latticejs / lattice

Framework integration
17 stars 5 forks source link

[Snyk] Security upgrade jest-cli from 24.9.0 to 26.0.0 #512

Open Rahulgarg30591 opened 1 year ago

Rahulgarg30591 commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - examples/minimal/package.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **718/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5 | Prototype Pollution
[SNYK-JS-TOUGHCOOKIE-5672873](https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: jest-cli The new version differs by 250 commits.
  • 343532a v26.0.0
  • 075854a chore: update changelog for release
  • 68b65af v26.0.0-alpha.2
  • d30a586 fix: disallow hook definitions in tests (#9957)
  • 3375ac3 chore: remove unused prettier uninstall step from CI
  • 0a63d40 fix: absolute path moduleNameMapper + jest.mock issue (#8727)
  • 03dbb2f chore: fix watch mode test with utimes (#9967)
  • 68d12d5 chore: skip broken test on windows (#9966)
  • e8e8146 align circus with jasmine's top-to-bottom execution order (#9965)
  • 968a301 Fix invalid re-run of tests in watch mode (#7347)
  • 5d1be03 chore: fix windows CI (#9964)
  • 2bac04f v26.0.0-alpha.1
  • c665f22 feat: add `createMockFromModule` to replace `genMockFromModule` (#9962)
  • 8147af1 chore: improve error on module not found (#9963)
  • 71631f6 feat: add new 'modern' implementation of Fake Timers (#7776)
  • d7f3427 chore: rename LolexFakeTimers to ModernFakeTimers (#9960)
  • 2c7682c Update index.js (#9095)
  • 5a16415 docs: Updated Testing Frameworks guide with React; make it generic (#9106)
  • 4216b86 updated docs regarding testSequencer (#9174)
  • 2e8f8d5 fix: handle `null` being passed to `createTransformer` (#9955)
  • 7a3c997 jest-circus: throw if a test / hook is defined asynchronously (#8096)
  • 42f920c chore: update ts-eslint (#9953)
  • 3078172 Updated config docs with default transform value (#8583)
  • b6052e0 Update jest-phabricator documentation (#8662)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/rahulgarg30591/project/0a5b65e9-773c-4707-9ef6-818650cfe93d?utm_source=github&utm_medium=referral&page=fix-pr) πŸ›  [Adjust project settings](https://app.snyk.io/org/rahulgarg30591/project/0a5b65e9-773c-4707-9ef6-818650cfe93d?utm_source=github&utm_medium=referral&page=fix-pr/settings) πŸ“š [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"635da871-5ccc-4851-b2cc-bfca567412c7","prPublicId":"635da871-5ccc-4851-b2cc-bfca567412c7","dependencies":[{"name":"jest-cli","from":"24.9.0","to":"26.0.0"}],"packageManager":"npm","projectPublicId":"0a5b65e9-773c-4707-9ef6-818650cfe93d","projectUrl":"https://app.snyk.io/org/rahulgarg30591/project/0a5b65e9-773c-4707-9ef6-818650cfe93d?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-TOUGHCOOKIE-5672873"],"upgrade":["SNYK-JS-TOUGHCOOKIE-5672873"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[718],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** πŸ¦‰ [Prototype Pollution](https://learn.snyk.io/lessons/prototype-pollution/javascript/?loc=fix-pr)