Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.4.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.4)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

…tch-3.1.4

chore(deps): bump minimatch from 3.1.2 to 3.1.4

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.9 to 7.5.10.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.9...v7.5.10)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add detection for more potential attack vectors through `git -c` configuration switches

…5.10

chore(deps): bump tar from 7.5.9 to 7.5.10

* Use a `pathspec` wrapper for remote and local paths when using `git.clone` and `git.mirror`

Extract `clone` methods to `SimpleGitApi` base class.

* Fix block-unsafe test now handled with pathspec

* Restore ability to use `-b non-default-branch` in `git.clone`

Closes #1137

* Add tests for unsafe `-u` switch detection

* Add documentation for the use of pathspecs

Version Packages