[Snyk] Upgrade azure-pipelines-task-lib from 3.0.6-preview.1 to 3.4.0

[newf-bgreet]

Snyk has created this PR to upgrade azure-pipelines-task-lib from 3.0.6-preview.1 to 3.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 16 versions ahead of your current version.

• The recommended version was released 4 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Improper Privilege Management SNYK-JS-SHELLJS-2332187	586	Proof of Concept
	Infinite loop SNYK-JS-BRACEEXPANSION-15789759	586	No Known Exploit
	Inefficient Algorithmic Complexity SNYK-JS-BRACEEXPANSION-17706650	586	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	586	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	586	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	586	Proof of Concept

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: azure-pipelines-task-lib

• 3.4.0 - 2022-11-24
• 3.3.1 - 2022-05-26
• 3.2.1 - 2022-05-17
• 3.2.0 - 2022-02-21
• 3.1.10 - 2021-10-08
• 3.1.9 - 2021-09-02
• 3.1.8 - 2021-08-20
• 3.1.7 - 2021-08-11
• 3.1.6 - 2021-07-28
• 3.1.5 - 2021-07-20
• 3.1.4 - 2021-06-30
• 3.1.3 - 2021-06-07
• 3.1.2 - 2021-04-19
• 3.1.1 - 2021-04-19
• 3.1.0 - 2021-02-17
• 3.0.6-preview.2 - 2021-02-12
• 3.0.6-preview.1 - 2021-01-12

from azure-pipelines-task-lib GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[newf-bgreet]

This is a minor version upgrade from a preview release to a stable version. The risk is assessed as medium due to the lack of specific release notes for this exact version range and the potential for changes related to the Node.js execution handler.

Key Potential Impacts:

• Node.js Handler: The v3 branch of azure-pipelines-task-lib is primarily intended for use with the Node 10 execution handler in Azure Pipelines. Tasks using this library may need to ensure their task.json specifies the Node10 handler. Using a newer library with an older handler (e.g., Node 6) is not supported and can cause runtime failures.
• Preview Release: Upgrading from a preview version can introduce breaking changes that are not explicitly documented as the API surface is finalized for the stable release.

Recommendation:
Verify that the task.json for the pipeline task correctly specifies "execution": { "Node10": ... }. After upgrading, perform thorough testing to validate task functionality, especially if the previous implementation relied on the older Node 6 handler.

Source: Package documentation and release notes.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.