test

Merge pull request #1713 from actions/eggyhead/fix-tar-ddos-vuln
fixing https://github.com/advisories/GHSA-f5x3-32g6-xq36
2024-04-15 13:05:46 +00:00 · 2024-04-12 13:41:10 -07:00 · 2024-04-10 21:48:57 +00:00 · 2024-04-10 21:30:24 +00:00
9 changed files with 3537 additions and 1887 deletions
@@ -43,7 +43,7 @@ Note that before a PR will be accepted, you must ensure:
 1. In a new branch, create a new Lerna package:

 ```console
-$ npm run create-package new-package
+$ npm run new-package [name]
 ```

 This will ask you some questions about the new package. Start with `0.0.0` as the first version (look generally at some of the other packages for how the package.json is structured).
@@ -27,10 +27,10 @@
    "eslint-plugin-prettier": "^5.0.0",
    "flow-bin": "^0.115.0",
    "jest": "^29.6.4",
-    "lerna": "^7.1.4",
+    "lerna": "^6.4.1",
    "nx": "16.6.0",
    "prettier": "^3.0.0",
    "ts-jest": "^29.1.1",
    "typescript": "^5.2.2"
  }
-}
+}
@@ -16,7 +16,6 @@ This is the core library that powers the [`@actions/upload-artifact`](https://gi
    - [Downloading from other workflow runs or repos](#downloading-from-other-workflow-runs-or-repos)
    - [Speeding up large uploads](#speeding-up-large-uploads)
  - [Additional Resources](#additional-resources)
-
 ## v2 - What's New

