lattice
lattice copied to clipboard
[Snyk] Security upgrade jest-cli from 24.9.0 to 25.0.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- examples/minimal/package.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
501/1000 Why? Recently disclosed, Has a fix available, CVSS 4.3 |
Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: jest-cli
The new version differs by 22 commits.- ff9269b chore: bump most dated deps (#8850)
- 7594141 chore: upgrade to eslint@6 (#8855)
- b33ce0d chore: upgrade to micromatch v4 (#8852)
- d6ff72a chore: add node 12 to CI (#8411)
- 7e9b4ea chore: upgrade jsdom (#8851)
- 4bb7a2d Use `weak-napi` instead of `weak` in `jest-leak-detector`
- ce47c6c Get rid of Node 6 support (#8455)
- bc5c3c7 jest-snapshot: Remove only the added newlines in multiline snapshots (#8859)
- d523fa8 bug.md: highlights placeholder should be removed (#8836)
- 08f109c expect: Display expectedDiff more carefully in toBeCloseTo (#8389)
- b09de2d chore: bump node-notifier for node v6 support
- 557a39f fix(linter): Fix linting failure introduced in #8847 😓 (#8849)
- 012472b fix(docs): Update broken links in docs. (#8847)
- ee2bea1 chore: sort member in imports (#8846)
- 9ba4594 add Chinese Jest work with AngularJS tutorial (#8828)
- 0e5b363 chore: reduce reliance on esModuleInterop (#8842)
- d69f8d3 getTimerCount will not include cancelled immediates (#8764)
- b4bd77b Fix grammar: "your jest's config"->"your Jest..." (#8843)
- 54b3dcf Fix grammar: "a known issues"->"a known issue" (#8844)
- e76c7da docs: update matchMedia methods (#8835)
- 23b9860 chore: roll new version of docs
- 3cdbd55 Release 24.9.0
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report