steveukx · steveukx · Sep 26, 2026 · Sep 26, 2026
diff --git a/.changeset/fresh-mugs-love.md b/.changeset/fresh-mugs-love.md
diff --git a/packages/argv-parser/CHANGELOG.md b/packages/argv-parser/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @simple-git/argv-parser
 
+## 2.0.1
+
+### Patch Changes
+
+- 68874c2: Add `VISUAL` environment variable to set of `allowUnsafeEditor` environment variables.
+
+  Thanks to @oss-security-shopify for identifying the vulnerability.
+
 ## 2.0.0
 
 ### Major Changes
@@ -14,6 +22,7 @@
 ### Patch Changes
 
 - c427fba: Additional argument parser vulnerability checks:
+
   - Thanks to @bhaswanthc, @mrillicit, @avrlab233, @avrlab233 for identifying `include.path`, `filter.*.process`
   - Thanks to @tejas619 for identifying `url.*.insteadOf`
 

diff --git a/packages/argv-parser/package.json b/packages/argv-parser/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@simple-git/argv-parser",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "publish": {
     "main": "dist/index.cjs",
     "module": "dist/index.mjs",

diff --git a/packages/test-javascript-cjs-consumer/CHANGELOG.md b/packages/test-javascript-cjs-consumer/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @simple-git/test-javascript-cjs-consumer
 
+## 1.0.4
+
+### Patch Changes
+
+- Updated dependencies [68874c2]
+  - simple-git@4.0.2
+
 ## 1.0.3
 
 ### Patch Changes

diff --git a/packages/test-javascript-cjs-consumer/package.json b/packages/test-javascript-cjs-consumer/package.json
@@ -2,7 +2,7 @@
   "name": "@simple-git/test-javascript-cjs-consumer",
   "private": true,
   "type": "commonjs",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "scripts": {
     "test:consumer": "node test"
   },

diff --git a/packages/test-javascript-esm-consumer/CHANGELOG.md b/packages/test-javascript-esm-consumer/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @simple-git/test-javascript-esm-consumer
 
+## 1.0.4
+
+### Patch Changes
+
+- Updated dependencies [68874c2]
+  - simple-git@4.0.2
+
 ## 1.0.3
 
 ### Patch Changes

diff --git a/packages/test-javascript-esm-consumer/package.json b/packages/test-javascript-esm-consumer/package.json
@@ -2,7 +2,7 @@
   "name": "@simple-git/test-javascript-esm-consumer",
   "private": true,
   "type": "module",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "scripts": {
     "test:consumer": "node test.mjs"
   },

diff --git a/packages/test-typescript-cjs-consumer/CHANGELOG.md b/packages/test-typescript-cjs-consumer/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @simple-git/test-typescript-cjs-consumer
 
+## 1.0.4
+
+### Patch Changes
+
+- Updated dependencies [68874c2]
+  - simple-git@4.0.2
+
 ## 1.0.3
 
 ### Patch Changes

diff --git a/packages/test-typescript-cjs-consumer/package.json b/packages/test-typescript-cjs-consumer/package.json
@@ -2,7 +2,7 @@
   "name": "@simple-git/test-typescript-cjs-consumer",
   "private": true,
   "type": "commonjs",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "scripts": {
     "test:consumer": "pnpm test:consumer:build && pnpm test:consumer:test",
     "test:consumer:build": "tsc",

diff --git a/packages/test-typescript-esm-consumer/CHANGELOG.md b/packages/test-typescript-esm-consumer/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @simple-git/test-typescript-esm-consumer
 
+## 1.0.4
+
+### Patch Changes
+
+- Updated dependencies [68874c2]
+  - simple-git@4.0.2
+
 ## 1.0.3
 
 ### Patch Changes

diff --git a/packages/test-typescript-esm-consumer/package.json b/packages/test-typescript-esm-consumer/package.json
@@ -2,7 +2,7 @@
   "name": "@simple-git/test-typescript-esm-consumer",
   "private": true,
   "type": "module",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "scripts": {
     "test:consumer": "pnpm test:consumer:build && pnpm test:consumer:test",
     "test:consumer:build": "tsc",

diff --git a/packages/test-typescript-strict-cjs-consumer/CHANGELOG.md b/packages/test-typescript-strict-cjs-consumer/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @simple-git/test-typescript-strict-cjs-consumer
 
+## 1.0.4
+
+### Patch Changes
+
+- Updated dependencies [68874c2]
+  - simple-git@4.0.2
+
 ## 1.0.3
 
 ### Patch Changes

diff --git a/packages/test-typescript-strict-cjs-consumer/package.json b/packages/test-typescript-strict-cjs-consumer/package.json
@@ -2,7 +2,7 @@
   "name": "@simple-git/test-typescript-strict-cjs-consumer",
   "private": true,
   "type": "commonjs",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "scripts": {
     "test:consumer": "pnpm test:consumer:build && pnpm test:consumer:test",
     "test:consumer:build": "tsc",

diff --git a/packages/test-typescript-strict-esm-consumer/CHANGELOG.md b/packages/test-typescript-strict-esm-consumer/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @simple-git/test-typescript-strict-esm-consumer
 
+## 1.0.4
+
+### Patch Changes
+
+- Updated dependencies [68874c2]
+  - simple-git@4.0.2
+
 ## 1.0.3
 
 ### Patch Changes

diff --git a/packages/test-typescript-strict-esm-consumer/package.json b/packages/test-typescript-strict-esm-consumer/package.json
@@ -2,7 +2,7 @@
   "name": "@simple-git/test-typescript-strict-esm-consumer",
   "private": true,
   "type": "module",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "scripts": {
     "test:consumer": "pnpm test:consumer:build && pnpm test:consumer:test",
     "test:consumer:build": "tsc",

diff --git a/simple-git/CHANGELOG.md b/simple-git/CHANGELOG.md
@@ -1,5 +1,16 @@
 # Change History & Release Notes
 
+## 4.0.2
+
+### Patch Changes
+
+- 68874c2: Add `VISUAL` environment variable to set of `allowUnsafeEditor` environment variables.
+
+  Thanks to @oss-security-shopify for identifying the vulnerability.
+
+- Updated dependencies [68874c2]
+  - @simple-git/argv-parser@2.0.1
+
 ## 4.0.1
 
 ### Patch Changes
@@ -37,6 +48,7 @@
   // v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError
   git.raw("fetch", "--config=user.name=me", "...");
   ```
+
   Thanks to @anir0y, @CFionaBF, @Leeziao, @internetteletubbie, @idisdi, @the-vibe-dev,
   @D7EAD, @dellalibera, @gdegrange, @bilguunbicktivism, @cruzryan, @b1ue0ceanRun, @oss-security-shopify
   for identifying the vulnerability.

diff --git a/simple-git/package.json b/simple-git/package.json
@@ -1,7 +1,7 @@
 {
   "name": "simple-git",
   "description": "Simple GIT interface for node.js",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "author": "Steve King <steve@mydev.co>",
   "contributors": [
     {