search

billmcchesney1 / node-jose

Apache License 2.0
0 stars 0 forks source link

chore(deps): update dependency mocha to v10 - autoclosed #78

Closed mend-for-github-com[bot] closed 1 month ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
mocha (source) devDependencies major ^8.1.3 -> ^10.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.5 CVE-2021-3807 #32
High 7.5 WS-2021-0638 #62
High 7.3 CVE-2020-7774 #11

Release Notes

mochajs/mocha (mocha) ### [`v10.1.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#1010--2022-10-16) [Compare Source](https://togithub.com/mochajs/mocha/compare/v10.0.0...v10.1.0) ##### :tada: Enhancements - [#​4896](https://togithub.com/mochajs/mocha/issues/4896): Browser: add support for `prefers-color-scheme: dark` ([**@​greggman**](https://togithub.com/greggman)) ##### :nut_and_bolt: Other - [#​4912](https://togithub.com/mochajs/mocha/issues/4912): Browser: increase contrast for replay buttons ([**@​JoshuaKGoldberg**](https://togithub.com/JoshuaKGoldberg)) - [#​4905](https://togithub.com/mochajs/mocha/issues/4905): Use standard `Promise.allSettled` instead of polyfill ([**@​outsideris**](https://togithub.com/outsideris)) - [#​4899](https://togithub.com/mochajs/mocha/issues/4899): Upgrade official GitHub actions to latest ([**@​ddzz**](https://togithub.com/ddzz)) - [#​4770](https://togithub.com/mochajs/mocha/issues/4770): Fix regex in function `clean`([**@​yetingli**](https://togithub.com/yetingli)) ### [`v10.0.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#1000--2022-05-01) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.2.2...v10.0.0) ##### :boom: Breaking Changes - [#​4845](https://togithub.com/mochajs/mocha/issues/4845): **Drop Node.js v12.x support** ([**@​juergba**](https://togithub.com/juergba)) - [#​4848](https://togithub.com/mochajs/mocha/issues/4848): Drop Internet-Explorer-11 support ([**@​juergba**](https://togithub.com/juergba)) - [#​4857](https://togithub.com/mochajs/mocha/issues/4857): Drop AMD/RequireJS support ([**@​juergba**](https://togithub.com/juergba)) - [#​4866](https://togithub.com/mochajs/mocha/issues/4866): Drop Growl notification support ([**@​juergba**](https://togithub.com/juergba)) - [#​4863](https://togithub.com/mochajs/mocha/issues/4863): Rename executable `bin/mocha` to `bin/mocha.js` ([**@​juergba**](https://togithub.com/juergba)) - [#​4865](https://togithub.com/mochajs/mocha/issues/4865): `--ignore` option in Windows: upgrade Minimatch ([**@​juergba**](https://togithub.com/juergba)) - [#​4861](https://togithub.com/mochajs/mocha/issues/4861): Remove deprecated `Runner` signature ([**@​juergba**](https://togithub.com/juergba)) ##### :nut_and_bolt: Other - [#​4878](https://togithub.com/mochajs/mocha/issues/4878): Update production dependencies ([**@​juergba**](https://togithub.com/juergba)) - [#​4876](https://togithub.com/mochajs/mocha/issues/4876): Add Node.js v18 to CI test matrix ([**@​outsideris**](https://togithub.com/outsideris)) - [#​4852](https://togithub.com/mochajs/mocha/issues/4852): Replace deprecated `String.prototype.substr()` ([**@​CommanderRoot**](https://togithub.com/CommanderRoot)) Also thanks to [**@​ea2305**](https://togithub.com/ea2305) and [**@​SukkaW**](https://togithub.com/SukkaW) for improvements to our documentation. ### [`v9.2.2`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#922--2022-03-11) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.2.1...v9.2.2) ##### :bug: Fixes - [#​4842](https://togithub.com/mochajs/mocha/issues/4842): Loading of reporter throws wrong error ([**@​juergba**](https://togithub.com/juergba)) - [#​4839](https://togithub.com/mochajs/mocha/issues/4839): `dry-run`: prevent potential call-stack crash ([**@​juergba**](https://togithub.com/juergba)) ##### :nut_and_bolt: Other - [#​4843](https://togithub.com/mochajs/mocha/issues/4843): Update production dependencies ([**@​juergba**](https://togithub.com/juergba)) ### [`v9.2.1`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#921--2022-02-19) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.2.0...v9.2.1) ##### :bug: Fixes - [#​4832](https://togithub.com/mochajs/mocha/issues/4832): Loading of config files throws wrong error ([**@​juergba**](https://togithub.com/juergba)) - [#​4799](https://togithub.com/mochajs/mocha/issues/4799): Reporter: configurable `maxDiffSize` reporter-option ([**@​norla**](https://togithub.com/norla)) ### [`v9.2.