lattice
lattice copied to clipboard
[Snyk] Security upgrade jest-cli from 24.9.0 to 26.5.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- examples/minimal/package.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3 |
Prototype Pollution SNYK-JS-Y18N-1021887 |
Yes | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: jest-cli
The new version differs by 250 commits.- 68d1b1b v26.5.0
- 64054ec chore: update changelog for release
- a2090a0 chore: drop usage of `compileFunction` (#10586)
- 97e683b chore(deps): upgrade jsdom to 16.4.0 (#10578)
- 82c7415 [feature] Add package to create cache key functions (#10587)
- abf9f8d chore: use stable yarn installation (#10583)
- ad29e80 chore: duplicate eslint rules locally to allow warning (#10579)
- bc1b16a docs: fix link in getting started page (#10573)
- 6b3a848 chore(deps): bump actions/setup-node from v2.1.1 to v2.1.2 (#10571)
- 0a9e77d refactor(resolve): replace read-pkg-up with escalade (#10558)
- a4bdf96 docs: Document `--testFailureExitCode` (#10542)
- 38b3f70 docs: fix markdown link syntax (#10545)
- 6499deb fix(runner): handle module loaders with default exports (#10541)
- d955dc0 docs(worker): removed duplicated description for `setupArgs` (#10533)
- 23f425c chore: bump deps (#10516)
- ac73de8 Fix location for `test.each` (#10413)
- 7e71d5f chore: get rid of some `any`s (#10511)
- 621b8ea chore: fix some `ban-types` violations (#10510)
- db0b335 feat: Add Console to custom console object (#10502)
- 1969fe0 chore: duplicate `@typescript-eslint/ban-types` locally to allow warning (#10438)
- 0646c73 chore: add `allowWholeFile` to `disable-enable-pair` eslint rule (#10506)
- 7f10a9d chore(jest-snapshot): type prettier usage properly (#10505)
- 3dd4a95 choreØ eplace function types (#10436)
- a79c34b fix: `test.each` type always return a callable function (#10488)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report