Skip to content
This repository has been archived by the owner on Jun 30, 2018. It is now read-only.

Bump mocha from 5.0.0 to 5.0.4 #8

Merged
merged 1 commit into from
Mar 15, 2018

Conversation

dependabot-preview[bot]
Copy link

Bumps mocha from 5.0.0 to 5.0.4.

Release notes

Sourced from mocha's releases.

v5.0.4

5.0.4 / 2018-03-07

🐛 Fixes

  • #3265: Fixes regression in "watch" functionality introduced in v5.0.2 ([outsideris])

[outsideris]: https://github.com/outsideris

v5.0.3

5.0.3 / 2018-03-06

This patch features a fix to address a potential "low severity" ReDoS vulnerability in the diff package (a dependency of Mocha).

🔒 Security Fixes

🔩 Other

[anishkny]: https://github.com/anishkny
[harrysarson]: https://github.com/harrysarson

v5.0.2

5.0.2 / 2018-03-05

This release fixes a class of tests which report as false positives. Certain tests will now break, though they would have previously been reported as passing. Details below. Sorry for the inconvenience!

🐛 Fixes

  • [#3226]: Do not swallow errors that are thrown asynchronously from passing tests ([boneskull]). Example:

    it('should actually fail, sorry!', function (done) {
      // passing assertion
      assert(true === true);
    
      // test complete & is marked as passing
      done();
    
      // ...but something evil lurks within
      setTimeout(() => {
        throw new Error('chaos!');
      }, 100);

... (truncated)

Changelog

Sourced from mocha's changelog.

5.0.4 / 2018-03-07

🐛 Fixes

  • #3265: Fixes regression in "watch" functionality introduced in v5.0.2 ([outsideris])

5.0.3 / 2018-03-06

This patch features a fix to address a potential "low severity" ReDoS vulnerability in the diff package (a dependency of Mocha).

🔒 Security Fixes

🔩 Other

[anishkny]: https://github.com/anishkny
[harrysarson]: https://github.com/harrysarson

5.0.2 / 2018-03-05

This release fixes a class of tests which report as false positives. Certain tests will now break, though they would have previously been reported as passing. Details below. Sorry for the inconvenience!

🐛 Fixes

  • [#3226]: Do not swallow errors that are thrown asynchronously from passing tests ([boneskull]). Example:

    it('should actually fail, sorry!', function (done) {
      // passing assertion
      assert(true === true);
    
      // test complete & is marked as passing
      done();
    
      // ...but something evil lurks within
      setTimeout(() => {
        throw new Error('chaos!');
      }, 100);
    });

    Previously to this version, Mocha would have silently swallowed the chaos! exception, and you wouldn't know. Well, now you know. Mocha cannot recover from this gracefully, so it will exit with a nonzero code.
    ... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If you'd like to skip this version, you can just close this PR. If you have any feedback just mention @dependabot in the comments below.


Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

@atherdon atherdon merged commit 8721a25 into master Mar 15, 2018
@dependabot-preview dependabot-preview bot deleted the dependabot/npm_and_yarn/mocha-5.0.4 branch March 15, 2018 03:53
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants