@vercel/build-utils 6.2.1 → 6.2.3

package/dist/errors.js

@@ -17,7 +17,7 @@ class NowBuildError extends Error {
 }
 exports.NowBuildError = NowBuildError;
 function getPrettyError(obj) {
-    const docsUrl = 'https://vercel.com/docs/configuration';
+    const docsUrl = 'https://vercel.com/docs/concepts/projects/project-configuration';
     try {
         const { dataPath, params, message: ajvMessage } = obj;
         const prop = getTopLevelPropertyName(dataPath);
@@ -35,7 +35,7 @@ function getPrettyError(obj) {
         return new NowBuildError({
             code: 'INVALID_VERCEL_CONFIG',
             message: message,
-            link: prop ? `${docsUrl}#project/${prop.toLowerCase()}` : docsUrl,
+            link: prop ? `${docsUrl}#${prop.toLowerCase()}` : docsUrl,
             action: 'View Documentation',
         });
     }

package/dist/fs/glob.js

@@ -32,13 +32,24 @@ async function glob(pattern, opts, mountpoint) {
     const dirs = new Set();
     const dirsWithEntries = new Set();
     for (const relativePath of files) {
-        const fsPath = normalize_path_1.normalizePath(path_1.default.join(options.cwd, relativePath));
+        const absPath = path_1.default.join(options.cwd, relativePath);
+        const fsPath = normalize_path_1.normalizePath(absPath);
         let stat = statCache[fsPath];
         assert_1.default(stat, `statCache does not contain value for ${relativePath} (resolved to ${fsPath})`);
         const isSymlink = symlinks[fsPath];
+        // When `follow` mode is enabled, ensure that the entry is not a symlink
+        // that points to outside of `cwd`
+        if (options.follow &&
+            (isSymlink || (await fs_extra_1.lstat(fsPath)).isSymbolicLink())) {
+            const target = await fs_extra_1.readlink(absPath);
+            const absTarget = path_1.default.resolve(path_1.default.dirname(absPath), target);
+            if (path_1.default.relative(options.cwd, absTarget).startsWith(`..${path_1.default.sep}`)) {
+                continue;
+            }
+        }
         if (isSymlink || stat.isFile() || stat.isDirectory()) {
             if (isSymlink) {
-                stat = await fs_extra_1.lstat(fsPath);
+                stat = await fs_extra_1.lstat(absPath);
             }
             // Some bookkeeping to track which directories already have entries within
             const dirname = path_1.default.dirname(relativePath);

package/dist/index.js

@@ -30284,7 +30284,7 @@ class NowBuildError extends Error {
 }
 exports.NowBuildError = NowBuildError;
 function getPrettyError(obj) {
-    const docsUrl = 'https://vercel.com/docs/configuration';
+    const docsUrl = 'https://vercel.com/docs/concepts/projects/project-configuration';
     try {
         const { dataPath, params, message: ajvMessage } = obj;
         const prop = getTopLevelPropertyName(dataPath);
@@ -30302,7 +30302,7 @@ function getPrettyError(obj) {
         return new NowBuildError({
             code: 'INVALID_VERCEL_CONFIG',
             message: message,
-            link: prop ? `${docsUrl}#project/${prop.toLowerCase()}` : docsUrl,
+            link: prop ? `${docsUrl}#${prop.toLowerCase()}` : docsUrl,
             action: 'View Documentation',
         });
     }
@@ -30744,13 +30744,24 @@ async function glob(pattern, opts, mountpoint) {
     const dirs = new Set();
     const dirsWithEntries = new Set();
     for (const relativePath of files) {
-        const fsPath = normalize_path_1.normalizePath(path_1.default.join(options.cwd, relativePath));
+        const absPath = path_1.default.join(options.cwd, relativePath);
+        const fsPath = normalize_path_1.normalizePath(absPath);
         let stat = statCache[fsPath];
         assert_1.default(stat, `statCache does not contain value for ${relativePath} (resolved to ${fsPath})`);
         const isSymlink = symlinks[fsPath];
+        // When `follow` mode is enabled, ensure that the entry is not a symlink
+        // that points to outside of `cwd`
+        if (options.follow &&
+            (isSymlink || (await fs_extra_1.lstat(fsPath)).isSymbolicLink())) {
+            const target = await fs_extra_1.readlink(absPath);
+            const absTarget = path_1.default.resolve(path_1.default.dirname(absPath), target);
+            if (path_1.default.relative(options.cwd, absTarget).startsWith(`..${path_1.default.sep}`)) {
+                continue;
+            }
+        }
         if (isSymlink || stat.isFile() || stat.isDirectory()) {
             if (isSymlink) {
-                stat = await fs_extra_1.lstat(fsPath);
+                stat = await fs_extra_1.lstat(absPath);
             }
             // Some bookkeeping to track which directories already have entries within
             const dirname = path_1.default.dirname(relativePath);
@@ -31982,10 +31993,8 @@ exports.functionsSchema = {
                     maxLength: 256,
                 },
                 memory: {
-                    // Number between 128 and 3008 in steps of 64
-                    enum: Object.keys(Array.from({ length: 50 }))
-                        .slice(2, 48)
-                        .map(x => Number(x) * 64),
+                    minimum: 128,
+                    maximum: 3008,
                 },
                 maxDuration: {
                     type: 'number',

package/dist/schemas.d.ts

@@ -13,7 +13,8 @@ export declare const functionsSchema: {
                     maxLength: number;
                 };
                 memory: {
-                    enum: number[];
+                    minimum: number;
+                    maximum: number;
                 };
                 maxDuration: {
                     type: string;

package/dist/schemas.js

@@ -16,10 +16,8 @@ exports.functionsSchema = {
                     maxLength: 256,
                 },
                 memory: {
-                    // Number between 128 and 3008 in steps of 64
-                    enum: Object.keys(Array.from({ length: 50 }))
-                        .slice(2, 48)
-                        .map(x => Number(x) * 64),
+                    minimum: 128,
+                    maximum: 3008,
                 },
                 maxDuration: {
                     type: 'number',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vercel/build-utils",
-  "version": "6.2.1",
+  "version": "6.2.3",
   "license": "MIT",
   "main": "./dist/index.js",
   "types": "./dist/index.d.js",
@@ -14,7 +14,7 @@
     "build": "node build",
     "test": "jest --env node --verbose --runInBand --bail",
     "test-unit": "pnpm test test/unit.*test.*",
-    "test-integration-once": "pnpm test test/integration.test.ts"
+    "test-e2e": "pnpm test test/integration.test.ts"
   },
   "devDependencies": {
     "@iarna/toml": "2.2.3",
@@ -51,5 +51,5 @@
     "typescript": "4.3.4",
     "yazl": "2.5.1"
   },
-  "gitHead": "c1c8b454cc29de4bd306b87078f36d6416ceb90f"
+  "gitHead": "881e43a0e2d6daa2f7654ad16566960b00d412aa"
 }