Update dependencies to support [email protected]+ for security fix
Dependabot cannot update glob to a non-vulnerable version because jest requires glob@^7.1.3 and ^7.1.4 via transitive dependencies on [email protected], @jest/[email protected], [email protected], and [email protected]. The earliest fixed version is [email protected]. Please update these dependencies to allow [email protected]+ to resolve the security vulnerability.
Yeah, this is https://github.com/istanbuljs/babel-plugin-istanbul/pull/301
The security issue only impacts the v10 and v11 lines of glob, so no action should be needed by Jest to enable resolving the security vuln
Is this not done via https://github.com/jestjs/jest/pull/15905 ?