sultanabubaker / octopus-master

0 stars 1 forks source link

Update dependency mocha to v5 - autoclosed #38

Closed dev-mend-for-github-com[bot] closed 2 years ago

dev-mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package Type Update Change
mocha (source) devDependencies major 3.4.1 -> 5.0.3

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.0 WS-2018-0590 #23

Release Notes

mochajs/mocha ### [`v5.0.3`](https://togithub.com/mochajs/mocha/blob/master/CHANGELOG.md#​503--2018-03-06) [Compare Source](https://togithub.com/mochajs/mocha/compare/v5.0.2...v5.0.3) This patch features a fix to address a potential "low severity" [ReDoS vulnerability](https://snyk.io/vuln/npm:diff:20180305) in the [diff](https://npm.im/diff) package (a dependency of Mocha). #### :lock: Security Fixes - [#​3266](https://togithub.com/mochajs/mocha/pull/3266): Bump `diff` to v3.5.0 ([@​anishkny](https://togithub.com/anishkny)) #### :nut_and_bolt: Other - [#​3011](https://togithub.com/mochajs/mocha/issues/3011): Expose `generateDiff()` in `Base` reporter ([@​harrysarson](https://togithub.com/harrysarson)) ### [`v5.0.2`](https://togithub.com/mochajs/mocha/blob/master/CHANGELOG.md#​502--2018-03-05) [Compare Source](https://togithub.com/mochajs/mocha/compare/v5.0.1...v5.0.2) This release fixes a class of tests which report as *false positives*. **Certain tests will now break**, though they would have previously been reported as passing. Details below. Sorry for the inconvenience! #### :bug: Fixes - [#​3226](https://togithub.com/mochajs/mocha/issues/3226): Do not swallow errors that are thrown asynchronously from passing tests ([@​boneskull](https://togithub.com/boneskull)). Example: \`\`\`js it('should actually fail, sorry!', function (done) { // passing assertion assert(true === true); // test complete & is marked as passing done(); // ...but something evil lurks within setTimeout(() => { throw new Error('chaos!'); }, 100); }); \`\`\` Previously to this version, Mocha would have *silently swallowed* the `chaos!` exception, and you wouldn't know. Well, *now you know*. Mocha cannot recover from this gracefully, so it will exit with a nonzero code. **Maintainers of external reporters**: *If* a test of this class is encountered, the `Runner` instance will emit the `end` event *twice*; you *may* need to change your reporter to use `runner.once('end')` intead of `runner.on('end')`. - [#​3093](https://togithub.com/mochajs/mocha/issues/3093): Fix stack trace reformatting problem ([@​outsideris](https://togithub.com/outsideris)) #### :nut_and_bolt: Other - [#​3248](https://togithub.com/mochajs/mocha/issues/3248): Update `browser-stdout` to v1.3.1 ([@​honzajavorek](https://togithub.com/honzajavorek)) ### [`v5.0.1`](https://togithub.com/mochajs/mocha/blob/master/CHANGELOG.md#​501--2018-02-07) [Compare Source](https://togithub.com/mochajs/mocha/compare/v5.0.0...v5.0.1) ...your garden-variety patch release. Special thanks to [Wallaby.js](https://wallabyjs.com) for their continued support! :heart: #### :bug: Fixes - [#​1838](https://togithub.com/mochajs/mocha/issues/1838): `--delay` now works with `.only()` ([@​silviom](https://togithub.com/silviom)) - [#​3119](https://togithub.com/mochajs/mocha/issues/3119): Plug memory leak present in v8 ([@​boneskull](https://togithub.com/boneskull)) #### :book: Documentation - [#​3132](https://togithub.com/mochajs/mocha/issues/3132), [#​3098](https://togithub.com/mochajs/mocha/issues/3098): Update `--glob` docs ([@​outsideris](https://togithub.com/outsideris)) - [#​3212](https://togithub.com/mochajs/mocha/pull/3212): Update [Wallaby.js](https://wallabyjs.com)-related docs ([@​ArtemGovorov](https://togithub.com/ArtemGovorov)) - [#​3205](https://togithub.com/mochajs/mocha/pull/3205): Remove outdated cruft ([@​boneskull](https://togithub.com/boneskull)) #### :nut_and_bolt: Other - [#​3224](https://togithub.com/mochajs/mocha/pull/3224): Add proper Wallaby.js config ([@​ArtemGovorov](https://togithub.com/ArtemGovorov)) - [#​3230](https://togithub.com/mochajs/mocha/pull/3230): Update copyright year ([@​josephlin55555](https://togithub.com/josephlin55555)) ### [`v5.0.0`](https://togithub.com/mochajs/mocha/blob/master/CHANGELOG.md#​500--2018-01-17) [Compare Source](https://togithub.com/mochajs/mocha/compare/v4.1.0...v5.0.0) Mocha starts off 2018 right by again dropping support for *unmaintained rubbish*. Welcome [@​vkarpov15](https://togithub.com/vkarpov15) to the team! #### :boom: Breaking Changes - **[#​3148](https://togithub.com/mochajs/mocha/issues/3148): Drop support for IE9 and IE10** ([@​Bamieh](https://togithub.com/Bamieh)) Practically speaking, only code which consumes (through bundling or otherwise) the userland [buffer](https://npm.im/buffer) module should be affected. However, Mocha will no longer test against these browsers, nor apply fixes for them. #### :tada: Enhancements - [#​3181](https://togithub.com/mochajs/mocha/issues/3181): Add useful new `--file` command line argument ([documentation](https://mochajs.org/#--file-file)) ([@​hswolff](https://togithub.com/hswolff)) #### :bug: Fixes - [#​3187](https://togithub.com/mochajs/mocha/issues/3187): Fix inaccurate test duration reporting ([@​FND](https://togithub.com/FND)) - [#​3202](https://togithub.com/mochajs/mocha/pull/3202): Fix bad markup in HTML reporter ([@​DanielRuf](https://togithub.com/DanielRuf)) #### :sunglasses: Developer Experience - [#​2352](https://togithub.com/mochajs/mocha/issues/2352): Ditch GNU Make for [nps](https://npm.im/nps) to manage scripts ([@​TedYav](https://togithub.com/TedYav)) #### :book: Documentation - [#​3137](https://togithub.com/mochajs/mocha/issues/3137): Add missing `--no-timeouts` docs ([@​dfberry](https://togithub.com/dfberry)) - [#​3134](https://togithub.com/mochajs/mocha/issues/3134): Improve `done()` callback docs ([@​maraisr](https://togithub.com/maraisr)) - [#​3135](https://togithub.com/mochajs/mocha/issues/3135): Fix cross-references ([@​vkarpov15](https://togithub.com/vkarpov15)) - [#​3163](https://togithub.com/mochajs/mocha/pull/3163): Fix tpyos ([@​tbroadley](https://togithub.com/tbroadley)) - [#​3177](https://togithub.com/mochajs/mocha/pull/3177): Tweak `README.md` organization ([@​xxczaki](https://togithub.com/xxczaki)) - Misc updates ([@​boneskull](https://togithub.com/boneskull)) #### :nut_and_bolt: Other - [#​3118](https://togithub.com/mochajs/mocha/issues/3118): Move TextMate Integration to [its own repo](https://togithub.com/mochajs/mocha.tmbundle) ([@​Bamieh](https://togithub.com/Bamieh)) - [#​3185](https://togithub.com/mochajs/mocha/issues/3185): Add Node.js v9 to build matrix; remove v7 ([@​xxczaki](https://togithub.com/xxczaki)) - [#​3172](https://togithub.com/mochajs/mocha/issues/3172): Markdown linting ([@​boneskull](https://togithub.com/boneskull)) - Test & Netlify updates ([@​Munter](https://togithub.com/munter), [@​boneskull](https://togithub.com/boneskull)) ### [`v4.1.0`](https://togithub.com/mochajs/mocha/releases/v4.1.0) [Compare Source](https://togithub.com/mochajs/mocha/compare/v4.0.1...v4.1.0) ### 4.1.0 / 2017-12-28 This is mainly a "housekeeping" release. Welcome [@​Bamieh] and [@​xxczaki] to the team! #### :bug:: Fixes - [#​2661]: `progress` reporter now accepts reporter options ([@​canoztokmak]) - [#​3142]: `xit` in `bdd` interface now properly returns its `Test` object ([@​Bamieh]) - [#​3075]: Diffs now computed eagerly to avoid misinformation when reported ([@​abrady0]) - [#​2745]: `--help` will now help you even if you have a `mocha.opts` ([@​Zarel]) #### :tada: Enhancements - [#​2514]: The `--no-diff` flag will completely disable diff output ([@​CapacitorSet]) - [#​3058]: All "setters" in Mocha's API are now also "getters" if called without arguments ([@​makepanic]) #### :book: Documentation - [#​3170]: Optimization and site speed improvements ([@​Munter]) - [#​2987]: Moved the old [site repo](https://togithub.com/mochajs/mochajs.github.io) into the main repo under `docs/` ([@​boneskull]) - [#​2896]: Add [maintainer guide](https://togithub.com/mochajs/mocha/blob/master/MAINTAINERS.md) ([@​boneskull]) - Various fixes and updates ([@​xxczaki], [@​maty21], [@​leedm777]) #### :nut_and_bolt: Other - Test improvements and fixes ([@​eugenet8k], [@​ngeor], [@​38elements], [@​Gerhut], [@​ScottFreeCode], [@​boneskull]) - Refactoring and cruft excision ([@​38elements], [@​Bamieh], [@​finnigantime], [@​boneskull]) [#​2661]: https://togithub.com/mochajs/mocha/issues/2661 [#​3142]: https://togithub.com/mochajs/mocha/issues/3142 [#​3075]: https://togithub.com/mochajs/mocha/pull/3075 [#​2745]: https://togithub.com/mochajs/mocha/issues/2745 [#​2514]: https://togithub.com/mochajs/mocha/issues/2514 [#​3058]: https://togithub.com/mochajs/mocha/issues/3058 [#​3170]: https://togithub.com/mochajs/mocha/pull/3170 [#​2987]: https://togithub.com/mochajs/mocha/issues/2987 [#​2896]: https://togithub.com/mochajs/mocha/issues/2896 [@​canoztokmak]: https://togithub.com/canoztokmak [@​Bamieh]: https://togithub.com/Bamieh [@​abrady0]: https://togithub.com/abrady0 [@​Zarel]: https://togithub.com/Zarel [@​CapacitorSet]: https://togithub.com/CapacitorSet [@​xxczaki]: https://togithub.com/xxczaki [@​maty21]: https://togithub.com/maty21 [@​leedm777]: https://togithub.com/leedm777 [@​eugenet8k]: https://togithub.com/eugenet8k [@​38elements]: https://togithub.com/38elements [@​Gerhut]: https://togithub.com/Gerhut [@​finnigantime]: https://togithub.com/finnigantime [@​boneskull]: https://togithub.com/boneskull [@​ScottFreeCode]: https://togithub.com/ScottFreeCode [@​Munter]: https://togithub.com/Munter [@​ngeor]: https://togithub.com/ngeor [@​makepanic]: https://togithub.com/makepanic ### [`v4.0.1`](https://togithub.com/mochajs/mocha/releases/v4.0.1) [Compare Source](https://togithub.com/mochajs/mocha/compare/v4.0.0...v4.0.1) ### 4.0.1 / 2017-10-05 #### :bug: Fixes - [#​3051]: Upgrade Growl to v1.10.3 to fix its [peer dep problems](https://togithub.com/tj/node-growl/pull/68) ([@​dpogue]) [#​3051]: https://togithub.com/mochajs/mocha/pull/3051 [@​dpogue]: https://togithub.com/dpogue ### [`v4.0.0`](https://togithub.com/mochajs/mocha/releases/v4.0.0) [Compare Source](https://togithub.com/mochajs/mocha/compare/v3.5.3...v4.0.0) ##### 4.0.0 / 2017-10-02 You might want to read this before filing a new bug! :stuck_out_tongue_closed_eyes: ##### :boom: Breaking Changes For more info, please [read this article](https://boneskull.com/mocha-v4-nears-release/). ##### Compatibility - [#​3016]: Drop support for unmaintained versions of Node.js ([@​boneskull]): - 0.10.x - 0.11.x - 0.12.x - iojs (any) - 5.x.x - [#​2979]: Drop support for non-ES5-compliant browsers ([@​boneskull]): - IE7 - IE8 - PhantomJS 1.x - [#​2615]: Drop Bower support; old versions (3.x, etc.) will remain available ([@​ScottFreeCode], [@​boneskull]) ##### Default Behavior - [#​2879]: By default, Mocha will no longer force the process to exit once all tests complete. This means any test code (or code under test) which would normally prevent `node` from exiting will do so when run in Mocha. Supply the `--exit` flag to revert to pre-v4.0.0 behavior ([@​ScottFreeCode], [@​boneskull]) ##### Reporter Output - [#​2095]: Remove `stdout:` prefix from browser reporter logs ([@​skeggse]) - [#​2295]: Add separator in "unified diff" output ([@​olsonpm]) - [#​2686]: Print failure message when `--forbid-pending` or `--forbid-only` is specified ([@​ScottFreeCode]) - [#​2814]: Indent contexts for better readability when reporting failures ([@​charlierudolph]) ##### :-1: Deprecations - [#​2493]: The `--compilers` command-line option is now soft-deprecated and will emit a warning on `STDERR`. Read [this](https://togithub.com/mochajs/mocha/wiki/compilers-deprecation) for more info and workarounds ([@​ScottFreeCode], [@​boneskull]) ##### :tada: Enhancements - [#​2628]: Allow override of default test suite name in XUnit reporter ([@​ngeor]) ##### :book: Documentation - [#​3020]: Link to CLA in `README.md` and `CONTRIBUTING.md` ([@​skeggse]) ##### :nut_and_bolt: Other - [#​2890]: Speed up build by (re-)consolidating SauceLabs tests ([@​boneskull]) [#​3016]: https://togithub.com/mochajs/mocha/issues/3016 [#​2979]: https://togithub.com/mochajs/mocha/issues/2979 [#​2615]: https://togithub.com/mochajs/mocha/issues/2615 [#​2879]: https://togithub.com/mochajs/mocha/issues/2879 [#​2095]: https://togithub.com/mochajs/mocha/issues/2095 [#​2295]: https://togithub.com/mochajs/mocha/issues/2295 [#​2686]: https://togithub.com/mochajs/mocha/issues/2686 [#​2814]: https://togithub.com/mochajs/mocha/pull/2814 [#​2493]: https://togithub.com/mochajs/mocha/issues/2493 [#​2628]: https://togithub.com/mochajs/mocha/issues/2628 [#​3020]: https://togithub.com/mochajs/mocha/pull/3020 [#​2890]: https://togithub.com/mochajs/mocha/issues/2890 [@​skeggse]: https://togithub.com/skeggse [@​olsonpm]: https://togithub.com/olsonpm [@​ngeor]: https://togithub.com/ngeor [@​boneskull]: https://togithub.com/boneskull [@​ScottFreeCode]: https://togithub.com/ScottFreeCode [@​charlierudolph]: https://togithub.com/charlierudolph ### [`v3.5.3`](https://togithub.com/mochajs/mocha/releases/v3.5.3) [Compare Source](https://togithub.com/mochajs/mocha/compare/v3.5.2...v3.5.3) ### 3.5.3 / 2017-09-11 #### :bug: Fixes - [#​3003]: Fix invalid entities in xUnit reporter first appearing in v3.5.1 ([@​jkrems]) [#​3003]: https://togithub.com/mochajs/mocha/pull/3003 [@​jkrems]: https://togithub.com/jkrems ### [`v3.5.2`](https://togithub.com/mochajs/mocha/releases/v3.5.2) [Compare Source](https://togithub.com/mochajs/mocha/compare/v3.5.1...v3.5.2) ### 3.5.2 / 2017-09-10 #### :bug: Fixes - [#​3001]: Fix AMD-related failures first appearing in v3.5.1 ([@​boneskull]) [#​3001]: https://togithub.com/mochajs/mocha/pull/3001 [@​boneskull]: https://togithub.com/boneskull ### [`v3.5.1`](https://togithub.com/mochajs/mocha/releases/v3.5.1) [Compare Source](https://togithub.com/mochajs/mocha/compare/v3.5.0...v3.5.1) ##### 3.5.1 / 2017-09-09 ##### :newspaper: News - :mega: Mocha is now sponsoring [PDXNode](http://pdxnode.org)! If you're in the [Portland](https://wikipedia.org/wiki/Portland,\_Oregon) area, come check out the monthly talks and hack nights! ##### :bug: Fixes - [#​2997]: