Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade jest from 23.5.0 to 23.6.0 #12

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade jest from 23.5.0 to 23.6.0 #12

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade jest from 23.5.0 to 23.6.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 4 years ago, on 2018-09-10.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Arbitrary File Overwrite
SNYK-JS-TAR-174125		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Arbitrary File Write
SNYK-JS-TAR-1579155		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579152		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579147		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536531		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536528		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-SETVALUE-450213		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-1540541		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-450213		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-1540541		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-MIXINDEEP-450212		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Arbitrary Code Execution
SNYK-JS-JSYAML-174129		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-INI-1048974		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Arbitrary Code Execution
SNYK-JS-HANDLEBARS-534478		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Denial of Service (DoS)
SNYK-JS-HANDLEBARS-480388		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-HANDLEBARS-469063		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-HANDLEBARS-174183		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-HANDLEBARS-173692		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-ASYNC-2441827		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-AJV-584908		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Denial of Service (DoS)
npm:mem:20180117		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Time of Check Time of Use (TOCTOU)
npm:chownr:20180731		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Command Injection
SNYK-JS-NODENOTIFIER-1035794		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Denial of Service (DoS)
SNYK-JS-JSYAML-173999		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-HANDLEBARS-567742		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-HANDLEBARS-1279029		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-MERGE-72553		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Mature
Validation Bypass
SNYK-JS-KINDOF-537849		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-HANDLEBARS-534988		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: jest
  • 23.6.0 - 2018-09-10

    Features

    • [jest-cli] Add changedSince to allowed watch mode configs (#6955)
    • [babel-jest] Add support for babel.config.js added in Babel 7.0.0 (#6911)
    • [jest-resolve] Add support for an experimental mapper option (Watchman crawler only) that adds virtual files to the Haste map (#6940)

    Fixes

    • [jest-resolve] Only resolve realpath once in try-catch (#6925)
    • [expect] Fix TypeError in toBeInstanceOf on null or undefined (#6912)
    • [jest-jasmine2] Throw a descriptive error if the first argument supplied to a hook was not a function (#6917) and (#6931)
    • [jest-circus] Throw a descriptive error if the first argument supplied to a hook was not a function (#6917) and (#6931)
    • [expect] Fix variadic custom asymmetric matchers (#6898)
    • [jest-cli] Fix incorrect testEnvironmentOptions warning (#6852)
    • [jest-each] Prevent done callback being supplied to describe (#6843)
    • [jest-config] Better error message for a case when a preset module was found, but no jest-preset.js or jest-preset.json at the root (#6863)
    • [jest-haste-map] Catch crawler error when unsuccessfully reading directories (#6761)

    Chore & Maintenance

    • [docs] Add custom toMatchSnapshot matcher docs (#6837)
    • [docs] Improve the documentation regarding preset configuration (#6864)
    • [docs] Clarify usage of --projects CLI option (#6872)
    • [docs] Correct failure-change notification mode (#6878)
    • [scripts] Don’t remove node_modules from subdirectories of presets in e2e tests (#6948)
    • [diff-sequences] Double-check number of differences in tests (#6953)
  • 23.5.0 - 2018-08-10

    Features

    • [jest-cli] Add package name to NotifyReporter notification (#5898)
    • [jest-runner] print stack trace when process.exit is called from user code (#6714)
    • [jest-each] introduces %# option to add index of the test to its title (#6414)
    • [pretty-format] Support serializing DocumentFragment (#6705)
    • [jest-validate] Add recursive and recursiveBlacklist options for deep config checks (#6802)
    • [jest-cli] Check watch plugins for key conflicts (#6697)

    Fixes

    • [jest-snapshot] Mark snapshots as obsolete when moved to an inline snapshot (#6773)
    • [jest-config] Fix --coverage with --findRelatedTests overwriting collectCoverageFrom options (#6736)
    • [jest-config] Update default config for testURL from 'about:blank' to 'http://localhost' to address latest JSDOM security warning. (#6792)
    • [jest-cli] Fix testMatch not working with negations (#6648)
    • [jest-cli] Don't report promises as open handles (#6716)
    • [jest-each] Add timeout support to parameterised tests (#6660)
    • [jest-cli] Improve the message when running coverage while there are no files matching global threshold (#6334)
    • [jest-snapshot] Correctly merge property matchers with the rest of the snapshot in toMatchSnapshot. (#6528)
    • [jest-snapshot] Add error messages for invalid property matchers. (#6528)
    • [jest-cli] Show open handles from inside test files as well (#6263)
    • [jest-haste-map] Fix a problem where creating folders ending with .js could cause a crash (#6818)

    Chore & Maintenance

    • [docs] Document another option to avoid warnings with React 16 (#5258)
    • [docs] Add note explaining when jest.setTimeout should be called (#6817)
    • [docs] Fixed bug in example code (#6828)
from jest GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot