[NuGetAuthenticateV0] semver CVE fixes (#20423)

* [NuGetAuthenticateV0] semver CVE fixes - Fixed semver CVE - bumped task version * NotationV0 semver fix * remove duplicate task-lib
microsoft · Sep 17, 2024 · c046308 · c046308
1 parent 359d29d
commit c046308
Show file tree

Hide file tree

Showing 8 changed files with 165 additions and 45 deletions.
diff --git a/Tasks/NotationV0/make.json b/Tasks/NotationV0/make.json
@@ -1,4 +1,12 @@
 {
+ "rm": [ 
+ {
+ "items": [
+ "node_modules/azure-pipelines-tasks-artifacts-common/node_modules/azure-pipelines-task-lib"
+ ],
+ "options": "-Rf"
+ }
+ ],
  "cp": [
  {
  "source": [

diff --git a/Tasks/NotationV0/package-lock.json b/Tasks/NotationV0/package-lock.json
diff --git a/Tasks/NotationV0/task.json b/Tasks/NotationV0/task.json
@@ -10,7 +10,7 @@
  "minimumAgentVersion": "2.144.0",
  "version": {
  "Major": 0,
- "Minor": 245,
+ "Minor": 246,
  "Patch": 0
  },
  "groups": [

diff --git a/Tasks/NotationV0/task.loc.json b/Tasks/NotationV0/task.loc.json
@@ -10,7 +10,7 @@
  "minimumAgentVersion": "2.144.0",
  "version": {
  "Major": 0,
- "Minor": 245,
+ "Minor": 246,
  "Patch": 0
  },
  "groups": [

diff --git a/Tasks/NuGetAuthenticateV0/package-lock.json b/Tasks/NuGetAuthenticateV0/package-lock.json
diff --git a/Tasks/NuGetAuthenticateV0/package.json b/Tasks/NuGetAuthenticateV0/package.json
@@ -23,9 +23,9 @@
  },
  "homepage": "https://github.com/Microsoft/azure-pipelines-tasks#readme",
  "dependencies": {
- "azure-pipelines-tasks-artifacts-common": "2.244.2",
+ "@types/node": "^16.11.39",
  "azure-pipelines-task-lib": "^4.2.0",
- "@types/node": "^16.11.39"
+ "azure-pipelines-tasks-artifacts-common": "^2.245.1"
  },
  "devDependencies": {
  "typescript": "4.0.2"

diff --git a/Tasks/NuGetAuthenticateV0/task.json b/Tasks/NuGetAuthenticateV0/task.json
@@ -13,7 +13,7 @@
  ],
  "version": {
  "Major": 0,
- "Minor": 244,
+ "Minor": 246,
  "Patch": 0
  },
  "deprecated": true,

diff --git a/Tasks/NuGetAuthenticateV0/task.loc.json b/Tasks/NuGetAuthenticateV0/task.loc.json
@@ -13,7 +13,7 @@
  ],
  "version": {
  "Major": 0,
- "Minor": 244,
+ "Minor": 246,
  "Patch": 0
  },
  "deprecated": true,