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#920--2022-01-24) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.1.4...v9.2.0) ##### :tada: Enhancements - [#​4813](https://togithub.com/mochajs/mocha/issues/4813): Parallel: assign each worker a worker-id ([**@​forty**](https://togithub.com/forty)) ##### :nut_and_bolt: Other - [#​4818](https://togithub.com/mochajs/mocha/issues/4818): Update production dependencies ([**@​juergba**](https://togithub.com/juergba)) ### [`v9.1.4`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#914--2022-01-14) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.1.3...v9.1.4) ##### :bug: Fixes - [#​4807](https://togithub.com/mochajs/mocha/issues/4807): `import` throws wrong error if loader is used ([**@​giltayar**](https://togithub.com/giltayar)) ##### :nut_and_bolt: Other - [#​4777](https://togithub.com/mochajs/mocha/issues/4777): Add Node v17 to CI test matrix ([**@​outsideris**](https://togithub.com/outsideris)) ### [`v9.1.3`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#913--2021-10-15) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.1.2...v9.1.3) ##### :bug: Fixes - [#​4769](https://togithub.com/mochajs/mocha/issues/4769): Browser: re-enable `bdd` ES6 style import ([**@​juergba**](https://togithub.com/juergba)) ##### :nut_and_bolt: Other - [#​4764](https://togithub.com/mochajs/mocha/issues/4764): Revert deprecation of `EVENT_SUITE_ADD_*` events ([**@​beatfactor**](https://togithub.com/beatfactor)) ### [`v9.1.2`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#912--2021-09-25) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.1.1...v9.1.2) ##### :bug: Fixes - [#​4746](https://togithub.com/mochajs/mocha/issues/4746): Browser: stop using all global vars in `browser-entry.js` ([**@​PaperStrike**](https://togithub.com/PaperStrike)) ##### :nut_and_bolt: Other - [#​4754](https://togithub.com/mochajs/mocha/issues/4754): Remove dependency wide-align ([**@​juergba**](https://togithub.com/juergba)) - [#​4736](https://togithub.com/mochajs/mocha/issues/4736): ESM: remove code for Node versions <10 ([**@​juergba**](https://togithub.com/juergba)) ### [`v9.1.1`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#911--2021-08-28) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.1.0...v9.1.1) ##### :bug: Fixes - [#​4623](https://togithub.com/mochajs/mocha/issues/4623): `XUNIT` and `JSON` reporter crash in `parallel` mode ([**@​curtisman**](https://togithub.com/curtisman)) ### [`v9.1.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#910--2021-08-20) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.0.3...v9.1.0) ##### :tada: Enhancements - [#​4716](https://togithub.com/mochajs/mocha/issues/4716): Add new option `--fail-zero` ([**@​juergba**](https://togithub.com/juergba)) - [#​4691](https://togithub.com/mochajs/mocha/issues/4691): Add new option `--node-option` ([**@​juergba**](https://togithub.com/juergba)) - [#​4607](https://togithub.com/mochajs/mocha/issues/4607): Add output option to `JSON` reporter ([**@​dorny**](https://togithub.com/dorny)) ### [`v9.0.3`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#903--2021-07-25) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.0.2...v9.0.3) ##### :bug: Fixes - [#​4702](https://togithub.com/mochajs/mocha/issues/4702): Error rethrow from cwd-relative path while loading `.mocharc.js` ([**@​kirill-golovan**](https://togithub.com/kirill-golovan)) - [#​4688](https://togithub.com/mochajs/mocha/issues/4688): Usage of custom interface in parallel mode ([**@​juergba**](https://togithub.com/juergba)) - [#​4687](https://togithub.com/mochajs/mocha/issues/4687): ESM: don't swallow `MODULE_NOT_FOUND` errors in case of `type:module` ([**@​giltayar**](https://togithub.com/giltayar)) ### [`v9.0.2`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#902--2021-07-03) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.0.1...v9.0.2) ##### :bug: Fixes - [#​4668](https://togithub.com/mochajs/mocha/issues/4668): ESM: make `--require ` work with new `import`-first loading ([**@​giltayar**](https://togithub.com/giltayar)) ##### :nut_and_bolt: Other - [#​4674](https://togithub.com/mochajs/mocha/issues/4674): Update production