Merge branch 'security-backport-2-2-1' into 'master'

Backport 2.2.2 security release to master

See merge request gitlab-org/security/gitlab-vscode-extension!4

CHANGELOG.md

@@ -13,6 +13,16 @@
 
 - Click on merge request "for current branch" doesn't do anything
 
+## v2.2.2 - 2020-06-19
+
+- Fix dependency issues caused by publishing the extension using `yarn`
+
+## v2.2.1 - 2020-06-19
+
+### Security
+
+- [CVE-2020-13279](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13279) Prevent possible client side code execution, https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170
+
 ## v2.2.0 - 2019-11-06
 
 - [Experimental Feature](https://gitlab.com/fatihacet/gitlab-vscode-extension#experimental-features): View Merge Request details and comments in VSCode. Click a Merge Request link from the sidebar and VSCode will open a new tab to show the Merge Request details. You can also directly comment on the Merge Request.

package.json

@@ -2,7 +2,7 @@
   "name": "gitlab-workflow",
   "displayName": "GitLab Workflow",
   "description": "GitLab VSCode integration",
-  "version": "2.2.0",
+  "version": "2.2.2",
   "publisher": "fatihacet",
   "license": "MIT",
   "repository": {

src/git_service.js

@@ -15,6 +15,7 @@ async function fetch(cmd, workspaceFolder) {
   try {
     output = await execa.stdout(git, args, {
       cwd: currentWorkspaceFolder,
+      preferLocal: false,
     });
   } catch (ex) {
     // Fail siletly