querysub 0.277.0 → 0.279.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "querysub",
-  "version": "0.277.0",
+  "version": "0.279.0",
   "main": "index.js",
   "license": "MIT",
   "note1": "note on node-forge fork, see https://github.com/digitalbazaar/forge/issues/744 for details",

package/src/4-deploy/git.ts

@@ -4,6 +4,7 @@ import { runPromise } from "../functional/runCommand";
 import { measureWrap } from "socket-function/src/profiling/measure";
 import fs from "fs";
 import os from "os";
+import path from "path";
 export async function getGitURLLive(gitDir = ".") {
     return (await runPromise(`git remote get-url origin`, { cwd: gitDir })).trim();
 }
@@ -24,15 +25,22 @@ export async function commitAndPush(config: {
     gitDir: string;
     message: string;
 }) {
-    // Not for security, just so we can commit messages with special characters or newlines...
-    function escapeArg(message: string) {
-        return message.replaceAll("\\", "\\\\")
-            .replaceAll('"', '\\"')
-            .replaceAll("\n", "\\n");
+    // Use a file to handle newlines, etc
+    const tempFile = path.join(os.tmpdir(), `commit-message-${Date.now()}-${Math.random().toString(36).substr(2, 9)}.txt`);
+
+    try {
+        await fs.promises.writeFile(tempFile, config.message, 'utf8');
+        await runPromise(`git add --all`, { cwd: config.gitDir });
+        await runPromise(`git commit -F "${tempFile}"`, { cwd: config.gitDir });
+        await runPromise(`git push`, { cwd: config.gitDir });
+    } finally {
+        // Clean up temporary file
+        try {
+            await fs.promises.unlink(tempFile);
+        } catch {
+            // Ignore cleanup errors
+        }
     }
-    await runPromise(`git add --all`, { cwd: config.gitDir });
-    await runPromise(`git commit -m "${escapeArg(config.message)}"`, { cwd: config.gitDir });
-    await runPromise(`git push`, { cwd: config.gitDir });
 }
 
 export async function getGitRefInfo(config: {