dependencies ([**@​juergba**](https://togithub.com/juergba)) ### [`v9.0.1`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#901--2021-06-18) [Compare Source](https://togithub.com/mochajs/mocha/compare/v9.0.0...v9.0.1) ##### :nut_and_bolt: Other - [#​4657](https://togithub.com/mochajs/mocha/issues/4657): Browser: add separate bundle for modern browsers ([**@​juergba**](https://togithub.com/juergba)) We added a separate browser bundle `mocha-es2018.js` in javascript ES2018, as we skipped the transpilation down to ES5. This is an **experimental step towards freezing Mocha's support of IE11**. - [#​4653](https://togithub.com/mochajs/mocha/issues/4653): ESM: proper version check in `hasStableEsmImplementation` ([**@​alexander-fenster**](https://togithub.com/alexander-fenster)) ### [`v9.0.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#900--2021-06-07) [Compare Source](https://togithub.com/mochajs/mocha/compare/v8.4.0...v9.0.0) ##### :boom: Breaking Changes - [#​4633](https://togithub.com/mochajs/mocha/issues/4633): **Drop Node.js v10.x support** ([**@​juergba**](https://togithub.com/juergba)) - [#​4635](https://togithub.com/mochajs/mocha/issues/4635): `import`-first loading of test files ([**@​giltayar**](https://togithub.com/giltayar)) **Mocha is going ESM-first!** This means that it will now use ESM `import(test_file)` to load the test files, instead of the CommonJS `require(test_file)`. This is not a problem, as `import` can also load most files that `require` does. In the rare cases where this fails, it will fallback to `require(...)`. This ESM-first approach is the next step in Mocha's ESM migration, and allows ESM loaders to load and transform the test file. - [#​4636](https://togithub.com/mochajs/mocha/issues/4636): Remove deprecated `utils.lookupFiles()` ([**@​juergba**](https://togithub.com/juergba)) - [#​4638](https://togithub.com/mochajs/mocha/issues/4638): Limit the size of `actual`/`expected` for `diff` generation ([**@​juergba**](https://togithub.com/juergba)) - [#​4389](https://togithub.com/mochajs/mocha/issues/4389): Refactoring: Consuming log-symbols alternate to code for win32 in reporters/base ([**@​MoonSupport**](https://togithub.com/MoonSupport)) ##### :tada: Enhancements - [#​4640](https://togithub.com/mochajs/mocha/issues/4640): Add new option `--dry-run` ([**@​juergba**](https://togithub.com/juergba)) ##### :bug: Fixes - [#​4128](https://togithub.com/mochajs/mocha/issues/4128): Fix: control stringification of error message ([**@​syeutyu**](https://togithub.com/syeutyu)) ##### :nut_and_bolt: Other - [#​4646](https://togithub.com/mochajs/mocha/issues/4646): Deprecate `Runner(suite: Suite, delay: boolean)` signature ([**@​juergba**](https://togithub.com/juergba)) - [#​4643](https://togithub.com/mochajs/mocha/issues/4643): Update production dependencies ([**@​juergba**](https://togithub.com/juergba)) ### [`v8.4.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#840--2021-05-07) [Compare Source](https://togithub.com/mochajs/mocha/compare/v8.3.2...v8.4.0) ##### :tada: Enhancements - [#​4502](https://togithub.com/mochajs/mocha/issues/4502): CLI file parsing errors now have error codes ([**@​evaline-ju**](https://togithub.com/evaline-ju)) ##### :bug: Fixes - [#​4614](https://togithub.com/mochajs/mocha/issues/4614): Watch: fix crash when reloading files ([**@​outsideris**](https://togithub.com/outsideris)) ##### :book: Documentation - [#​4630](https://togithub.com/mochajs/mocha/issues/4630): Add `options.require` to Mocha constructor for `root hook` plugins on parallel runs ([**@​juergba**](https://togithub.com/juergba)) - [#​4617](https://togithub.com/mochajs/mocha/issues/4617): Dynamically generating tests with `top-level await` and ESM test files ([**@​juergba**](https://togithub.com/juergba)) - [#​4608](https://togithub.com/mochajs/mocha/issues/4608): Update default file extensions ([**@​outsideris**](https://togithub.com/outsideris)) Also thanks to [**@​outsideris**](https://togithub.com/outsideris) for various improvements on our GH actions workflows. ### [`v8.3.2`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#832--2021-03-12) [Compare Source](https://togithub.com/mochajs/mocha/compare/v8.3.1...v8.3.2) ##### :bug: Fixes - [#​4599](https://togithub.com/mochajs/mocha/issues/4599): Fix regression