@netlify/build 35.2.6 → 35.2.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -145,7 +145,9 @@ export function findLikelySecrets({ text, omitValuesFromEnhancedScan = [], }) {
|
|
|
145
145
|
while ((match = likelySecretRegex.exec(text)) !== null) {
|
|
146
146
|
const token = match.groups?.token;
|
|
147
147
|
const prefix = match.groups?.prefix;
|
|
148
|
-
if (!token ||
|
|
148
|
+
if (!token ||
|
|
149
|
+
!prefix ||
|
|
150
|
+
allOmittedValues.some((omittedValue) => typeof omittedValue === 'string' && omittedValue.toLowerCase() === token.toLowerCase())) {
|
|
149
151
|
continue;
|
|
150
152
|
}
|
|
151
153
|
// Despite the prefix, the string does not look random enough to be convinced it's a secret
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@netlify/build",
|
|
3
|
-
"version": "35.2.
|
|
3
|
+
"version": "35.2.8",
|
|
4
4
|
"description": "Netlify build module",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"exports": "./lib/index.js",
|
|
@@ -67,10 +67,10 @@
|
|
|
67
67
|
"license": "MIT",
|
|
68
68
|
"dependencies": {
|
|
69
69
|
"@bugsnag/js": "^8.0.0",
|
|
70
|
-
"@netlify/blobs": "^10.1
|
|
70
|
+
"@netlify/blobs": "^10.2.1",
|
|
71
71
|
"@netlify/cache-utils": "^6.0.4",
|
|
72
|
-
"@netlify/config": "^24.0.
|
|
73
|
-
"@netlify/edge-bundler": "14.8.
|
|
72
|
+
"@netlify/config": "^24.0.7",
|
|
73
|
+
"@netlify/edge-bundler": "14.8.1",
|
|
74
74
|
"@netlify/functions-utils": "^6.2.11",
|
|
75
75
|
"@netlify/git-utils": "^6.0.2",
|
|
76
76
|
"@netlify/opentelemetry-utils": "^2.0.1",
|
|
@@ -152,5 +152,5 @@
|
|
|
152
152
|
"engines": {
|
|
153
153
|
"node": ">=18.14.0"
|
|
154
154
|
},
|
|
155
|
-
"gitHead": "
|
|
155
|
+
"gitHead": "e945f46a5b5e5c2b33f6ef164be73688ae7d61ed"
|
|
156
156
|
}
|