[Snyk] Upgrade chai from 4.2.0 to 4.3.10

[tiff-es]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade chai from 4.2.0 to 4.3.10.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 11 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-09-28.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GETFUNCNAME-5923417	537/1000 Why? Proof of Concept exploit, CVSS 8.6	Proof of Concept
	Prototype Pollution SNYK-JS-PATHVAL-596926	537/1000 Why? Proof of Concept exploit, CVSS 8.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: chai

• 4.3.10 - 2023-09-28
  

  This release simply bumps all dependencies to their latest non-breaking versions.

  What's Changed

  • upgrade all dependencies by @ keithamus in #1540

  Full Changelog: v4.3.9...v4.3.10

• 4.3.9 - 2023-09-27
  

  Upgrade dependencies.

  This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

  Full Changelog: v4.3.8...v4.3.9

• 4.3.8 - 2023-08-24
  

  What's Changed

  • 4.x.x: Fix link to commit logs on GitHub by @ bugwelle in #1487
  • build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @ dependabot in #1488
  • Small typo in test.js by @ mavaddat in #1459
  • docs: specify return type of objDisplay by @ scarf005 in #1490
  • Update CONTRIBUTING.md by @ matheus-rodrigues00 in #1521
  • Fix: update exports.version to current version by @ peanutenthusiast in #1534

  New Contributors

  • @ bugwelle made their first contribution in #1487
  • @ mavaddat made their first contribution in #1459
  • @ scarf005 made their first contribution in #1490
  • @ matheus-rodrigues00 made their first contribution in #1521
  • @ peanutenthusiast made their first contribution in #1534

  Full Changelog: v4.3.7...v4.3.8

• 4.3.7 - 2022-11-07
  

  What's Changed

  • fix: deep-eql bump package to support symbols comparison by @ snewcomer in #1483

  Full Changelog: v4.3.6...v4.3.7

• 4.3.6 - 2022-01-26
  

  Update loupe to 2.3.1

• 4.3.5 - 2022-01-25
  
  • build chaijs fca5bb1
  • build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446) 747eb4e
  • fix package.json exports 022c2fa
  • fix: package.json - deprecation warning on exports field (#1400) 5276af6
  • feat: use chaijs/loupe for inspection (#1401) (#1407) c8a4e00

  v4.3.4...v4.3.5

• 4.3.4 - 2021-03-12
  

  This fixes broken inspect behavior with bigints (#1321) (#1383) thanks @ vapier

• 4.3.3 - 2021-03-03
  

  This reintroduces Assertion as an export in the mjs file. See #1378 & #1375

• 4.3.2 - 2021-03-03
• 4.3.1 - 2021-03-02
• 4.3.0 - 2021-02-04
• 4.2.0 - 2018-09-26

from chai GitHub release notes

Commit messages

Package name: chai

• 744a16e 4.3.10
• 0ccd823 upgrade all dependencies (#1540)
• 923d0a4 4.3.9
• 1a0f887 make
• a141e57 upgrade deps
• d9ff2c6 4.3.8
• 8d3205b build
• b351dc0 Fix: update exports.version to current version (#1534)
• 1a8247f Update CONTRIBUTING.md (#1521)
• 3a8c49a docs: specify return type of objDisplay (#1490)
• b455124 test: fix typo in test.js (#1459)
• 98f4233 build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 (#1488)
• acd16e0 chore: 4.x.x: Fix link to commit logs on GitHub (#1487)
• 3c947a7 build
• 775f509 4.3.7
• 8e780b4 fix: deep-eql bump package to support symbols comparison (#1483)
• 529b8b5 4.3.6
• e4d7f2e build chaijs
• d88684e fix: use loupe@^2.3.1
• 99e36a8 4.3.5
• fca5bb1 build chaijs
• 747eb4e build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446)
• 022c2fa fix package.json exports
• 5276af6 fix: package.json - deprecation warning on exports field (#1400)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs