prescottprue / redux-firestore

Redux bindings for Firestore
MIT License
575 stars 102 forks source link

chore(dev-deps): update dependency chai to v4.3.9 #628

Closed renovate[bot] closed 11 months ago

renovate[bot] commented 11 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
chai (source) 4.3.8 -> 4.3.9 age adoption passing confidence

Release Notes

chaijs/chai (chai) ### [`v4.3.9`](https://togithub.com/chaijs/chai/releases/tag/v4.3.9) [Compare Source](https://togithub.com/chaijs/chai/compare/v4.3.8...v4.3.9) Upgrade dependencies. This release upgrades dependencies to address **[CVE-2023-43646](https://www.cve.org/CVERecord?id=CVE-2023-43646)** where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang. **Full Changelog**: https://github.com/chaijs/chai/compare/v4.3.8...v4.3.9

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

codecov[bot] commented 11 months ago

Codecov Report

Merging #628 (61f4db7) into main (ab8f2e6) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #628   +/-   ##
=======================================
  Coverage   85.85%   85.85%           
=======================================
  Files          21       21           
  Lines        1082     1082           
=======================================
  Hits          929      929           
  Misses        153      153