retire 4.2.0 → 4.2.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [4.2.2]
+
+### Bugfix
+
+- Proxy setting did not work
+
+## [4.2.1]
+
+### Changes
+
+- Fix provenance settings
+
 ## [4.2.0]
 
 ### Changes

package/lib/cli.js

@@ -108,6 +108,7 @@ const config = {
     exitwith: (_j = prg.exitwith) !== null && _j !== void 0 ? _j : 13,
     includeOsv: !!prg.includeOsv,
     verbose: !!prg.verbose,
+    proxy: prg.proxy,
 };
 log.info(`retire.js v${retire.version}`);
 function exitWithError(msg) {

package/lib/repo.js

@@ -31,9 +31,6 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadrepositoryFromFile = exports.loadrepository = exports.asbowerrepo = void 0;
 const fs = __importStar(require("fs"));
@@ -42,7 +39,7 @@ const http = __importStar(require("http"));
 const https = __importStar(require("https"));
 const retire = __importStar(require("./retire"));
 const URL = __importStar(require("url"));
-const proxy_agent_1 = __importDefault(require("proxy-agent"));
+const proxy_agent_1 = require("proxy-agent");
 function loadJson(url, options) {
     return __awaiter(this, void 0, void 0, function* () {
         return new Promise((resolve, reject) => {
@@ -50,7 +47,9 @@ function loadJson(url, options) {
             const reqOptions = Object.assign(Object.assign({}, URL.parse(url)), { method: 'GET' });
             const proxyUri = options.proxy || process.env.http_proxy;
             if (proxyUri) {
-                reqOptions.agent = new proxy_agent_1.default(proxyUri);
+                reqOptions.agent = new proxy_agent_1.ProxyAgent({
+                    getProxyForUrl: () => proxyUri,
+                });
             }
             if (options.insecure) {
                 reqOptions.rejectUnauthorized = false;

package/lib/retire.js

@@ -4,7 +4,7 @@
  */
 
 var exports = exports || {};
-exports.version = '4.2.0';
+exports.version = '4.2.2';
 
 function isDefined(o) {
   return typeof o !== 'undefined';

package/package.json

@@ -2,7 +2,7 @@
   "author": "Erlend Oftedal <erlend@oftedal.no>",
   "name": "retire",
   "description": "Retire is a tool for detecting use of vulnerable libraries",
-  "version": "4.2.0",
+  "version": "4.2.2",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -15,7 +15,7 @@
   "dependencies": {
     "ansi-colors": "^4.1.1",
     "commander": "^10.0.0",
-    "proxy-agent": "^5.0.0",
+    "proxy-agent": "^6.2.0",
     "uuid": "^9.0.0",
     "walkdir": "0.4.1",
     "zod": "^3.20.6"