fix: unblock CI minimatch audit and host policy check

This commit is contained in:
Peter Steinberger
2026-02-26 22:48:09 +00:00
parent c35368c6dd
commit 5b62d5603d
3 changed files with 15 additions and 15 deletions

View File

@@ -22,17 +22,17 @@ enum HostEnvSecurityPolicy {
"PS4", "PS4",
"GCONV_PATH", "GCONV_PATH",
"IFS", "IFS",
"SSLKEYLOGFILE", "SSLKEYLOGFILE"
] ]
static let blockedOverrideKeys: Set<String> = [ static let blockedOverrideKeys: Set<String> = [
"HOME", "HOME",
"ZDOTDIR", "ZDOTDIR"
] ]
static let blockedPrefixes: [String] = [ static let blockedPrefixes: [String] = [
"DYLD_", "DYLD_",
"LD_", "LD_",
"BASH_FUNC_", "BASH_FUNC_"
] ]
} }

View File

@@ -243,7 +243,7 @@
"request": "npm:@cypress/request@3.0.10", "request": "npm:@cypress/request@3.0.10",
"request-promise": "npm:@cypress/request-promise@5.0.0", "request-promise": "npm:@cypress/request-promise@5.0.0",
"form-data": "2.5.4", "form-data": "2.5.4",
"minimatch": "10.2.1", "minimatch": "10.2.4",
"qs": "6.14.2", "qs": "6.14.2",
"@sinclair/typebox": "0.34.48", "@sinclair/typebox": "0.34.48",
"tar": "7.5.9", "tar": "7.5.9",

22
pnpm-lock.yaml generated
View File

@@ -6,11 +6,11 @@ settings:
overrides: overrides:
hono: 4.11.10 hono: 4.11.10
fast-xml-parser: 5.3.6
request: npm:@cypress/request@3.0.10 request: npm:@cypress/request@3.0.10
request-promise: npm:@cypress/request-promise@5.0.0 request-promise: npm:@cypress/request-promise@5.0.0
fast-xml-parser: 5.3.6
form-data: 2.5.4 form-data: 2.5.4
minimatch: 10.2.1 minimatch: 10.2.4
qs: 6.14.2 qs: 6.14.2
'@sinclair/typebox': 0.34.48 '@sinclair/typebox': 0.34.48
tar: 7.5.9 tar: 7.5.9
@@ -4490,9 +4490,9 @@ packages:
minimalistic-assert@1.0.1: minimalistic-assert@1.0.1:
resolution: {integrity: sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==} resolution: {integrity: sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==}
minimatch@10.2.1: minimatch@10.2.4:
resolution: {integrity: sha512-MClCe8IL5nRRmawL6ib/eT4oLyeKMGCghibcDWK+J0hh0Q8kqSdia6BvbRMVk6mPa6WqUa5uR2oxt6C5jd533A==} resolution: {integrity: sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==}
engines: {node: 20 || >=22} engines: {node: 18 || 20 || >=22}
minimist@1.2.8: minimist@1.2.8:
resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==} resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
@@ -7001,7 +7001,7 @@ snapshots:
hosted-git-info: 9.0.2 hosted-git-info: 9.0.2
ignore: 7.0.5 ignore: 7.0.5
marked: 15.0.12 marked: 15.0.12
minimatch: 10.2.1 minimatch: 10.2.4
proper-lockfile: 4.1.2 proper-lockfile: 4.1.2
yaml: 2.8.2 yaml: 2.8.2
optionalDependencies: optionalDependencies:
@@ -7031,7 +7031,7 @@ snapshots:
hosted-git-info: 9.0.2 hosted-git-info: 9.0.2
ignore: 7.0.5 ignore: 7.0.5
marked: 15.0.12 marked: 15.0.12
minimatch: 10.2.1 minimatch: 10.2.4
proper-lockfile: 4.1.2 proper-lockfile: 4.1.2
yaml: 2.8.2 yaml: 2.8.2
optionalDependencies: optionalDependencies:
@@ -9691,14 +9691,14 @@ snapshots:
dependencies: dependencies:
foreground-child: 3.3.1 foreground-child: 3.3.1
jackspeak: 3.4.3 jackspeak: 3.4.3
minimatch: 10.2.1 minimatch: 10.2.4
minipass: 7.1.3 minipass: 7.1.3
package-json-from-dist: 1.0.1 package-json-from-dist: 1.0.1
path-scurry: 1.11.1 path-scurry: 1.11.1
glob@13.0.6: glob@13.0.6:
dependencies: dependencies:
minimatch: 10.2.1 minimatch: 10.2.4
minipass: 7.1.3 minipass: 7.1.3
path-scurry: 2.0.2 path-scurry: 2.0.2
@@ -9707,7 +9707,7 @@ snapshots:
fs.realpath: 1.0.0 fs.realpath: 1.0.0
inflight: 1.0.6 inflight: 1.0.6
inherits: 2.0.4 inherits: 2.0.4
minimatch: 10.2.1 minimatch: 10.2.4
once: 1.4.0 once: 1.4.0
path-is-absolute: 1.0.1 path-is-absolute: 1.0.1
optional: true optional: true
@@ -10288,7 +10288,7 @@ snapshots:
minimalistic-assert@1.0.1: {} minimalistic-assert@1.0.1: {}
minimatch@10.2.1: minimatch@10.2.4:
dependencies: dependencies:
brace-expansion: 5.0.3 brace-expansion: 5.0.3