M3 Security Fixes for Pass 34

This commit is contained in:
Mark Gregory
2026-09-17 11:38:16 +01:00
parent 0c445f89af
commit a25d799d13
+22 -24
View File
@@ -1,55 +1,54 @@
mode: 'absorb' # or 'increment' mode: increment
blade-directive: version blade-directive: version
current: current:
label: v label: v
major: 1 major: 1
minor: 1 minor: 1
patch: 33 patch: 34
prerelease: prerelease: null
buildmetadata: buildmetadata: null
commit: 100001 commit: 100001
timestamp: timestamp:
mode: absorb mode: absorb
year: year: null
month: month: null
day: day: null
hour: hour: null
minute: minute: null
second: second: null
timezone: timezone: null
commit: commit:
mode: absorb mode: absorb
length: 6 length: 6
increment-by: 1 increment-by: 1
git: git:
from: 'local' # or "remote" from: local
commit: commit:
local: 'git rev-parse --verify HEAD' local: 'git rev-parse --verify HEAD'
remote: 'git ls-remote {$repository}' remote: 'git ls-remote {$repository}'
branch: refs/heads/master branch: refs/heads/master
repository: '' ### you can use config() to get it here: {{ config('version.git.remote.repository') }}. Do not use env() repository: ''
version: version:
local: 'git describe' local: 'git describe'
remote: 'git ls-remote {$repository} | grep tags/ | grep -v {} | cut -d / -f 3 | sort --version-sort | tail -1' remote: 'git ls-remote {$repository} | grep tags/ | grep -v {} | cut -d / -f 3 | sort --version-sort | tail -1'
matcher: '/^(?P<label>[v|V]*[er]*[sion]*)[\.|\s]*(?P<major>0|[1-9]\d*)\.(?P<minor>0|[1-9]\d*)\.(?P<patch>0|[1-9]\d*)(?:-(?P<prerelease>(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+(?P<buildmetadata>[0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/' matcher: '/^(?P<label>[v|V]*[er]*[sion]*)[\.|\s]*(?P<major>0|[1-9]\d*)\.(?P<minor>0|[1-9]\d*)\.(?P<patch>0|[1-9]\d*)(?:-(?P<prerelease>(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+(?P<buildmetadata>[0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/'
timestamp: timestamp:
local: 'git show -s --format=%ci' local: 'git show -s --format=%ci'
remote: 'git show -s --format=%ci origin/master' ## we will have to find a better way remote: 'git show -s --format=%ci origin/master'
format: format:
regex: regex:
optional_bracket: '\[(?P<prefix>.*?)(?P<spaces>\s*)(?P<delimiter>\?\=)(?P<optional>.*?)\]' optional_bracket: '\[(?P<prefix>.*?)(?P<spaces>\s*)(?P<delimiter>\?\=)(?P<optional>.*?)\]'
label: "{$label}" label: '{$label}'
major: "{$major}" major: '{$major}'
minor: "{$minor}" minor: '{$minor}'
patch: "{$patch}" patch: '{$patch}'
prerelease: "{$prerelease}" prerelease: '{$prerelease}'
buildmetadata: "{$buildmetadata}" buildmetadata: '{$buildmetadata}'
commit: "{$commit}" commit: '{$commit}'
version: 'version {$major}.{$minor}.{$patch} (commit {$commit})' version: 'version {$major}.{$minor}.{$patch} (commit {$commit})'
version-only: 'version {$major}.{$minor}.{$patch}' version-only: 'version {$major}.{$minor}.{$patch}'
## Bracket enclosed expressions "[.?{$variable}]" are only rendered if the ?={$variable} is filled
full: '{$version-only}[.?={$prerelease}][+?={$buildmetadata}] (commit {$commit})' full: '{$version-only}[.?={$prerelease}][+?={$buildmetadata}] (commit {$commit})'
compact: "v{$major}.{$minor}.{$patch}-{$commit}" compact: 'v{$major}.{$minor}.{$patch}-{$commit}'
timestamp-year: '{$timestamp.year}' timestamp-year: '{$timestamp.year}'
timestamp-month: '{$timestamp.month}' timestamp-month: '{$timestamp.month}'
timestamp-day: '{$timestamp.day}' timestamp-day: '{$timestamp.day}'
@@ -59,4 +58,3 @@ format:
timestamp-timezone: '{$timestamp.timezone}' timestamp-timezone: '{$timestamp.timezone}'
timestamp-datetime: '{$timestamp.year}-{$timestamp.month}-{$timestamp.day} {$timestamp.hour}:{$timestamp.minute}:{$timestamp.second}' timestamp-datetime: '{$timestamp.year}-{$timestamp.month}-{$timestamp.day} {$timestamp.hour}:{$timestamp.minute}:{$timestamp.second}'
timestamp-full: '{$timestamp.year}-{$timestamp.month}-{$timestamp.day} {$timestamp.hour}:{$timestamp.minute}:{$timestamp.second} {$timestamp.timezone}' timestamp-full: '{$timestamp.year}-{$timestamp.month}-{$timestamp.day} {$timestamp.hour}:{$timestamp.minute}:{$timestamp.second} {$timestamp.timezone}'
## add as many formats as you need !!!!