[Snyk] Fix for 2 vulnerabilities #64
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-BRACES-6838727
Why? Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-MICROMATCH-6838728
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: check-dependencies
-
2.0.0 - 2023-11-15
- support npm package aliases (#50)
- reduced a number of external dependencies
- dropped the callback interface - use promises instead
- dropped the
- CLI argument parsing is more strict now; camelCase parameter versions like
- dropped Bower support
- dropped support for Node.js
-
1.1.1 - 2023-11-14
-
1.1.0 - 2017-08-16
- Always run the install command if prune is necessary.
- Unify the Windows & UNIX spawnSync code paths using
- Officially support Node.js 8 & npm 5
from check-dependencies GitHub release notesNotable non-breaking changes:
npm pruneis no longer called asnpm installalready prunesBreaking changes:
checkCustomPackageNamesoption--packageDirare no longer supported; use their kebab-case versions like--package-dir.<18.3Add basic validation of the
packageManageroption; document that it's not safe to pass untrusted input there.shell: truewhere supported.Package name: jest
Blog post: https://jestjs.io/blog/2022/08/25/jest-29
Features
[expect][BREAKING] Differentiate betweenMatcherContextMatcherUtilsandMatcherStatetypes (#13141)[jest-circus]Add support fortest.failing.each(#13142)[jest-config][BREAKING] MakesnapshotFormatdefault toescapeString: falseandprintBasicPrototype: false(#13036)[jest-config][BREAKING] Remove undocumentedcollectCoverageOnlyFromoption (#13156)[jest-environment-jsdom][BREAKING] Upgrade tojsdom@20(#13037, #13058)[@ jest/globals]Addjest.Mocked,jest.MockedClass,jest.MockedFunctionandjest.MockedObjectutility types (#12727)[jest-mock][BREAKING] RefactorMocked*utility types.MaybeMockedDeepandMaybeMockedbecameMockedandMockedShallowrespectively; only deep mocked variants ofMockedClass,MockedFunctionandMockedObjectare exported (#13123, #13124)[jest-mock][BREAKING] Change the defaultjest.mockedhelper’s behavior to deep mocked (#13125)[jest-snapshot][BREAKING] Letbabelfind config when updating inline snapshots (#13150)[@ jest/test-result, @ jest/types][BREAKING] ReplaceBytesandMillisecondstypes withnumber(#13155)[jest-worker]AddsworkerIdleMemoryLimitoption which is used as a check for worker memory leaks >= Node 16.11.0 and recycles child workers as required (#13056, #13105, #13106, #13107)[pretty-format][BREAKING] RemoveConvertAnsiplugin in favour ofjest-serializer-ansi-escapes(#13040)[pretty-format]Allow to opt out from sorting object keys withcompareKeys: null(#12443)Fixes
[jest-config]Fix testing multiple projects with TypeScript config files (#13099)[@ jest/expect-utils]Fix deep equality of ImmutableJS Record (#13055)[jest-haste-map]Increase the maximum possible file size that jest-haste-map can handle (#13094)[jest-runtime]Properly support CJS re-exports from dual packages (#13170)[jest-snapshot]MakeprettierPathoptional inSnapshotState(#13149)[jest-snapshot]Fix parsing error from inline snapshot files withJSX(#12760)[jest-worker]When a process runs out of memory worker exits correctly and doesn't spin indefinitely (#13054)Chore & Maintenance
[*][BREAKING] Drop support for Node v12 and v17 (#13033)[docs]Fix webpack name (#13049)[docs]Explicit how to setnfor--bail(#13128)[docs]Update Enzyme URL (#13166)[jest-leak-detector]Remove support forweak-napi(#13035)[jest-snapshot][BREAKING] RequirerootDiras argument toSnapshotState(#13150)New Contributors
Full Changelog: v28.1.3...v29.0.0
What's Changed
