Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: babel-jest, jest #11

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
babel-jest
from 28.1.1 to 29.1.2
14 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change
23 days ago
on 2022-09-30
jest
from 28.1.1 to 29.1.2
15 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change
23 days ago
on 2022-09-30

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Improper Input Validation
SNYK-JS-PARSEURL-3024398
571/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5
Proof of Concept
Server-side Request Forgery (SSRF)
SNYK-JS-PARSEURL-3023021
571/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-PARSEURL-2942134
571/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5
Proof of Concept
Server-side Request Forgery (SSRF)
SNYK-JS-PARSEURL-2936249
571/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5
Proof of Concept
Authorization Bypass Through User-Controlled Key
SNYK-JS-PARSEPATH-2936439
571/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5
Proof of Concept
Information Exposure
SNYK-JS-PARSEURL-2935947
571/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-PARSEURL-2935944
571/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: babel-jest
  • 29.1.2 - 2022-09-30

    Fixes

    • [expect, @ jest/expect] Revert buggy inference of argument types for *CalledWith and *ReturnedWith matchers introduced in 29.1.0 (#13339)
    • [jest-worker] Add missing dependency on jest-util (#13341)

    New Contributors

    Full Changelog: v29.1.1...v29.1.2

  • 29.1.0 - 2022-09-28

    Features

    • [expect, @ jest/expect] support type inference for function parameters in CalledWith assertions (#13268)
    • [expect, @ jest/expect] Infer type of *ReturnedWith matchers argument (#13278)
    • [@ jest/environment, jest-runtime] Allow jest.requireActual and jest.requireMock to take a type argument (#13253)
    • [@ jest/environment] Allow jest.mock and jest.doMock to take a type argument (#13254)
    • [@ jest/fake-timers] Add jest.now() to return the current fake clock time (#13244, #13246)
    • [@ jest/mock] Add withImplementation method for temporarily overriding a mock (#13281)
    • [expect] Export toThrow* matchers (#13328)

    Fixes

    • [jest-circus, jest-jasmine2] Fix error messages for Node's assert.throes (#13322)
    • [jest-haste-map] Remove __proto__ usage (#13256)
    • [jest-mock] Improve spyOn typings to handle optional properties (#13247)
    • [jest-mock] Fix mocking of getters and setters on classes (#13145)
    • [jest-snapshot] Throw useful error when an array is passed as property matchers (#13263)
    • [jest-snapshot] Prioritize parser used in the project (#13323)
    • [jest-transform] Attempt to work around issues with atomic writes on Windows (#11423)

    New Contributors

    Full Changelog: v29.0.3...v29.1.0

  • 29.0.3 - 2022-09-10

    Features

    • [@ jest/environment, jest-runtime] Allow passing a generic type argument to jest.createMockFromModule<T>() method (#13202)
    • [expect] Expose ExpectationResult type (#13240)
    • [jest-snapshot] Expose Context type (#13240)
    • [@ jest/globals] Add jest.Mock type helper (#13235)

    Fixes

    • [jest-core] Capture execError during TestScheduler.scheduleTests and dispatch to reporters (#13203)
    • [jest-resolve] Make sure to resolve module paths after looking at exports (#13242)
    • [jest-resolve] Improve error on module not found deep in the require stack (#8704)
    • [jest-snapshot] Fix typings of snapshot matchers (#13240)

    Chore & Maintenance

    • [*] Fix inconsistent workspace prefixes (#13217)
    • [jest-haste-map] Expose a minimal public API to TypeScript (#13023)

    New Contributors

    Full Changelog: v29.0.2...v29.0.3

  • 29.0.2 - 2022-09-03

    Features

    • [jest-transform] Expose TransformFactory type (#13184)

    Fixes

    • [babel-plugin-jest-hoist] Support imported jest in mock factory (#13188)
    • [jest-mock] Align the behavior and return type of generateFromMetadata method (#13207)
    • [jest-runtime] Support jest.resetModules() with ESM (#13211)

    New Contributors

    Full Changelog: v29.0.1...v29.0.2

  • 29.0.1 - 2022-08-26

    Fixes

    • [jest-snapshot] Pass snapshotFormat through when diffing snapshots (#13181)

    Full Changelog: v29.0.0...v29.0.1

  • 29.0.0 - 2022-08-25
    Read more
  • 29.0.0-alpha.6 - 2022-08-19
    Read more
  • 29.0.0-alpha.5 - 2022-08-11

