c2cciutils 1.3.26.dev13__tar.gz → 1.3.26.dev16__tar.gz

{c2cciutils-1.3.26.dev13 → c2cciutils-1.3.26.dev16}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: c2cciutils
-Version: 1.3.26.dev13
+Version: 1.3.26.dev16
 Summary: Common utilities for Camptocamp CI
 Home-page: https://github.com/camptocamp/c2cciutils
 License: FreeBSD
@@ -41,6 +41,7 @@ Requires-Dist: google-auth-httplib2 (>=0.0.0,<1.0.0) ; extra == "publish"
 Requires-Dist: google-auth-oauthlib (>=0.0.0,<1.0.0) ; extra == "publish"
 Requires-Dist: idna (>=3.0,<4.0)
 Requires-Dist: isort (==5.10.1) ; extra == "checks"
+Requires-Dist: jinja2 (>=3.0.0,<4.0.0)
 Requires-Dist: jsonschema (>=4.0.0,<5.0.0)
 Requires-Dist: jsonschema-gentypes (>=1.0.0,<2.0.0)
 Requires-Dist: markdown-table (>=2020.0.0,<2021.0.0)

{c2cciutils-1.3.26.dev13 → c2cciutils-1.3.26.dev16}/c2cciutils/node_modules/cross-spawn/lib/enoent.js

@@ -24,7 +24,7 @@ function hookChildProcess(cp, parsed) {
         // the command exists and emit an "error" instead
         // See https://github.com/IndigoUnited/node-cross-spawn/issues/16
         if (name === 'exit') {
-            const err = verifyENOENT(arg1, parsed, 'spawn');
+            const err = verifyENOENT(arg1, parsed);
 
             if (err) {
                 return originalEmit.call(cp, 'error', err);

{c2cciutils-1.3.26.dev13 → c2cciutils-1.3.26.dev16}/c2cciutils/node_modules/cross-spawn/lib/util/escape.js

@@ -15,15 +15,17 @@ function escapeArgument(arg, doubleEscapeMetaChars) {
     arg = `${arg}`;
 
     // Algorithm below is based on https://qntm.org/cmd
+    // It's slightly altered to disable JS backtracking to avoid hanging on specially crafted input
+    // Please see https://github.com/moxystudio/node-cross-spawn/pull/160 for more information
 
     // Sequence of backslashes followed by a double quote:
     // double up all the backslashes and escape the double quote
-    arg = arg.replace(/(\\*)"/g, '$1$1\\"');
+    arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
 
     // Sequence of backslashes followed by the end of the string
     // (which will become a double quote later):
     // double up all the backslashes
-    arg = arg.replace(/(\\*)$/, '$1$1');
+    arg = arg.replace(/(?=(\\+?)?)\1$/, '$1$1');
 
     // All other backslashes occur literally
 

{c2cciutils-1.3.26.dev13 → c2cciutils-1.3.26.dev16}/c2cciutils/node_modules/cross-spawn/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cross-spawn",
-  "version": "7.0.3",
+  "version": "7.0.6",
   "description": "Cross platform child_process#spawn and child_process#spawnSync",
   "keywords": [
     "spawn",
@@ -65,7 +65,7 @@
     "lint-staged": "^9.2.5",
     "mkdirp": "^0.5.1",
     "rimraf": "^3.0.0",
-    "standard-version": "^7.0.0"
+    "standard-version": "^9.5.0"
   },
   "engines": {
     "node": ">= 8"

{c2cciutils-1.3.26.dev13 → c2cciutils-1.3.26.dev16}/c2cciutils/package-lock.json

@@ -58,9 +58,10 @@
       }
     },
     "node_modules/cross-spawn": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-      "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
+      "license": "MIT",
       "dependencies": {
         "path-key": "^3.1.0",
         "shebang-command": "^2.0.0",
@@ -336,9 +337,9 @@
       }
     },
     "cross-spawn": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-      "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
       "requires": {
         "path-key": "^3.1.0",
         "shebang-command": "^2.0.0",

{c2cciutils-1.3.26.dev13 → c2cciutils-1.3.26.dev16}/pyproject.toml

@@ -19,7 +19,7 @@ strict = true
 
 [tool.poetry]
 name = "c2cciutils"
-version = "1.3.26.dev13"
+version = "1.3.26.dev16"
 description = "Common utilities for Camptocamp CI"
 readme = "README.md"
 authors = ["Camptocamp <info@camptocamp.com>"]
@@ -114,6 +114,7 @@ Pygments = { version = "2.15.1", optional = true }
 urllib3 = { version = "1.26.20", optional = true }
 idna = { version = "3.7", optional = true }
 virtualenv = { version = "20.26.6", optional = true }
+jinja2 = "3.1.5"
 
 [tool.poetry.extras]
 audit = ["pipenv"]