in `require` interface ([**@​alexander-fenster**](https://togithub.com/alexander-fenster)) ##### :book: Documentation - [#​4601](https://togithub.com/mochajs/mocha/issues/4601): Add build to GH actions run ([**@​christian-bromann**](https://togithub.com/christian-bromann)) - [#​4596](https://togithub.com/mochajs/mocha/issues/4596): Filter active sponsors/backers ([**@​juergba**](https://togithub.com/juergba)) - [#​4225](https://togithub.com/mochajs/mocha/issues/4225): Update config file examples ([**@​pkuczynski**](https://togithub.com/pkuczynski)) ### [`v8.3.1`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#831--2021-03-06) [Compare Source](https://togithub.com/mochajs/mocha/compare/v8.3.0...v8.3.1) ##### :bug: Fixes - [#​4577](https://togithub.com/mochajs/mocha/issues/4577): Browser: fix `EvalError` caused by regenerator-runtime ([**@​snoack**](https://togithub.com/snoack)) - [#​4574](https://togithub.com/mochajs/mocha/issues/4574): ESM: allow `import` from mocha in parallel mode ([**@​nicojs**](https://togithub.com/nicojs)) ### [`v8.3.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#830--2021-02-11) [Compare Source](https://togithub.com/mochajs/mocha/compare/v8.2.1...v8.3.0) ##### :tada: Enhancements - [#​4506](https://togithub.com/mochajs/mocha/issues/4506): Add error code for test timeout errors ([**@​boneskull**](https://togithub.com/boneskull)) - [#​4112](https://togithub.com/mochajs/mocha/issues/4112): Add BigInt support to stringify util function ([**@​JosejeSinohui**](https://togithub.com/JosejeSinohui)) ##### :bug: Fixes - [#​4557](https://togithub.com/mochajs/mocha/issues/4557): Add file location when SyntaxError happens in ESM ([**@​giltayar**](https://togithub.com/giltayar)) - [#​4521](https://togithub.com/mochajs/mocha/issues/4521): Fix `require` error when bundling Mocha with Webpack ([**@​devhazem**](https://togithub.com/devhazem)) ##### :book: Documentation - [#​4507](https://togithub.com/mochajs/mocha/issues/4507): Add support for typescript-style docstrings ([**@​boneskull**](https://togithub.com/boneskull)) - [#​4503](https://togithub.com/mochajs/mocha/issues/4503): Add GH Actions workflow status badge ([**@​outsideris**](https://togithub.com/outsideris)) - [#​4494](https://togithub.com/mochajs/mocha/issues/4494): Add example of generating tests dynamically with a closure ([**@​maxwellgerber**](https://togithub.com/maxwellgerber)) ##### :nut_and_bolt: Other - [#​4556](https://togithub.com/mochajs/mocha/issues/4556): Upgrade all dependencies to latest stable ([**@​AviVahl**](https://togithub.com/AviVahl)) - [#​4543](https://togithub.com/mochajs/mocha/issues/4543): Update dependencies yargs and yargs-parser ([**@​juergba**](https://togithub.com/juergba)) Also thanks to [**@​outsideris**](https://togithub.com/outsideris) and [**@​HyunSangHan**](https://togithub.com/HyunSangHan) for various fixes to our website and documentation. ### [`v8.2.1`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#821--2020-11-02) [Compare Source](https://togithub.com/mochajs/mocha/compare/v8.2.0...v8.2.1) Fixed stuff. ##### :bug: Fixes - [#​4489](https://togithub.com/mochajs/mocha/issues/4489): Fix problematic handling of otherwise-unhandled `Promise` rejections and erroneous "`done()` called twice" errors ([**@​boneskull**](https://togithub.com/boneskull)) - [#​4496](https://togithub.com/mochajs/mocha/issues/4496): Avoid `MaxListenersExceededWarning` in watch mode ([**@​boneskull**](https://togithub.com/boneskull)) Also thanks to [**@​akeating**](https://togithub.com/akeating) for a documentation fix! ### [`v8.2.0`](https://togithub.com/mochajs/mocha/blob/HEAD/CHANGELOG.md#820--2020-10-16) [Compare Source](https://togithub.com/mochajs/mocha/compare/v8.1.3...v8.2.0) The major feature added in v8.2.0 is addition of support for [*global fixtures*](https://mochajs.org/#global-fixtures). While Mocha has always had the ability to run setup and teardown via a hook (e.g., a `before()` at the top level of a test file) when running tests in serial, Mocha v8.0.0 added support for parallel runs. Parallel runs are *incompatible* with this strategy; e.g., a top-level `before()` would only run for the file in which it was defined. With [global fixtures](https://mochajs.org/#global-fixtures), Mocha can now perform user-defined