fix: unblock CI minimatch audit and host policy check

This commit is contained in:
Peter Steinberger
2026-02-26 22:48:09 +00:00
parent c35368c6dd
commit 5b62d5603d
3 changed files with 15 additions and 15 deletions

View File

@@ -22,17 +22,17 @@ enum HostEnvSecurityPolicy {
"PS4",
"GCONV_PATH",
"IFS",
"SSLKEYLOGFILE",
"SSLKEYLOGFILE"
]
static let blockedOverrideKeys: Set<String> = [
"HOME",
"ZDOTDIR",
"ZDOTDIR"
]
static let blockedPrefixes: [String] = [
"DYLD_",
"LD_",
"BASH_FUNC_",
"BASH_FUNC_"
]
}

View File

@@ -243,7 +243,7 @@
"request": "npm:@cypress/request@3.0.10",
"request-promise": "npm:@cypress/request-promise@5.0.0",
"form-data": "2.5.4",
"minimatch": "10.2.1",
"minimatch": "10.2.4",
"qs": "6.14.2",
"@sinclair/typebox": "0.34.48",
"tar": "7.5.9",

22
pnpm-lock.yaml generated
View File

@@ -6,11 +6,11 @@ settings:
overrides:
hono: 4.11.10
fast-xml-parser: 5.3.6
request: npm:@cypress/request@3.0.10
request-promise: npm:@cypress/request-promise@5.0.0
fast-xml-parser: 5.3.6
form-data: 2.5.4
minimatch: 10.2.1
minimatch: 10.2.4
qs: 6.14.2
'@sinclair/typebox': 0.34.48
tar: 7.5.9
@@ -4490,9 +4490,9 @@ packages:
minimalistic-assert@1.0.1:
resolution: {integrity: sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==}
minimatch@10.2.1:
resolution: {integrity: sha512-MClCe8IL5nRRmawL6ib/eT4oLyeKMGCghibcDWK+J0hh0Q8kqSdia6BvbRMVk6mPa6WqUa5uR2oxt6C5jd533A==}
engines: {node: 20 || >=22}
minimatch@10.2.4:
resolution: {integrity: sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==}
engines: {node: 18 || 20 || >=22}
minimist@1.2.8:
resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
@@ -7001,7 +7001,7 @@ snapshots:
hosted-git-info: 9.0.2
ignore: 7.0.5
marked: 15.0.12
minimatch: 10.2.1
minimatch: 10.2.4
proper-lockfile: 4.1.2
yaml: 2.8.2
optionalDependencies:
@@ -7031,7 +7031,7 @@ snapshots:
hosted-git-info: 9.0.2
ignore: 7.0.5
marked: 15.0.12
minimatch: 10.2.1
minimatch: 10.2.4
proper-lockfile: 4.1.2
yaml: 2.8.2
optionalDependencies:
@@ -9691,14 +9691,14 @@ snapshots:
dependencies:
foreground-child: 3.3.1
jackspeak: 3.4.3
minimatch: 10.2.1
minimatch: 10.2.4
minipass: 7.1.3
package-json-from-dist: 1.0.1
path-scurry: 1.11.1
glob@13.0.6:
dependencies:
minimatch: 10.2.1
minimatch: 10.2.4
minipass: 7.1.3
path-scurry: 2.0.2
@@ -9707,7 +9707,7 @@ snapshots:
fs.realpath: 1.0.0
inflight: 1.0.6
inherits: 2.0.4
minimatch: 10.2.1
minimatch: 10.2.4
once: 1.4.0
path-is-absolute: 1.0.1
optional: true
@@ -10288,7 +10288,7 @@ snapshots:
minimalistic-assert@1.0.1: {}
minimatch@10.2.1:
minimatch@10.2.4:
dependencies:
brace-expansion: 5.0.3