,9 +86,6 @@ export function getNonSecretKeysToScanFor(env, secretKeys) {
     });
     return nonSecretKeysToScanFor;
 }
-const AWS_PREFIXES = ['aws_', 'asia'];
-const SLACK_PREFIXES = ['xoxb-', 'xwfp-', 'xoxb-', 'xoxp-', 'xapp-'];
-const LIKELY_SECRET_PREFIXES = ['pk_', 'sk_', 'pat_', 'db_', 'github_pat_', ...AWS_PREFIXES, ...SLACK_PREFIXES];
 const LIKELY_SECRET_MIN_LENGTH = 16;
 /**
  * When the enhanced secret scan is run, we check any env vars _not_ marked as secret if they are highly likely to be secret values.

package/lib/utils/json.d.ts

@@ -1,4 +1,4 @@
-import type { PackageJson } from 'read-pkg-up';
+import type { PackageJson } from 'read-package-up';
 export type RootPackageJson = {
     name: string;
     version: string;

package/lib/utils/package.d.ts

@@ -1,4 +1,4 @@
-import { Options, PackageJson } from 'read-pkg-up';
+import { Options, PackageJson } from 'read-package-up';
 type PackageResult = {
     packageJson: PackageJson;
     packageDir?: string;

package/lib/utils/package.js

@@ -1,5 +1,5 @@
 import { dirname } from 'path';
-import { readPackageUp } from 'read-pkg-up';
+import { readPackageUp } from 'read-package-up';
 /**
  * Retrieve `package.json` from a specific directory
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@netlify/build",
-  "version": "33.0.0",
+  "version": "33.1.0",
   "description": "Netlify build module",
   "type": "module",
   "exports": "./lib/index.js",
@@ -69,15 +69,15 @@
     "@bugsnag/js": "^7.0.0",
     "@netlify/blobs": "^8.2.0",
     "@netlify/cache-utils": "^6.0.0",
-    "@netlify/config": "^23.0.0",
-    "@netlify/edge-bundler": "14.0.0",
-    "@netlify/framework-info": "^10.0.0",
-    "@netlify/functions-utils": "^6.0.0",
+    "@netlify/config": "^23.0.1",
+    "@netlify/edge-bundler": "14.0.2",
+    "@netlify/framework-info": "^10.0.1",
+    "@netlify/functions-utils": "^6.0.2",
     "@netlify/git-utils": "^6.0.0",
     "@netlify/opentelemetry-utils": "^2.0.0",
     "@netlify/plugins-list": "^6.80.0",
     "@netlify/run-utils": "^6.0.0",
-    "@netlify/zip-it-and-ship-it": "11.0.0",
+    "@netlify/zip-it-and-ship-it": "12.0.0",
     "@sindresorhus/slugify": "^2.0.0",
     "ansi-escapes": "^6.0.0",
     "chalk": "^5.0.0",
@@ -110,7 +110,7 @@
     "pkg-dir": "^7.0.0",
     "pretty-ms": "^8.0.0",
     "ps-list": "^8.0.0",
-    "read-pkg-up": "^9.0.0",
+    "read-package-up": "^11.0.0",
     "readdirp": "^3.4.0",
     "resolve": "^2.0.0-next.5",
     "rfdc": "^1.3.0",
@@ -118,11 +118,11 @@
     "semver": "^7.3.8",
     "string-width": "^5.0.0",
     "strip-ansi": "^7.0.0",
-    "supports-color": "^9.0.0",
+    "supports-color": "^10.0.0",
     "terminal-link": "^3.0.0",
     "ts-node": "^10.9.1",
     "typescript": "^5.0.0",
-    "uuid": "^9.0.0",
+    "uuid": "^11.0.0",
     "yargs": "^17.6.0"
   },
   "devDependencies": {
@@ -132,16 +132,16 @@
     "@types/node": "^14.18.53",
     "atob": "^2.1.2",
     "ava": "^4.0.0",
-    "c8": "^7.12.0",
+    "c8": "^10.0.0",
     "copyfiles": "^2.4.1",
     "cpy": "^9.0.0",
     "get-node": "^12.0.0",
     "get-port": "^6.0.0",
-    "has-ansi": "^5.0.0",
+    "has-ansi": "^6.0.0",
     "moize": "^6.0.0",
     "npm-run-all2": "^5.0.0",
     "process-exists": "^5.0.0",
-    "sinon": "^13.0.0",
+    "sinon": "^20.0.0",
     "tmp-promise": "^3.0.2",
     "tsd": "^0.32.0",
     "vitest": "^0.34.0",
@@ -159,5 +159,5 @@
   "engines": {
     "node": ">=18.14.0"
   },
-  "gitHead": "f879acfe2bb508728578f9483c99bcdf372a2e83"
+  "gitHead": "11241b50b724a2f229614e74dd22c86c4ca8757d"
 }