From aae8f83338ed69a28e8c8279e738857b13364841 Mon Sep 17 00:00:00 2001 From: Connor Osborn Date: Fri, 26 May 2017 21:59:57 -0700 Subject: [PATCH 1/4] Fix incorrect api usage, not Time rather TIME --- examples/walk-history.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/walk-history.js b/examples/walk-history.js index 2e41ce2da..7bdab9fb9 100644 --- a/examples/walk-history.js +++ b/examples/walk-history.js @@ -10,7 +10,7 @@ nodegit.Repository.open(path.resolve(__dirname, "../.git")) }) .then(function(firstCommitOnMaster){ // History returns an event. - var history = firstCommitOnMaster.history(nodegit.Revwalk.SORT.Time); + var history = firstCommitOnMaster.history(nodegit.Revwalk.SORT.TIME); // History emits "commit" event for each commit in the branch's history history.on("commit", function(commit) { From 46b60aff1827ce3f9fa7331e1dd3f5c96a3b2458 Mon Sep 17 00:00:00 2001 From: Tyler Wanek Date: Wed, 30 May 2018 08:18:41 -0700 Subject: [PATCH 2/4] Bump libgit2 to v0.27.1 --- vendor/libgit2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vendor/libgit2 b/vendor/libgit2 index 0a00bd9db..07674fbae 160000 --- a/vendor/libgit2 +++ b/vendor/libgit2 @@ -1 +1 @@ -Subproject commit 0a00bd9dbd4bc12dc9fe43d80bcae5a31d06d66f +Subproject commit 07674fbae6add2ce24e0b4aa6381b9d6272b98e3 From 9e2a15a2e8589f2192ec995711e782181808628c Mon Sep 17 00:00:00 2001 From: Carson Howard Date: Wed, 30 May 2018 15:31:02 -0700 Subject: [PATCH 3/4] Update appveyor.yml to update submodules --- appveyor.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/appveyor.yml b/appveyor.yml index acbc2bcc9..4250dff4a 100644 --- a/appveyor.yml +++ b/appveyor.yml @@ -35,6 +35,7 @@ matrix: # Get the latest stable version of Node 0.STABLE.latest install: + - git submodule update --init --recursive - ps: Install-Product node $env:nodejs_version $env:platform - ps: Start-Process c:\projects\nodegit\vendor\pageant.exe c:\projects\nodegit\vendor\private.ppk - npm install -g npm From 3c7ee736eae510ed775e3ce10335eba51ba0499f Mon Sep 17 00:00:00 2001 From: Tyler Wanek Date: Thu, 31 May 2018 08:16:32 -0700 Subject: [PATCH 4/4] Bump to 0.22.1 --- CHANGELOG.md | 9 +++++++++ package-lock.json | 2 +- package.json | 2 +- 3 files changed, 11 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c48f9373e..2a42b6221 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,14 @@ # Change Log +## v0.22.1 [(2018-04-09)](https://github.com/nodegit/nodegit/releases/tag/v0.22.1) + +[Full Changelog](https://github.com/nodegit/nodegit/compare/v0.22.0...v0.22.1) + +#### Summary of changes +Bumped libgit2 to 0.27.1 to address security flaw with submodule name validation (CVE-2018-11235, reported by Etienne Stalmans). +Details can be found here https://github.com/libgit2/libgit2/releases/tag/v0.27.1 + + ## v0.22.0 [(2018-04-09)](https://github.com/nodegit/nodegit/releases/tag/v0.22.0) [Full Changelog](https://github.com/nodegit/nodegit/compare/v0.21.2...v0.22.0) diff --git a/package-lock.json b/package-lock.json index b8c4206fb..1e8cdc10a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "nodegit", - "version": "0.22.0", + "version": "0.22.1", "lockfileVersion": 1, "requires": true, "dependencies": { diff --git a/package.json b/package.json index 9aa835a7b..4b8cdbbe6 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "nodegit", "description": "Node.js libgit2 asynchronous native bindings", - "version": "0.22.0", + "version": "0.22.1", "homepage": "http://nodegit.org", "keywords": [ "libgit2",