Fix missing `xit` export for "require" interface ([@​solodynamo]) - [#​2957]: Fix unicode character handling in XUnit reporter failures ([@​jkrems]) ##### :nut_and_bolt: Other - [#​2986]: Add issue and PR templates ([@​kungapal]) - [#​2918]: Drop bash dependency for glob-related tests ([@​ScottFreeCode]) - [#​2922]: Improve `--compilers` coverage ([@​ScottFreeCode]) - [#​2981]: Fix tpyos and spelling errors ([@​jsoref]) [#​2997]: https://togithub.com/mochajs/mocha/pull/2997 [#​2957]: https://togithub.com/mochajs/mocha/pull/2957 [#​2918]: https://togithub.com/mochajs/mocha/pull/2918 [#​2986]: https://togithub.com/mochajs/mocha/pull/2986 [#​2922]: https://togithub.com/mochajs/mocha/pull/2922 [#​2981]: https://togithub.com/mochajs/mocha/pull/2981 [@​solodynamo]: https://togithub.com/solodynamo [@​jkrems]: https://togithub.com/jkrems [@​jsoref]: https://togithub.com/jsoref [@​ScottFreeCode]: https://togithub.com/ScottFreeCode [@​kungapal]: https://togithub.com/kungapal ### [`v3.5.0`](https://togithub.com/mochajs/mocha/releases/v3.5.0) [Compare Source](https://togithub.com/mochajs/mocha/compare/v3.4.2...v3.5.0) ### v3.5.0 / 2017-07-31 #### :newspaper: News - Mocha now has a [code of conduct](https://togithub.com/mochajs/mocha/blob/master/.github/CODE_OF_CONDUCT.md) (thanks [@​kungapal]!). - Old issues and PRs are now being marked "stale" by [Probot's "Stale" plugin](https://togithub.com/probot/stale). If an issue is marked as such, and you would like to see it remain open, simply add a new comment to the ticket or PR. - **WARNING**: Support for non-ES5-compliant environments will be dropped starting with version 4.0.0 of Mocha! #### :lock: Security Fixes - [#​2860]: Address [CVE-2015-8315](https://nodesecurity.io/advisories/46) via upgrade of [debug](https://npm.im/debug) ([@​boneskull]) #### :tada: Enhancements - [#​2696]: Add `--forbid-only` and `--forbid-pending` flags. Use these in CI or hooks to ensure tests aren't accidentally being skipped! ([@​charlierudolph]) - [#​2813]: Support Node.js 8's `--napi-modules` flag ([@​jupp0r]) #### :nut_and_bolt: Other - Various CI-and-test-related fixes and improvements ([@​boneskull], [@​dasilvacontin], [@​PopradiArpad], [@​Munter], [@​ScottFreeCode]) - "Officially" support Node.js 8 ([@​elergy]) [#​2860]: https://togithub.com/mochajs/mocha/pulls/2860 [#​2696]: https://togithub.com/mochajs/mocha/pulls/2696 [#​2813]: https://togithub.com/mochajs/mocha/pulls/2813 [@​charlierudolph]: https://togithub.com/charlierudolph [@​PopradiArpad]: https://togithub.com/PopradiArpad [@​kungapal]: https://togithub.com/kungapal [@​elergy]: https://togithub.com/elergy [@​jupp0r]: https://togithub.com/jupp0r [@​boneskull]: https://togithub.com/boneskull [@​Munter]: https://togithub.com/Munter [@​dasilvacontin]: https://togithub.com/dasilvacontin [@​ScottFreeCode]: https://togithub.com/ScottFreeCode ### [`v3.4.2`](https://togithub.com/mochajs/mocha/releases/v3.4.2) [Compare Source](https://togithub.com/mochajs/mocha/compare/v3.4.1...v3.4.2) ### 3.4.2 / 2017-05-24 #### :bug: Fixes - [#​2802]: Remove call to deprecated os.tmpDir ([@​makepanic]) - [#​2820]: Eagerly set process.exitCode ([@​chrisleck]) #### :nut_and_bolt: Other - [#​2778]: Move linting into an npm script ([@​Munter]) [@​chrisleck]: https://togithub.com/chrisleck [@​makepanic]: https://togithub.com/makepanic [@​Munter]: https://togithub.com/Munter [#​2778]: https://togithub.com/mochajs/mocha/pulls/2778 [#​2802]: https://togithub.com/mochajs/mocha/issues/2802 [#​2820]: https://togithub.com/mochajs/mocha/pull/2820