Mocked*utility types by @ mrazauskas in #13123MockedShallowtype by @ mrazauskas in #13124jest.Mocked,jest.MockedClass,jest.MockedFunctionandjest.MockedObjectutility types by @ mrazauskas in #12727jest.mockedhelper’s behaviour to deep mocked by @ mrazauskas in #13125SnapshotStateby @ SimenB in #13149babelfind config when updating inline snapshots by @ SimenB in #13150New Contributors
Full Changelog: v29.0.0-alpha.5...v29.0.0-alpha.6
What's Changed
New Contributors
Full Changelog: v29.0.0-alpha.4...v29.0.0-alpha.5
What's Changed
New Contributors
Full Changelog: v29.0.0-alpha.3...v29.0.0-alpha.4
Features
[jest-worker]AddsworkerIdleMemoryLimitoption which is used as a check for worker memory leaks >= Node 16.11.0 and recycles child workers as required. (#13056)Fixes
[jest-haste-map]Increase the maximum possible file size that jest-haste-map can handle (#13094)New Contributors
Full Changelog: v29.0.0-alpha.1...v29.0.0-alpha.3
Features
[pretty-format][BREAKING] RemoveConvertAnsiplugin in favour ofjest-serializer-ansi-escapes(#13040)Fixes
[jest-worker]When a process runs out of memory worker exits correctly and doesn't spin indefinitely (#13054)[@ jest/expect-utils]Fix deep equality of ImmutableJS Record (#13055)New Contributors
Full Changelog: v29.0.0-alpha.0...v29.0.0-alpha.1
Features
[jest-config][BREAKING] MakesnapshotFormatdefault toescapeString: falseandprintBasicPrototype: false(#13036)[jest-environment-jsdom][BREAKING] Upgrade tojsdom@20(#13037)Chore & Maintenance
[*][BREAKING] Drop support for Node v12 and v17 (#13033)[jest-leak-detector]Remove support forweak-napi(#13035)Full Changelog: v28.1.3...v29.0.0-alpha.0
Features
[jest-leak-detector]Use nativeFinalizationRegistrywhen it exists to get rid of external C dependency (#12973)Fixes
[jest-changed-files]Fix a lock-up after repeated invocations (#12757)[@ jest/expect-utils]Fix deep equality of ImmutableJS OrderedSets (#12977)[jest-mock]Add index signature support forspyOntypes (#13013, #13020)[jest-snapshot]Fix indentation of awaited inline snapshots (#12986)Chore & Maintenance
[*]Replace internal usage ofpretty-format/ConvertAnsiwithjest-serializer-ansi-escapes(#12935, #13004)[docs]Update spyOn docs (#13000)New Contributors
Full Changelog: v28.1.2...v28.1.3
Fixes
[jest-runtime]Avoid star type import from@ jest/globals(#12949)Chore & Maintenance
[docs]Mention that jest-codemods now supports Sinon (#12898)New Contributors
Full Changelog: v28.1.1...v28.1.2
Features
[jest]ExposeConfigtype (#12848)[@ jest/reporters]ImproveGitHubActionsReporters annotation format (#12826)[@ jest/types]Infer argument types passed totestanddescribecallback functions fromeachtables (#12885, #12905)Fixes
[@ jest/expect-utils]Fix deep equality of ImmutableJS OrderedMaps (#12763)[jest-docblock]Handle multiline comments in parseWithComments (#12845)[jest-mock]ImprovespyOnerror messages (#12901)[jest-runtime]Correctly report V8 coverage withresetModules: true(#12912)[jest-worker]MakeJestWorkerFarmhelper type to include methods of worker module that take more than one argument (#12839)Chore & Maintenance
[docs]Updated docs to indicate thatjest-environment-jsdomis a separate package #12828[docs]Document the comments used by coverage providers #12835[docs]Usedocusaurus-remark-plugin-tab-blocksto format tabs with code examples (#12859)[jest-haste-map]Bumpwalkerversion (#12324)[expect]Adjust typings oflastCalledWith,nthCalledWith,toBeCalledWithmatchers to allow a case there a mock was called with no arguments (#12807)[@ jest/expect-utils]Fix deep equality of ImmutableJS Lists (#12763)[jest-core]Do not collectSIGNREQUESTas open handles (#12789)New Contributors
Full Changelog: v28.1.0...v28.1.1