    What's Changed

    • fix: pipe workerIdleMemoryLimit to globalConfig by @ backmask in #13106
    • fix: worker being killed after being spawned and other worker bugs by @ phawxby in #13107

    New Contributors

    Full Changelog: v29.0.0-alpha.4...v29.0.0-alpha.5

  • 29.0.0-alpha.4 - 2022-08-08
    Read more
  • 29.0.0-alpha.3 - 2022-08-07
  • 29.0.0-alpha.1 - 2022-08-04
  • 29.0.0-alpha.0 - 2022-07-17
  • 28.1.3 - 2022-07-13
  • 28.1.2 - 2022-06-29
  • 28.1.1 - 2022-06-07
from babel-jest GitHub release notes
Package name: jest from jest GitHub release notes
Commit messages
Package name: babel-jest
  • 3c31dd6 v29.1.2
  • 5172592 chore: update changelog for release
  • 9adadc4 fix: add jest-worker's missing dependency (#13341)
  • be0d4d1 fix(expect, @ jest/expect): do not infer argument types of `*CalledWith` and `*ReturnedWith` matchers (#13339)
  • e574964 chore: clean up extra `*` in TSDoc comments (#13336)
  • e21c5ab docs: update `--filter` to match code implementation (#13329)
  • fd9cd90 v29.1.1
  • 52d45be Revert "fix: mocking of getters/setters on automatically mocked classes (#13145)"
  • 738fbfb chore: tweak changelog
  • 51f1030 v29.1.0
  • ba9b7fe chore: update changelog for release
  • b275e25 docs: roll version 29.1
  • 82e503f fix: mocking of getters/setters on automatically mocked classes (#13145)
  • 4adf6ab Additional fix for #4444 to prevent errors on windows (#11423)
  • 0c15eb6 fix: prioritize parser used in the project (#13323)
  • e341e46 fix: adjusted assert.throws error format when thrown (#13322)
  • 96ac587 docs: matchers admonitions (#13309)
  • 987102f docs: React Native tutorial admonitions (#13308)
  • ea6c200 docs: CLI admonitions (#13293)
  • cceeb30 docs: add admonitions to all versions of webpack docs (#13321)
  • f043e05 docs: getting Started admonitions (#13299)
  • 6ca27a0 docs: ES6 class mocks admonitions (#13297)
  • 6655c46 docs: add some type info for expect docs (#13317)
  • 0919e13 docs: react tutorial admonitions (#13307)

Compare

Package name: jest
  • 3c31dd6 v29.1.2
  • 5172592 chore: update changelog for release
  • 9adadc4 fix: add jest-worker's missing dependency (#13341)
  • be0d4d1 fix(expect, @ jest/expect): do not infer argument types of `*CalledWith` and `*ReturnedWith` matchers (#13339)
  • e574964 chore: clean up extra `*` in TSDoc comments (#13336)
  • e21c5ab docs: update `--filter` to match code implementation (#13329)
  • fd9cd90 v29.1.1
  • 52d45be Revert "fix: mocking of getters/setters on automatically mocked classes (#13145)"
  • 738fbfb chore: tweak changelog
  • 51f1030 v29.1.0
  • ba9b7fe chore: update changelog for release
  • b275e25 docs: roll version 29.1
  • 82e503f fix: mocking of getters/setters on automatically mocked classes (#13145)
  • 4adf6ab Additional fix for #4444 to prevent errors on windows (#11423)
  • 0c15eb6 fix: prioritize parser used in the project (#13323)
  • e341e46 fix: adjusted assert.throws error format when thrown (#13322)
  • 96ac587 docs: matchers admonitions (#13309)
  • 987102f docs: React Native tutorial admonitions (#13308)
  • ea6c200 docs: CLI admonitions (#13293)
  • cceeb30 docs: add admonitions to all versions of webpack docs (#13321)
  • f043e05 docs: getting Started admonitions (#13299)
  • 6ca27a0 docs: ES6 class mocks admonitions (#13297)
  • 6655c46 docs: add some type info for expect docs (#13317)
  • 0919e13 docs: react tutorial admonitions (#13307)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade:
  - babel-jest from 28.1.1 to 29.1.2.
    See this package in npm: https://www.npmjs.com/package/babel-jest
  - jest from 28.1.1 to 29.1.2.
    See this package in npm: https://www.npmjs.com/package/jest

See this project in Snyk:
https://app.snyk.io/org/marcelraschke/project/c29591a3-f53d-4b19-b4ce-e035ae2f4669?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant