CircleCI-Public / node-orb

An orb for working with Node.js on CircleCI
https://circleci.com/orbs/registry/orb/circleci/node
MIT License
52 stars 80 forks source link

[Snyk] Upgrade mocha from 9.1.3 to 9.2.1 #136

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade mocha from 9.1.3 to 9.2.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Information Exposure
SNYK-JS-NANOID-2332193
521/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 4
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: mocha from mocha GitHub release notes
Commit messages
Package name: mocha
  • 547ffd7 build(v9.2.1): release
  • ca7432a build(v9.2.1): update CHANGELOG [ci skip]
  • 86305cf fix: wrong error thrown while loading config files (#4832)
  • 11c4560 fix: configurable max diff size (#4799)
  • 509938d doc: fix to show sponsors in narrow view (#4793)
  • cc51b8f build(v9.2.0): release
  • dea3115 build(v9.2.0): update CHANGELOG [ci skip]
  • 1825645 chore: update dependencies (#4818)
  • bc0fda2 chore: update some devDependencies (#4816)
  • 8b089a2 feat(parallel): assign each worker a worker-id (#4813)
  • 9fbf3ae chore: run Netlify deploy on Node v16 (#4778) [ci skip]
  • f297790 chore: switch 'linkify-changelog.js' to ESM (#4812) [ci skip]
  • 0a1b7f8 build(v9.1.4): release
  • a04d050 build(v9.1.4): update CHANGELOG [ci skip]
  • baa12fd fix: wrong error thrown if loader is used (#4807)
  • 60fafa4 Update copyright year in LICENSE (#4804)
  • 3b4cc05 chore(devDeps): remove 'cross-spawn' (#4779)
  • a99d40c chore(ci): add Node v17 to test matrix (#4777)
  • ac43029 chore(devDeps): update 'prettier' (#4776)
  • 9c9fcb5 chore: update some devDependencies (#4775)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs