[Snyk] Upgrade hosted-git-info from 2.5.0 to 2.8.9

[Redwoodtj]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade hosted-git-info from 2.5.0 to 2.8.9.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 14 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2021-04-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: hosted-git-info

• 2.8.9 - 2021-04-07
  

  chore(release): 2.8.9

• 2.8.8 - 2020-02-29
  

  chore(release): 2.8.8

• 2.8.7 - 2020-02-26
• 2.8.6 - 2020-02-25
• 2.8.5 - 2019-10-07
• 2.8.4 - 2019-08-12
• 2.8.3 - 2019-08-12
• 2.8.2 - 2019-08-05
• 2.8.1 - 2019-08-05
• 2.8.0 - 2019-08-05
• 2.7.1 - 2018-07-07
• 2.7.0 - 2018-07-06
• 2.6.1 - 2018-06-25
• 2.6.0 - 2018-03-07
• 2.5.0 - 2017-06-26

from hosted-git-info GitHub release notes

Commit messages

Package name: hosted-git-info

• 8d4b369 chore(release): 2.8.9
• 29adfe5 fix: backport regex fix from doc: fixes grammar nodejs/node#76
• afeaefd chore(release): 2.8.8
• 5038b18 fix: My contribution to this logo throw in. nodejs/node#61 & stream.read(0) should not trigger the end event if there is no underlying data nodejs/node#65 addressing issues w/ url.URL implmentation which regressed node 6 support
• 7440afa chore(release): 2.8.7
• 2d0bb66 fix: Do not attempt to use url.URL when unavailable
• f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
• e1b83df chore(release): 2.8.6
• ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
• 624fd6f chore(release): 2.8.5
• e8325b5 fix: updated pathmatch for gitlab
• 4e4ea0f test: added script to get coverage report
• 4eb69eb test: removed unused testing structure
• ba44d9f test: moved all github url tests together
• 8d24551 test: added refactered tests for bitbucket
• 1fd9d66 test: added ignore; for 100% testing (this seems wonky)
• 921e6dd test: added basic test for ._fill() method
• ffe056f fix: updated pathmatch for gitlab
• 53364f9 test: added refactered tests for gists
• 888f9b4 test: added default fixtures and github specific fixtures
• 3d1ad71 chore(release): 2.8.4
• 2070453 chore: add npm dist-tag for legacy publishes
• f392f82 use var instead of let/const for ancient nodes
• cbf63b7 chore(release): 2.8.3

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs