cypress-multi-repoters: upgrade mocha dependency (inflight vulnerability)

[maximegheraille]

Hi,

I recently saw that checkmarx was complaining about a vulnerability of type High for cypress-multi-repoters.

glob@9.0.0 was the first available version that removed inflight from it dependencies. This means the minimum version for mocha would be 11.0.1.

Are there any plans on updating the dependency for cypress-multi-repoters ?

[YOU54F]

Hey dude, sorry been busy on other projects.

I’ll happily accept pull requests for dep updates if you fancy giving it a go.

If its outside your comfort zone or you get stuck, feel free to holla

[maximegheraille]

Hi, I did try locally to upgrade to the latest version required for the vulnerability to be removed, but there seems to be breaking changes starting with mocha v10.

`#multi-reporter
  ✔ #test-1
  1) #test-2

      1) should have 1 test failure

#multi-reporter
  - #test-1
  - #test-2

      2) should have 1 test pending
  1) Uncaught error outside test suite


  20 passing (177ms)
  2 failing

  1) lib/MultiReporters
       #test
         should have 1 test failure:
     Uncaught TypeError: Cannot read properties of undefined (reading 'passes')
      at Object.onceWrapper (node:events:633:28)
      at Runner.emit (node:events:531:35)
      at process.processImmediate (node:internal/timers:478:21)

  2) lib/MultiReporters
       #test
         should have 1 test pending:
     Uncaught TypeError: Cannot read properties of undefined (reading 'passes')
      at Object.onceWrapper (node:events:633:28)
      at Runner.emit (node:events:531:35)
      at process.processImmediate (node:internal/timers:478:21)`

Not really sure what is wrong, this is a bit out my expertise. If you could have a look when you have some time, it would be appreciated.

[YOU54F]

Sure,

Applying this diff worked for me

stanleyhlng/mocha-multi-reporters#110

tl;dr it relates to changes introduced in mocha6 and my previously applied semver check didn't work for 10.0.0+ so wasn't instantiating the required stats collector in moch6

[YOU54F]

Hey @maximegheraille

New version now released

https://www.npmjs.com/package/cypress-multi-reporters/v/2.0.5