 > [!IMPORTANT]
@@ -18,11 +18,11 @@
        "@azure/ms-rest-js": "^2.6.0",
        "@azure/storage-blob": "^12.13.0",
        "semver": "^6.3.1",
-        "uuid": "^9.0.1"
+        "uuid": "^3.3.3"
      },
      "devDependencies": {
        "@types/semver": "^6.0.0",
-        "@types/uuid": "^9.0.8",
+        "@types/uuid": "^3.4.5",
        "typescript": "^5.2.2"
      }
    },
@@ -297,9 +297,9 @@
      }
    },
    "node_modules/@types/uuid": {
-      "version": "9.0.8",
-      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-9.0.8.tgz",
-      "integrity": "sha512-jg+97EGIcY9AGHJJRaaPVgetKDsrTgbRjQ5Msgjh/DQKEFl0DtyRr/VCOyD1T2R1MNeWPK/u7JoGhlDZnKBAfA==",
+      "version": "3.4.10",
+      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-3.4.10.tgz",
+      "integrity": "sha512-BgeaZuElf7DEYZhWYDTc/XcLZXdVgFkVSTa13BqKvbnmUrxr3TJFKofUxCtDO9UQOdhnV+HPOESdHiHKZOJV1A==",
      "dev": true
    },
    "node_modules/abort-controller": {
@@ -487,15 +487,12 @@
      }
    },
    "node_modules/uuid": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz",
-      "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==",
-      "funding": [
-        "https://github.com/sponsors/broofa",
-        "https://github.com/sponsors/ctavan"
-      ],
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz",
+      "integrity": "sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A==",
+      "deprecated": "Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.",
      "bin": {
-        "uuid": "dist/bin/uuid"
+        "uuid": "bin/uuid"
      }
    },
    "node_modules/webidl-conversions": {
@@ -768,9 +765,9 @@
      }
    },
    "@types/uuid": {
-      "version": "9.0.8",
-      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-9.0.8.tgz",
-      "integrity": "sha512-jg+97EGIcY9AGHJJRaaPVgetKDsrTgbRjQ5Msgjh/DQKEFl0DtyRr/VCOyD1T2R1MNeWPK/u7JoGhlDZnKBAfA==",
+      "version": "3.4.10",
+      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-3.4.10.tgz",
+      "integrity": "sha512-BgeaZuElf7DEYZhWYDTc/XcLZXdVgFkVSTa13BqKvbnmUrxr3TJFKofUxCtDO9UQOdhnV+HPOESdHiHKZOJV1A==",
      "dev": true
    },
    "abort-controller": {
@@ -904,9 +901,9 @@
      "dev": true
    },
    "uuid": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz",
-      "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA=="
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz",
+      "integrity": "sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A=="
    },
    "webidl-conversions": {
      "version": "3.0.1",
@@ -46,11 +46,11 @@
    "@azure/ms-rest-js": "^2.6.0",
    "@azure/storage-blob": "^12.13.0",
    "semver": "^6.3.1",
-    "uuid": "^9.0.1"
+    "uuid": "^3.3.3"
  },
  "devDependencies": {
    "@types/semver": "^6.0.0",
-    "@types/uuid": "^9.0.8",
+    "@types/uuid": "^3.4.5",
    "typescript": "^5.2.2"
  }
 }
@@ -14,12 +14,12 @@
        "@actions/http-client": "^2.0.1",
        "@actions/io": "^1.1.1",
        "semver": "^6.1.0",
-        "uuid": "^9.0.1"
+        "uuid": "^3.3.2"
      },
      "devDependencies": {
        "@types/nock": "^11.1.0",
        "@types/semver": "^6.0.0",
-        "@types/uuid": "^9.0.8",
+        "@types/uuid": "^3.4.4",
        "nock": "^13.2.9"
      }
    },
@@ -71,6 +71,12 @@
        "nock": "*"
      }
    },
+    "node_modules/@types/node": {
+      "version": "12.7.0",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-12.7.0.tgz",
+      "integrity": "sha512-vqcj1MVm2Sla4PpMfYKh1MyDN4D2f/mPIZD7RdAGqEsbE+JxfeqQHHVbRDQ0Nqn8i73gJa1HQ1Pu3+nH4Q0Yiw==",
+      "dev": true
+    },
    "node_modules/@types/semver": {
      "version": "6.0.1",
      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-6.0.1.tgz",
@@ -78,10 +84,13 @@
      "dev": true
    },
    "node_modules/@types/uuid": {
-      "version": "9.0.8",
-      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-9.0.8.tgz",
-      "integrity": "sha512-jg+97EGIcY9AGHJJRaaPVgetKDsrTgbRjQ5Msgjh/DQKEFl0DtyRr/VCOyD1T2R1MNeWPK/u7JoGhlDZnKBAfA==",
-      "dev": true
+      "version": "3.4.5",
+      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-3.4.5.tgz",
+      "integrity": "sha512-MNL15wC3EKyw1VLF+RoVO4hJJdk9t/Hlv3rt1OL65Qvuadm4BYo6g9ZJQqoq7X8NBFSsQXgAujWciovh2lpVjA==",
+      "dev": true,
+      "dependencies": {
+        "@types/node": "*"
+      }
    },
    "node_modules/debug": {
      "version": "4.3.4",
@@ -159,15 +168,12 @@
      }
    },
    "node_modules/uuid": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz",
-      "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==",
-      "funding": [
-        "https://github.com/sponsors/broofa",
-        "https://github.com/sponsors/ctavan"
-      ],
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-3.3.2.tgz",
+      "integrity": "sha512-yXJmeNaw3DnnKAOKJE51sL/ZaYfWJRl1pK9dr19YFCu0ObS231AB1/LbqTKRAQ5kw8A90rA6fr4riOUpTZvQZA==",
+      "deprecated": "Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.",
      "bin": {
-        "uuid": "dist/bin/uuid"
+        "uuid": "bin/uuid"
      }
    }
  },
@@ -218,6 +224,12 @@
        "nock": "*"
      }
    },
+    "@types/node": {
+      "version": "12.7.0",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-12.7.0.tgz",
+      "integrity": "sha512-vqcj1MVm2Sla4PpMfYKh1MyDN4D2f/mPIZD7RdAGqEsbE+JxfeqQHHVbRDQ0Nqn8i73gJa1HQ1Pu3+nH4Q0Yiw==",
+      "dev": true
+    },
    "@types/semver": {
      "version": "6.0.1",
      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-6.0.1.tgz",
@@ -225,10 +237,13 @@
      "dev": true
    },
    "@types/uuid": {
-      "version": "9.0.8",
-      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-9.0.8.tgz",
-      "integrity": "sha512-jg+97EGIcY9AGHJJRaaPVgetKDsrTgbRjQ5Msgjh/DQKEFl0DtyRr/VCOyD1T2R1MNeWPK/u7JoGhlDZnKBAfA==",
-      "dev": true
+      "version": "3.4.5",
+      "resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-3.4.5.tgz",
+      "integrity": "sha512-MNL15wC3EKyw1VLF+RoVO4hJJdk9t/Hlv3rt1OL65Qvuadm4BYo6g9ZJQqoq7X8NBFSsQXgAujWciovh2lpVjA==",
+      "dev": true,
+      "requires": {
+        "@types/node": "*"
+      }
    },
    "debug": {
      "version": "4.3.4",
@@ -286,9 +301,9 @@
      "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg=="
    },
    "uuid": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz",
-      "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA=="
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-3.3.2.tgz",
+      "integrity": "sha512-yXJmeNaw3DnnKAOKJE51sL/ZaYfWJRl1pK9dr19YFCu0ObS231AB1/LbqTKRAQ5kw8A90rA6fr4riOUpTZvQZA=="
    }
  }
 }
@@ -41,12 +41,12 @@
    "@actions/http-client": "^2.0.1",
    "@actions/io": "^1.1.1",
    "semver": "^6.1.0",
-    "uuid": "^9.0.1"
+    "uuid": "^3.3.2"
  },
  "devDependencies": {
    "@types/nock": "^11.1.0",
    "@types/semver": "^6.0.0",
-    "@types/uuid": "^9.0.8",
+    "@types/uuid": "^3.4.4",
    "nock": "^13.2.9"
  }
 }
@@ -10,7 +10,7 @@ import * as stream from 'stream'
 import * as util from 'util'
 import {ok} from 'assert'
 import {OutgoingHttpHeaders} from 'http'
-import {v4 as uuidV4} from 'uuid'
+import uuidV4 from 'uuid/v4'
 import {exec} from '@actions/exec/lib/exec'
 import {ExecOptions} from '@actions/exec/lib/interfaces'
 import {RetryHelper} from './retry-helper'
Author	SHA1	Message	Date
Vallie Joseph	7027bba0d6	test	2024-04-15 13:05:46 +00:00
eggyhead	c104cf5dc0	Merge pull request #1713 from actions/eggyhead/fix-tar-ddos-vuln fixing https://github.com/advisories/GHSA-f5x3-32g6-xq36	2024-04-12 13:41:10 -07:00
eggyhead	df5a794b3d	fixing new-package script instruction	2024-04-10 21:48:57 +00:00
eggyhead	c01bc907ed	fixing https://github.com/advisories/GHSA-f5x3-32g6-xq36	2024-04-10 21:30:24 +00:00