[Snyk] Security upgrade simple-git from 3.5.0 to 3.16.0

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Remote Code Execution (RCE) SNYK-JS-SIMPLEGIT-3177391	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: simple-git

The new version differs by 108 commits.

• d716d32 Merge pull request Quote: can get stuck with empty source placeholder WordPress/gutenberg#877 from steveukx/changeset-release/main
• 1a12952 Version Packages
• 12b8fc3 Merge pull request Editor: add suggestedPostFormat selector. WordPress/gutenberg#864 from steveukx/dependabot/npm_and_yarn/minimatch-3.0.5
• ec97a39 Block unsafe pack (push --exec) (The server-side rendering block matcher doesn't match blocks with - (hyphen) WordPress/gutenberg#882)
• 0a623e5 Feat/unsafe pack (Only show inline boundaries on focus WordPress/gutenberg#881)
• b45d08b Merge pull request Remove wp.element; embrace React WordPress/gutenberg#876 from steveukx/feat/support-checkout-B
• 97fde2c Add support for using the `-B` modifier instead of the default `-b` when using `checkoutBranch` / `checkoutLocalBranch`.
• edfd459 Update readme.md
• 459ec92 Merge pull request Placeholder styling and block styling can conflict. WordPress/gutenberg#868 from steveukx/changeset-release/main
• c9fc61f Version Packages
• de570ac Fix/non strings (Framework: redirecting to wp-admin URL WordPress/gutenberg#867)
• 7efdcbc chore(deps): bump minimatch from 3.0.4 to 3.0.5
• e1d66b6 Merge pull request Register mce plugin scripts WordPress/gutenberg#863 from steveukx/changeset-release/main
• d4764bf Version Packages
• 7746480 Chore: bump lerna, jest and create prettier workflow (Chrome: Adding the trash post link to the sidebar WordPress/gutenberg#862)
• 47030d5 Merge pull request Show UI on text selection WordPress/gutenberg#861 from steveukx/security/protocols
• 6b3c631 Create the `unsafe` plugin to configure how `simple-git` treats known potentially unsafe operations.
• 3324eed Merge pull request Sidebar: Add Featured Image panel WordPress/gutenberg#855 from steveukx/changeset-release/main
• e459622 Version Packages
• 2ea0231 Merge pull request Sidebar: Categories & Tags panel WordPress/gutenberg#854 from steveukx/chore/update-lerna
• 5a2e7e4 Add version parsing support for non-numeric patches (to include built… (Sidebar: Link to latest revision WordPress/gutenberg#853)
• 88fee05 Chore: bump lerna to latest `5.5.1`
• 0f964ba Merge pull request Add full-content tests for parsing + blocks list + serialization WordPress/gutenberg#849 from steveukx/changeset-release/main
• 6460a1f Version Packages

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Remote Code Execution (RCE)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
gutenberg	❌ Failed (Inspect)			Apr 24, 2024 6:43pm
gutenberg-wd9x	❌ Failed (Inspect)			Apr 24, 2024 6:43pm

[guardrails]

⚠️ We detected 1 security issue in this pull request:

Vulnerable Libraries (1)

Severity	Details
Critical	pkg:npm/simple-git@3.5.0 (t) upgrade to: 3.16.0

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.