ChocPanda / cat-pun

MIT License
0 stars 1 forks source link

[Snyk] Security upgrade ava from 1.4.1 to 3.0.0 #49

Closed snyk-bot closed 3 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-DOTPROP-543489
Yes Proof of Concept
Commit messages
Package name: ava The new version differs by 164 commits.
  • b4cfc8d 3.0.0
  • 776788f Ship v3 🎉
  • 0d11ff7 More issue template tweaks
  • 9983976 Update various contributing documents and GitHub configuration
  • 5a33572 Fix fail-fast interrupt test
  • 61e0d05 Fix VSCode debugging instructions
  • 630aac3 Fix remaining AVA link
  • 5c8bcec Fix AVA link in snapshot reports
  • 7b20f6c Allow Node arguments to be configured
  • ad27246 3.0.0-beta.2
  • ae948d8 Lowercase CLI argument description asides
  • ac8c852 Update dependencies
  • 2bd890f Disable timeouts in debug mode
  • 15d73ca Make console & process globals available to ava.config.js files
  • efa8635 Fix patterns and unpin picomatch
  • 580705e Fix --update-snapshots
  • cf26b6d Ensure t.assert() counts as a passed assertion
  • 82cef5c Add Selenium WebDriverJS recipe
  • 090884b Use question mark to indicate optional argument in docs
  • 7c352db 3.0.0-beta.1
  • 66dd09f Rebuild package-lock
  • f02ac7a Install latest @ava/babel
  • 8bdcf8b Anticipate asynchronous loads
  • e919b40 Pass extensions to load as modules to Babel provider
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic