Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump jest from 27.5.1 to 29.4.1 #173

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2023

Bumps jest from 27.5.1 to 29.4.1.

Release notes

Sourced from jest's releases.

v29.4.1

Features

  • [expect, jest-circus, @jest/types] Implement numPassingAsserts of testResults to track the number of passing asserts in a test (#13795)
  • [jest-core] Add newlines to JSON output (#13817)
  • [@jest/reporters] Automatic log folding in GitHub Actions Reporter (#13626)

Fixes

  • [@jest/expect-utils] toMatchObject diffs should include Symbol properties (#13810)
  • [jest-runtime] Handle missing replaceProperty (#13823)
  • [@jest/types] Add partial support for done callbacks in typings of each (#13756)

New Contributors

Full Changelog: jestjs/jest@v29.4.0...v29.4.1

v29.4.0

Features

  • [expect, @jest/expect-utils] Support custom equality testers (#13654)
  • [jest-config, jest-worker] Use os.availableParallelism if available to calculate number of workers to spawn (#13738)
  • [@jest/globals, jest-mock] Add jest.replaceProperty() that replaces property value (#13496)
  • [jest-haste-map] ignore Sapling vcs directories (.sl/) (#13674)
  • [jest-resolve] Support subpath imports (#13705, #13723, #13777)
  • [jest-runtime] Add jest.isolateModulesAsync for scoped module initialization of asynchronous functions (#13680)
  • [jest-runtime] Add jest.isEnvironmentTornDown function (#13741)
  • [jest-test-result] Added skipped and focused status to FormattedTestResult (#13700)
  • [jest-transform] Support for asynchronous createTransformer (#13762)

Fixes

  • [jest-environment-node] Fix non-configurable globals (#13687)
  • [@jest/expect-utils] toMatchObject should handle Symbol properties (#13639)
  • [jest-mock] Fix mockReset and resetAllMocks undefined return value(#13692)
  • [jest-resolve] Add global paths to require.resolve.paths (#13633)
  • [jest-resolve] Correct node core module detection when using node: specifiers (#13806)
  • [jest-runtime] Support WASM files that import JS resources (#13608)
  • [jest-runtime] Use the scriptTransformer cache in jest-runner (#13735)
  • [jest-runtime] Enforce import assertions when importing JSON in ESM (#12755 & #13805)
  • [jest-snapshot] Make sure to import babel outside of the sandbox (#13694)
  • [jest-transform] Ensure the correct configuration is passed to preprocessors specified multiple times in the transform option (#13770)

Chore & Maintenance

  • [@jest/fake-timers] Update @sinonjs/fake-timers (#13612)
  • [docs] Improve custom puppeteer example to prevent worker warnings (#13619)

... (truncated)

Changelog

Sourced from jest's changelog.

29.4.1

Features

  • [expect, jest-circus, @jest/types] Implement numPassingAsserts of testResults to track the number of passing asserts in a test (#13795)
  • [jest-core] Add newlines to JSON output (#13817)
  • [@jest/reporters] Automatic log folding in GitHub Actions Reporter (#13626)

Fixes

  • [@jest/expect-utils] toMatchObject diffs should include Symbol properties (#13810)
  • [jest-runtime] Handle missing replaceProperty (#13823)
  • [@jest/types] Add partial support for done callbacks in typings of each (#13756)

29.4.0

Features

  • [expect, @jest/expect-utils] Support custom equality testers (#13654)
  • [jest-config, jest-worker] Use os.availableParallelism if available to calculate number of workers to spawn (#13738)
  • [@jest/globals, jest-mock] Add jest.replaceProperty() that replaces property value (#13496)
  • [jest-haste-map] ignore Sapling vcs directories (.sl/) (#13674)
  • [jest-resolve] Support subpath imports (#13705, #13723, #13777)
  • [jest-runtime] Add jest.isolateModulesAsync for scoped module initialization of asynchronous functions (#13680)
  • [jest-runtime] Add jest.isEnvironmentTornDown function (#13741)
  • [jest-test-result] Added skipped and focused status to FormattedTestResult (#13700)
  • [jest-transform] Support for asynchronous createTransformer (#13762)

Fixes

  • [jest-environment-node] Fix non-configurable globals (#13687)
  • [@jest/expect-utils] toMatchObject should handle Symbol properties (#13639)
  • [jest-mock] Fix mockReset and resetAllMocks undefined return value(#13692)
  • [jest-resolve] Add global paths to require.resolve.paths (#13633)
  • [jest-resolve] Correct node core module detection when using node: specifiers (#13806)
  • [jest-runtime] Support WASM files that import JS resources (#13608)
  • [jest-runtime] Use the scriptTransformer cache in jest-runner (#13735)
  • [jest-runtime] Enforce import assertions when importing JSON in ESM (#12755 & #13805)
  • [jest-snapshot] Make sure to import babel outside of the sandbox (#13694)
  • [jest-transform] Ensure the correct configuration is passed to preprocessors specified multiple times in the transform option (#13770)

Chore & Maintenance

  • [@jest/fake-timers] Update @sinonjs/fake-timers (#13612)
  • [docs] Improve custom puppeteer example to prevent worker warnings (#13619)

29.3.1

Fixes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 27.5.1 to 29.4.1.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.4.1/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 1, 2023
@socket-security
Copy link

Socket Security Pull Request Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package Bin script Source
[email protected] (upgraded) jest package.json
[email protected] (upgraded) jest package.json via [email protected]
⚠️ Uses eval

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Package Eval Type Location Source
[email protected] (added) Function dist/cjs/handlebars/compiler/javascript-compiler.js package.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function dist/cjs/handlebars/compiler/javascript-compiler.js package.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.js package.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.js package.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.min.js package.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.min.js package.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function test/index.js package.json via @ember/[email protected], @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function test/index.js package.json via @ember/[email protected], @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (upgraded) Function build/utils.js package.json via [email protected]
[email protected] (added) Function dist/js-yaml.js package.json via [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function dist/js-yaml.js package.json via [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function lib/js-yaml/type/js/function.js package.json via [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function lib/js-yaml/type/js/function.js package.json via [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function dist/livereload.js package.json via [email protected], [email protected]
[email protected] (added) Function _root.js package.json via @ember/[email protected], @ember/[email protected], @embroider/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function template.js package.json via @ember/[email protected], @ember/[email protected], @embroider/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function index.js package.json via @ember/[email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function index.js package.json via @ember/[email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function index.js package.json via @ember/[email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function index.js package.json via [email protected], [email protected]
[email protected] (added) Function test/bigint.js package.json via @ember/[email protected], @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function test/bigint.js package.json via @ember/[email protected], @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function test/bigint.js package.json via @ember/[email protected], @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function runtime-module.js package.json via [email protected]
[email protected] (added) Function dist/bundle.min.js package.json via [email protected], [email protected]
[email protected] (added) Function dist/bundle.min.js package.json via [email protected], [email protected]
[email protected] (added) Function dist/bundle.min.js package.json via [email protected], [email protected]
[email protected] (added) Function dist/bundle.min.js package.json via [email protected], [email protected]
[email protected] (added) Function dist/bundle.min.js package.json via [email protected], [email protected]
[email protected] (added) Function tools/node.js package.json via [email protected], [email protected], [email protected], [email protected]
[email protected] (added) Function cjs/template.js package.json via [email protected], [email protected]
[email protected] (added) Function modules/template.js package.json via [email protected], [email protected]
[email protected] (added) Function yui-nodejs/yui-nodejs-debug.js package.json via [email protected]
[email protected] (added) Function yui-nodejs/yui-nodejs-min.js package.json via [email protected]
[email protected] (added) Function yui-nodejs/yui-nodejs.js package.json via [email protected]
@sinonjs/[email protected] (upgraded) eval src/fake-timers-src.js package.json via [email protected]
[email protected] (added) eval js/release/util.js package.json via [email protected], [email protected], [email protected]
[email protected] (added) eval index.js package.json via [email protected], [email protected]
[email protected] (added) eval index.js package.json via @ember/[email protected], @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) eval lib/loadLoader.js package.json via [email protected], [email protected], [email protected]
[email protected] (added) eval dist/bundle.min.js package.json via [email protected], [email protected]
[email protected] (added) eval dist/bundle.min.js package.json via [email protected], [email protected]
[email protected] (added) eval dist/bundle.min.js package.json via [email protected], [email protected], [email protected]
[email protected] (added) eval dist/workerpool.js package.json via @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) eval dist/workerpool.min.js package.json via @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) eval lib/worker.js package.json via @ember/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
⚠️ New author

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

Package New Author Previous Author Source
[email protected] (upgraded) gnoff acdlite package.json via [email protected]
[email protected] (added) lukekarrys gar package.json via [email protected]
[email protected] (added) phated thlorenz package.json via [email protected]
Pull request report summary
Issue Status
Install scripts ✅ 0 issues
Native code ✅ 0 issues
Bin script confusion ⚠️ 2 issues
Bin script shell injection ✅ 0 issues
Shell access ✅ 0 issues
Uses eval ⚠️ 46 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
GitHub dependency ✅ 0 issues
New author ⚠️ 3 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues
AI detected malware ✅ 0 issues
Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] [email protected]

Powered by socket.dev

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 1, 2023

Superseded by #174.

@dependabot dependabot bot closed this Mar 1, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/jest-29.4.1 branch March 1, 2023 05:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants