chore(deps): update dependency @finos/git-proxy to ^1.19.2 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@finos/git-proxy	^1.18.2 -> ^1.19.2

---

Release Notes

finos/git-proxy (@​finos/git-proxy)

v1.19.2

Compare Source

❗️ Important security updates ❗️

This release contains security fixes for newly discovered high severity issues. These issues were privately reported to the GitProxy & FINOS teams. Special thanks to the following individuals for their contributions:

• @​dgl for the initial report, analysis and reproductions
• @​jescalada @​fabiovincenzi @​06kellyjac for implementing & reviewing the various fixes

The following advisories are resolved in this release:

• GHSA-qr93-8wwf-22g4
• GHSA-xxmh-rf63-qwjv
• GHSA-39p2-8hq9-fwj6
• GHSA-v98g-8rqx-g93g

All GitProxy users & implementations are strongly advised to upgrade to this latest version to receive these critical fixes. Additional bug fixes and enhancements are included below.

What's Changed

• fix: additional user api leaks by @​andypols in https://github.com/finos/git-proxy/pull/1098
• fix(deps): update dependency body-parser to v2 - license-inventory - experimental/license-inventory/package.json by @​renovate[bot] inhttps://github.com/finos/git-proxy/pull/10877
• chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml by @​renovate[bot] inhttps://github.com/finos/git-proxy/pull/11122
• fix: updated URL for FINOS community slack channel by @​sam-holmes2 in https://github.com/finos/git-proxy/pull/1011
• docs: update SECURITY.md with reporting guidance by @​tabathad in https://github.com/finos/git-proxy/pull/1117
• fix: dependency vulnerability fixes by @​jescalada in https://github.com/finos/git-proxy/pull/1103
• fix: default config validation error and extras by @​jescalada in https://github.com/finos/git-proxy/pull/1124
• fix: parsePush regression on tmp directory by @​jescalada in https://github.com/finos/git-proxy/pull/1118

New Contributors

• @​tabathad made their first contribution in https://github.com/finos/git-proxy/pull/1117

Full Changelog: v1.19.1...v1.19.2

v1.19.1: Version 1.19.1

Compare Source

What's Changed

• fix: prevent non-admin users changing another user's gitAccount by @​andypols in https://github.com/finos/git-proxy/pull/1093
• refactor(tsx): Migrate React components to TSX by @​fabiovincenzi in https://github.com/finos/git-proxy/pull/984
• fix: only trim trailing .git not any match by @​06kellyjac in https://github.com/finos/git-proxy/pull/1094
• chore: bump by patch to v1.19.1 by @​jescalada in https://github.com/finos/git-proxy/pull/1102

Full Changelog: v1.19.0...v1.19.1

v1.19.0: Version 1.19.0

Compare Source

What's Changed

• chore(deps): update dependency @​types/node to ^22.15.34 - li-cli - experimental/li-cli/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1067
• chore(deps): update dependency @​finos/git-proxy to ^1.18.0 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1073
• chore(deps): update github-actions - workflows - .github/workflows/scorecard.yml by @​renovate in https://github.com/finos/git-proxy/pull/1072
• chore(deps): update dependency @​finos/git-proxy to ^1.18.2 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1074
• fix(deps): update dependency eslint to ^9.30.0 - website - website/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1075
• chore(deps): update dependency lint-staged to v16 - license-inventory - experimental/license-inventory/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1076
• chore(deps): update dependency node to v22 - workflows - .github/workflows/unused-dependencies.yml by @​renovate in https://github.com/finos/git-proxy/pull/1077
• chore(deps): update dependency sinon to v20 - - package.json by @​renovate in https://github.com/finos/git-proxy/pull/1078
• fix(deps): update dependency eslint to ^9.30.1 - website - website/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1079
• fix(deps): update npm - li-cli - experimental/li-cli/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1080
• chore(deps): update dependency sinon to v21 - - package.json by @​renovate in https://github.com/finos/git-proxy/pull/1081
• chore(deps): update grafana/grafana docker tag to v12 - license-inventory - experimental/license-inventory/docker-compose.yaml by @​renovate in https://github.com/finos/git-proxy/pull/1082
• fix(deps): update dependency body-parser to v2 - - package.json by @​renovate in https://github.com/finos/git-proxy/pull/1084
• fix(proxy): preserve original Git pack POST streams before validation by @​fabiovincenzi in https://github.com/finos/git-proxy/pull/1060
• feat: mongo connection string & cookie secret from env vars by @​coopernetes in https://github.com/finos/git-proxy/pull/1086
• fix(deps): update dependency zod to ^3.25.73 - li-cli - experimental/li-cli/package.json by @​renovate in https://github.com/finos/git-proxy/pull/1085
• fix: updated README and documentation site with info on community meeting by @​sam-holmes2 in https://github.com/finos/git-proxy/pull/1026
• chore: add @​jescalada as a featured maintainer on docs site and remov… by @​JamieSlome in https://github.com/finos/git-proxy/pull/1097
• fix: use a public user object to prevent passwords and other secrets … by @​andypols in https://github.com/finos/git-proxy/pull/1090
• chore: bump by minor to v1.19.0 by @​JamieSlome in https://github.com/finos/git-proxy/pull/1099

New Contributors

• @​sam-holmes2 made their first contribution in https://github.com/finos/git-proxy/pull/1026
• @​andypols made their first contribution in https://github.com/finos/git-proxy/pull/1090

Full Changelog: v1.18.2...v1.19.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name	Link
🔨 Latest commit	0be78ff
🔍 Latest deploy log	https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/688ba818b246750008eb456a

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.62%. Comparing base (b4d1f86) to head (0be78ff).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1128   +/-   ##
=======================================
  Coverage   79.62%   79.62%           
=======================================
  Files          59       59           
  Lines        2479     2479           
  Branches      289      289           
=======================================
  Hits         1974     1974           
  Misses        461      461           
  Partials       44       44           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.