setup and teardown *regardless* of mode, and these fixtures are guaranteed to run *once and only once*. This holds for parallel mode, serial mode, and even "watch" mode (the teardown will run once you hit Ctrl-C, just before Mocha finally exits). Tasks such as starting and stopping servers are well-suited to global fixtures, but not sharing resources--global fixtures do *not* share context with your test files (but they do share context with each other). Here's a short example of usage: ```js // fixtures.js // can be async or not exports.mochaGlobalSetup = async function () { this.server = await startSomeServer({port: process.env.TEST_PORT}); console.log(`server running on port ${this.server.port}`); }; exports.mochaGlobalTeardown = async function () { // the context (`this`) is shared, but not with the test files await this.server.stop(); console.log(`server on port ${this.server.port} stopped`); }; // this file can contain root hook plugins as well! // exports.mochaHooks = { ... } ``` Fixtures are loaded with `--require`, e.g., `mocha --require fixtures.js`. For detailed information, please see the [documentation](https://mochajs.org/#global-fixtures) and this handy-dandy [flowchart](https://mochajs.org/#test-fixture-decision-tree-wizard-thing) to help understand the differences between hooks, root hook plugins, and global fixtures (and when you should use each). ##### :tada: Enhancements - [#​4308](https://togithub.com/mochajs/mocha/issues/4308): Support run-once [global setup & teardown fixtures](https://mochajs.org/#global-fixtures) ([**@​boneskull**](https://togithub.com/boneskull)) - [#​4442](https://togithub.com/mochajs/mocha/issues/4442): Multi-part extensions (e.g., `test.js`) now usable with `--extension` option ([**@​jordanstephens**](https://togithub.com/jordanstephens)) - [#​4472](https://togithub.com/mochajs/mocha/issues/4472): Leading dots (e.g., `.js`, `.test.js`) now usable with `--extension` option ([**@​boneskull**](https://togithub.com/boneskull)) - [#​4434](https://togithub.com/mochajs/mocha/issues/4434): Output of `json` reporter now contains `speed` ("fast"/"medium"/"slow") property ([**@​wwhurin**](https://togithub.com/wwhurin)) - [#​4464](https://togithub.com/mochajs/mocha/issues/4464): Errors thrown by serializer in parallel mode now have error codes ([**@​evaline-ju**](https://togithub.com/evaline-ju)) *For implementors of custom reporters:* - [#​4409](https://togithub.com/mochajs/mocha/issues/4409): Parallel mode and custom reporter improvements ([**@​boneskull**](https://togithub.com/boneskull)): - Support custom worker-process-only reporters (`Runner.prototype.workerReporter()`); reporters should subclass `ParallelBufferedReporter` in `mocha/lib/nodejs/reporters/parallel-buffered` - Allow opt-in of object reference matching for "sufficiently advanced" custom reporters (`Runner.prototype.linkPartialObjects()`); use if strict object equality is needed when consuming `Runner` event data - Enable detection of parallel mode (`Runner.prototype.isParallelMode()`) ##### :bug: Fixes - [#​4476](https://togithub.com/mochajs/mocha/issues/4476): Workaround for profoundly bizarre issue affecting `npm` v6.x causing some of Mocha's deps to be installed when `mocha` is present in a package's `devDependencies` and `npm install --production` is run the package's working copy ([**@​boneskull**](https://togithub.com/boneskull)) - [#​4465](https://togithub.com/mochajs/mocha/issues/4465): Worker processes guaranteed (as opposed to "very likely") to exit before Mocha does; fixes a problem when using `nyc` with Mocha in parallel mode ([**@​boneskull**](https://togithub.com/boneskull)) - [#​4419](https://togithub.com/mochajs/mocha/issues/4419): Restore `lookupFiles()` in `mocha/lib/utils`, which was broken/missing in Mocha v8.1.0; it now prints a deprecation warning (use `const {lookupFiles} = require('mocha/lib/cli')` instead) ([**@​boneskull**](https://togithub.com/boneskull)) Thanks to [**@​AviVahl**](https://togithub.com/AviVahl), [**@​donghoon-song**](https://togithub.com/donghoon-song), [**@​ValeriaVG**](https://togithub.com/ValeriaVG), [**@​znarf**](https://togithub.com/znarf), [**@​sujin-park**](https://togithub.com/sujin-park), and [**@​majecty**](https://togithub.com/majecty) for other helpful contributions!