[Snyk] Upgrade @crowdin/cli from 3.6.1 to 3.7.8

[snyk-bot]

Snyk has created this PR to upgrade @crowdin/cli from 3.6.1 to 3.7.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 13 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2022-02-18.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MINIMIST-2429795	292/1000 Why? Proof of Concept exploit, CVSS 3.7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @crowdin/cli

• 3.7.8 - 2022-02-18
  

  Updated

  • Update jDeploy to 2.0.11 (#426)
  • Bump shelljs from 0.8.4 to 0.8.5 (#424)

  Fixed

  • Fix relative base paths ('.', '..') (#432)
  • Fix 'download sources' command on Windows (#433)

  ---

  Note!

  In this release, we have fixed unobvious and buggy behavior with relative base_path that may cause consequences in some cases. For more details see #439 (comment)

• 3.7.7 - 2022-01-14
  

  Updated

  • Update log4j to 2.17.1 (#421) @ BadDaemon

  Fixed

  • Fix installation and uninstall scripts (#422) @ BadDaemon
• 3.7.6 - 2022-01-11
  

  Updated

  • Update TM and Glossary uploads: '--language' is required for creating new instances (#419)
• 3.7.5 - 2022-01-10
  

  Updated

  • Update gradle to 7.3.1 (#414) @ Myself5

  Fixed

  • Fix regex building from path on Windows (#417) @ frombetelgeuse
• 3.7.4 - 2021-12-17
  

  Updated

  • Update log4j to 2.16.0 (#413)
• 3.7.3 - 2021-12-14
  

  Updated

  • Update log4j to 2.15.0 (#410)

  Fixed

  • Fix 'streamIsEmpty' error (#409)
• 3.7.2 - 2021-11-19
  

  Updated

  • Add check if an archive is empty and add a message when there are no files to the 'download' command (#406)
  • Improve timing for checking building translations (#406)

  Fixed

  • Fix %original_path% placeholder for downloading (#406)
• 3.7.1 - 2021-10-28
  

  Added

  • Add croql parameter to string list (#401)

  Updated

  • Minor text improvement for messages.properties (#403)

  Fixed

  • Fix selecting source files with dest param for download sources, dryrun translations and download commands (#399)
  • Little fix for generate command (#400)
• 3.7.0 - 2021-09-17
  

  Added

  • Add new branch subcommands (#393)
  • Add custom_segmentation field support in config (#389)
  • Add --branch param for string list command (#389)

  Updated

  • Improve --delete-obsolete logic (#394)
  • Remove requirement for files block for some commands (#393)

  Fixed

  • Fix showing New version banner with --plain param (#389)
  • Fix message in authorizing via browser (#389)
  • Fix dest (#396)
  • Fix exception handling at uploading file to storage in upload sources action (#389)
• 3.6.5 - 2021-08-20
  

  Added

  • Add --branch option for status commands (#374)
  • Add --delete-obsolete option to upload sources command (#374)
  • Add --label option to string add and string edit commands (#384)

  Fixed

  • Fix uploading XLSX files (#377)
  • Fix not showing all omitted files and improve building export patterns (#378)
• 3.6.4 - 2021-07-08
• 3.6.3 - 2021-07-06
• 3.6.2 - 2021-06-23
• 3.6.1 - 2021-05-14

from @crowdin/cli GitHub release notes

Commit messages

Package name: @crowdin/cli

• 46ca4bf Merge pull request [Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.0.1 #434 from crowdin/Version-3.7.8
• 8e90c22 Merge pull request [Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.54.0 #432 from crowdin/fix-relative-base-path
• fb12ec3 Fix NPE
• e4c73bd Fix relative base paths for params
• 2f40d82 Merge pull request [Snyk] Upgrade @docusaurus/core from 2.0.0-beta.0 to 2.0.1 #433 from crowdin/fix-download-sources-on-windows
• 4e94fb5 Version 3.7.8
• 50d2d82 Fix 'download sources' command on Windows
• 52ebfd0 Fix relative base paths('.', '..')
• 90b6206 Merge pull request [Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.0.1 #426 from crowdin/jDeploy-update
• de1851a Update jDeploy to 2.0.11
• 0fb37e5 Merge pull request [Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.53.0 #424 from crowdin/dependabot/npm_and_yarn/shelljs-0.8.5
• 16dd0da Bump shelljs from 0.8.4 to 0.8.5
• f431eb6 Merge pull request [Snyk] Security upgrade react-scripts from 4.0.3 to 5.0.0 #423 from crowdin/Version-3.7.7
• be1d184 Version 3.7.7
• 66297ac Merge pull request [Snyk] Upgrade eslint-plugin-react from 7.23.2 to 7.31.0 #422 from BadDaemon/cli3-bash-install
• 59753ea Merge pull request [Snyk] Upgrade @docusaurus/preset-classic from 2.0.0-beta.0 to 2.0.1 #421 from BadDaemon/cli3
• 4fc5bde Fix installation and uninstall scripts
• 75a01d7 Update log4j to 2.17.1
• e635fdc Merge pull request [Snyk] Upgrade @docusaurus/theme-search-algolia from 2.0.0-beta.0 to 2.0.1 #420 from crowdin/Version-3.7.6
• 896ba19 Merge pull request [Snyk] Upgrade @docusaurus/core from 2.0.0-beta.0 to 2.0.1 #419 from crowdin/update-tm-and-glossary-uploads
• fab507c Use crowdin-api-client-java v1.3.17
• 6eb55e4 Version 3.7.6
• 361f10a Update TM and Glossary uploads: '--language' is required for creating new instances
• 22722f5 Merge pull request [Snyk] Upgrade @solana/web3.js from 1.31.0 to 1.53.0 #417 from crowdin/fix-regex

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs