[Snyk] Security upgrade simple-git from 3.28.0 to 3.32.0

[mustansirali]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Command Injection SNYK-JS-SIMPLEGIT-16032290	853

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Command Injection

[augmentcode]

🤖 Augment PR Summary

Summary: Updates the simple-git dependency to address a reported command-injection vulnerability.

Changes:

• Bumped simple-git in package.json from ^3.0.0 to ^3.32.0 (with corresponding lockfile update)

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 1 suggestion posted.

Comment augment review to trigger a new review at any time.

[augmentcode]

package.json:28 – Since this is a security-driven bump, can you double-check package-lock.json actually resolves simple-git to >= 3.32.0 (e.g., via npm ci in CI) so installs don’t remain pinned to the previously vulnerable version?

Severity: medium

_{🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.}

[augment-app-staging]

Review completed. No suggestions at this time.

Code Review Triage 🛡️ · Low Risk

Recommendation: ✅ Approve — Low-Risk Change

Justification

This PR updates an npm dependency version (`simple-git`) and the lockfile to address a known vulnerability. No application source code or tests are modified.

If you don't agree with this auto-approval recommendation, please reach out to #feedback-code-review-agent.

Comment augment review to trigger a new review at any time.