[Snyk] Upgrade mocha from 3.5.3 to 10.1.0 #38

snyk-bot · 2022-11-13T03:57:44Z

Snyk has created this PR to upgrade mocha from 3.5.3 to 10.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 59 versions ahead of your current version.
The recommended version was released a month ago, on 2022-10-15.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Arbitrary Code Injection npm:growl:20160721	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:diff:20180305	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:diff:20180305	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-610226	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1023599	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Arbitrary File Write SNYK-JS-TAR-1579155	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Prototype Pollution SNYK-JS-SETVALUE-450213	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-MIXINDEEP-450212	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-450202	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Command Injection SNYK-JS-LODASH-1040724	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Prototype Pollution SNYK-JS-INI-1048974	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-571484	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-CACHEDPATHRELATIVE-2342653	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Prototype Pollution SNYK-JS-AJV-584908	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1072471	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept
Timing Attack SNYK-JS-ELLIPTIC-511941	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	704/1000 Why? Has a fix available, CVSS 9.8	No Known Exploit
Validation Bypass SNYK-JS-KINDOF-537849	704/1000 Why? Has a fix available, CVSS 9.8	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mocha

10.1.0 - 2022-10-15
10.1.0 / 2022-10-16

🎉 Enhancements
- #4896: Browser: add support for prefers-color-scheme: dark (@ greggman)
🔩 Other
- #4912: Browser: increase contrast for replay buttons (@ JoshuaKGoldberg)
- #4905: Use standard Promise.allSettled instead of polyfill (@ outsideris)
- #4899: Upgrade official GitHub actions to latest (@ ddzz)
- #4770: Fix regex in function clean(@ yetingli)
10.0.0 - 2022-05-01
10.0.0 / 2022-05-01

💥 Breaking Changes
- #4845: Drop Node.js v12.x support (@ juergba)
- #4848: Drop Internet-Explorer-11 support (@ juergba)
- #4857: Drop AMD/RequireJS support (@ juergba)
- #4866: Drop Growl notification support (@ juergba)
- #4863: Rename executable bin/mocha to bin/mocha.js (@ juergba)
- #4865: --ignore option in Windows: upgrade Minimatch (@ juergba)
- #4861: Remove deprecated Runner signature (@ juergba)
🔩 Other
- #4878: Update production dependencies (@ juergba)
- #4876: Add Node.js v18 to CI test matrix (@ outsideris)
- #4852: Replace deprecated String.prototype.substr() (@ CommanderRoot)
Also thanks to @ ea2305 and @ SukkaW for improvements to our documentation.
9.2.2 - 2022-03-11
9.2.2 / 2022-03-11

Please also note our announcements.

🐛 Fixes
- #4842: Loading of reporter throws wrong error (@ juergba)
- #4839: dry-run: prevent potential call-stack crash (@ juergba)
🔩 Other
- #4843: Update production dependencies (@ juergba)
9.2.1 - 2022-02-19
9.2.1 / 2022-02-19

Please also note our announcements.

🐛 Fixes
- #4832: Loading of config files throws wrong error (@ juergba)
- #4799: Reporter: configurable maxDiffSize reporter-option (@ norla)
9.2.0 - 2022-01-24
9.2.0 / 2022-01-24

Please also note our announcements.

🎉 Enhancements
- #4813: Parallel: assign each worker a worker-id (@ forty)
🔩 Other
- #4818: Update production dependencies (@ juergba)
9.1.4 - 2022-01-14
9.1.4 / 2022-01-14

Please also note our announcements.

🐛 Fixes
- #4807: import throws wrong error if loader is used (@ giltayar)
🔩 Other
- #4777: Add Node v17 to CI test matrix (@ outsideris)
9.1.3 - 2021-10-15
9.1.3 / 2021-10-15

Please also note our announcements.

🐛 Fixes
- #4769: Browser: re-enable bdd ES6 style import (@ juergba)
🔩 Other
- #4764: Revert deprecation of EVENT_SUITE_ADD_* events (@ beatfactor)
9.1.2 - 2021-09-25
9.1.2 / 2021-09-25

Please also note our announcements.

🐛 Fixes
- #4746: Browser: stop using all global vars in browser-entry.js (@ PaperStrike)
🔩 Other
- #4754: Remove dependency wide-align (@ juergba)
- #4736: ESM: remove code for Node versions <10 (@ juergba)
9.1.1 - 2021-08-28
9.1.1 / 2021-08-28

Please also note our announcements.

🐛 Fixes
- #4623: XUNIT and JSON reporter crash in parallel mode (@ curtisman)
9.1.0 - 2021-08-20
9.1.0 / 2021-08-20

Please also note our announcements.

🎉 Enhancements
- #4716: Add new option --fail-zero (@ juergba)
- #4691: Add new option --node-option (@ juergba)
- #4607: Add output option to JSON reporter (@ dorny)
9.0.3 - 2021-07-25
9.0.2 - 2021-07-03
9.0.1 - 2021-06-18
9.0.0 - 2021-06-07
8.4.0 - 2021-05-07
8.3.2 - 2021-03-12
8.3.1 - 2021-03-06
8.3.0 - 2021-02-11
8.2.1 - 2020-11-02
8.2.0 - 2020-10-16
8.1.3 - 2020-08-28
8.1.2 - 2020-08-25
8.1.1 - 2020-08-04
8.1.0 - 2020-07-30
8.0.1 - 2020-06-10
8.0.0 - 2020-06-10
7.2.0 - 2020-05-23
7.1.2 - 2020-04-26
7.1.1 - 2020-03-18
7.1.0 - 2020-02-26
7.0.1 - 2020-01-26
7.0.0 - 2020-01-04
7.0.0-esm1 - 2020-01-12
6.2.3 - 2020-03-25
6.2.2 - 2019-10-18
6.2.1 - 2019-09-29
6.2.0 - 2019-07-18
6.1.4 - 2019-04-18
6.1.3 - 2019-04-12
6.1.2 - 2019-04-08
6.1.1 - 2019-04-07
6.1.0 - 2019-04-07
6.0.2 - 2019-02-25
6.0.1 - 2019-02-21
6.0.0 - 2019-02-18
6.0.0-1 - 2019-01-02
6.0.0-0 - 2019-01-01
5.2.0 - 2018-05-18
5.1.1 - 2018-04-18
5.1.0 - 2018-04-12
5.0.5 - 2018-03-23
5.0.4 - 2018-03-07
5.0.3 - 2018-03-07
5.0.2 - 2018-03-06
5.0.1 - 2018-02-13
5.0.0 - 2018-01-18
4.1.0 - 2017-12-29
4.0.1 - 2017-10-06
4.0.0 - 2017-10-03
3.5.3 - 2017-09-11