Fullstack-projects-frontend-with-react-and-backend-with-various-stacks icon indicating copy to clipboard operation
Fullstack-projects-frontend-with-react-and-backend-with-various-stacks copied to clipboard

Published 20 hours ago • verified publisher icon pramit-marattha

[Snyk] Security upgrade @testing-library/jest-dom from 4.2.4 to 5.1.0

Open snyk-bot opened this issue 4 years ago • 1 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • dark-mode-react-web-app-project/package.json
    • dark-mode-react-web-app-project/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @testing-library/jest-dom The new version differs by 17 commits.
  • 7921e4a feat: Enhance toHaveStyle to accept JS as css (#196)
  • 3b3a3d3 docs: add benmonro as a contributor (#195)
  • a053cdd docs: add JPBlancoDB as a contributor (#194)
  • 69aee34 docs: add koala-lava as a contributor (#193)
  • 5f3f9c7 docs: add jzarzeckis as a contributor (#192)
  • 0d60a25 docs: add MichaelDeBoey as a contributor (#191)
  • c9a8664 chore: Update dependencies (#190)
  • e4d61c2 fix: toBeVisible ignoring Details element (#184)
  • d87dfee Simplify README code usage examples (#188)
  • 030da62 fix: Add @ types/testing-library__jest-dom dependency (#189)
  • d13bb90 docs: Tiny typo (#181)
  • c919520 docs: Remove lines about using fireEvent to gain focus or blur (#187)
  • 760409a Merge pull request #183 from testing-library/next
  • d68ccd7 Add matchers module in the package root
  • c76f8c5 Remove extend-expect typings (#182)
  • 27c1056 Add jest extensions on main module (#175)
  • 8e14dc1 docs: Update examples using document.querySelector (#168)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

snyk-bot avatar Sep 15 '21 21:09 snyk-bot

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployments, click below or on the icon next to each commit.

tetris – ./tetris-react-web-app-project

🔍 Inspect: https://vercel.com/pramit-marattha/tetris/DiRJAjtLy5Sj8arJV2N6gjkRSWYP
✅ Preview: https://tetris-git-snyk-fix-d7f1bd6361d1669a56c9-52588d-pramit-marattha.vercel.app

budget-manager – ./budget-manager-react-web-app-project

🔍 Inspect: https://vercel.com/pramit-marattha/budget-manager/9jCQKJUQfUAFJbSuf9NngQQrypL3
✅ Preview: https://budget-manager-git-snyk-fix-d7f1bd6361d1-c3dcf9-pramit-marattha.vercel.app

vercel[bot] avatar Sep 15 '21 21:09 vercel[bot]