[Snyk] Upgrade: babel-jest, jest #14

MarcelRaschke · 2022-10-22T23:54:47Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
babel-jest from 26.6.3 to 29.1.2	67 versions ahead of your current version ⚠️ This is a major version upgrade, and may be a breaking change	23 days ago on 2022-09-30
jest from 26.6.3 to 29.1.2	72 versions ahead of your current version ⚠️ This is a major version upgrade, and may be a breaking change	23 days ago on 2022-09-30

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Improper Input Validation SNYK-JS-URLPARSE-2407770	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Directory Traversal SNYK-JS-MOMENT-2440688	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-MIXME-1278998	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Command Injection SNYK-JS-LODASH-1040724	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Authorization Bypass SNYK-JS-URLPARSE-2407759	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Access Restriction Bypass SNYK-JS-URLPARSE-2401205	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Open Redirect SNYK-JS-URLPARSE-1533425	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Command Injection SNYK-JS-NODENOTIFIER-1035794	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	726/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: babel-jest

29.1.2 - 2022-09-30
Fixes
- [expect, @ jest/expect] Revert buggy inference of argument types for *CalledWith and *ReturnedWith matchers introduced in 29.1.0 (#13339)
- [jest-worker] Add missing dependency on jest-util (#13341)
New Contributors
- @ brunocabral88 made their first contribution in #13329
- @ alexander-akait made their first contribution in #13341
Full Changelog: v29.1.1...v29.1.2
29.1.0 - 2022-09-28
Features
- [expect, @ jest/expect] support type inference for function parameters in CalledWith assertions (#13268)
- [expect, @ jest/expect] Infer type of *ReturnedWith matchers argument (#13278)
- [@ jest/environment, jest-runtime] Allow jest.requireActual and jest.requireMock to take a type argument (#13253)
- [@ jest/environment] Allow jest.mock and jest.doMock to take a type argument (#13254)
- [@ jest/fake-timers] Add jest.now() to return the current fake clock time (#13244, #13246)
- [@ jest/mock] Add withImplementation method for temporarily overriding a mock (#13281)
- [expect] Export toThrow* matchers (#13328)
Fixes
- [jest-circus, jest-jasmine2] Fix error messages for Node's assert.throes (#13322)
- [jest-haste-map] Remove __proto__ usage (#13256)
- [jest-mock] Improve spyOn typings to handle optional properties (#13247)
- [jest-mock] Fix mocking of getters and setters on classes (#13145)
- [jest-snapshot] Throw useful error when an array is passed as property matchers (#13263)
- [jest-snapshot] Prioritize parser used in the project (#13323)
- [jest-transform] Attempt to work around issues with atomic writes on Windows (#11423)
New Contributors
- @ fzn0x made their first contribution in #13234
- @ guimard made their first contribution in #13256
- @ weidehai made their first contribution in #13270
- @ kettanaito made their first contribution in #12871
- @ royhadad made their first contribution in #13279
- @ ghiscoding made their first contribution in #13290
- @ paulreece made their first contribution in #13311
- @ jeppester made their first contribution in #13281
- @ sashashura made their first contribution in #13324
- @ lpizzinidev made their first contribution in #13322
- @ JVBorges made their first contribution in #13323
- @ staplespeter made their first contribution in #13145
Full Changelog: v29.0.3...v29.1.0
29.0.3 - 2022-09-10
Features
- [@ jest/environment, jest-runtime] Allow passing a generic type argument to jest.createMockFromModule<T>() method (#13202)
- [expect] Expose ExpectationResult type (#13240)
- [jest-snapshot] Expose Context type (#13240)
- [@ jest/globals] Add jest.Mock type helper (#13235)
Fixes
- [jest-core] Capture execError during TestScheduler.scheduleTests and dispatch to reporters (#13203)
- [jest-resolve] Make sure to resolve module paths after looking at exports (#13242)
- [jest-resolve] Improve error on module not found deep in the require stack (#8704)
- [jest-snapshot] Fix typings of snapshot matchers (#13240)
Chore & Maintenance
- [*] Fix inconsistent workspace prefixes (#13217)
- [jest-haste-map] Expose a minimal public API to TypeScript (#13023)
New Contributors
- @ iamWing made their first contribution in #13191
- @ shinxi made their first contribution in #12930
- @ bmish made their first contribution in #13217
- @ maschwenk made their first contribution in #13226
Full Changelog: v29.0.2...v29.0.3
29.0.2 - 2022-09-03
Features
- [jest-transform] Expose TransformFactory type (#13184)
Fixes
- [babel-plugin-jest-hoist] Support imported jest in mock factory (#13188)
- [jest-mock] Align the behavior and return type of generateFromMetadata method (#13207)
- [jest-runtime] Support jest.resetModules() with ESM (#13211)
New Contributors
- @ momokid made their first contribution in #13194
Full Changelog: v29.0.1...v29.0.2
29.0.1 - 2022-08-26
Fixes
- [jest-snapshot] Pass snapshotFormat through when diffing snapshots (#13181)
Full Changelog: v29.0.0...v29.0.1
29.0.0 - 2022-08-25
Read more
29.0.0-alpha.6 - 2022-08-19
Read more
29.0.0-alpha.5 - 2022-08-11
What's Changed
- fix: pipe workerIdleMemoryLimit to globalConfig by @ backmask in #13106
- fix: worker being killed after being spawned and other worker bugs by @ phawxby in #13107
New Contributors
- @ backmask made their first contribution in #13106
Full Changelog: v29.0.0-alpha.4...v29.0.0-alpha.5
29.0.0-alpha.4 - 2022-08-08
Read more
29.0.0-alpha.3 - 2022-08-07
29.0.0-alpha.1 - 2022-08-04
29.0.0-alpha.0 - 2022-07-17
28.1.3 - 2022-07-13
28.1.2 - 2022-06-29
28.1.1 - 2022-06-07
28.1.0 - 2022-05-06
28.0.3 - 2022-04-29
28.0.2 - 2022-04-27
28.0.1 - 2022-04-26
28.0.0 - 2022-04-25
28.0.0-alpha.11 - 2022-04-20
28.0.0-alpha.10 - 2022-04-20
28.0.0-alpha.9 - 2022-04-19
28.0.0-alpha.8 - 2022-04-05
28.0.0-alpha.7 - 2022-03-06
28.0.0-alpha.6 - 2022-03-01
28.0.0-alpha.5 - 2022-02-24
28.0.0-alpha.4 - 2022-02-22
28.0.0-alpha.3 - 2022-02-17
28.0.0-alpha.2 - 2022-02-16
28.0.0-alpha.1 - 2022-02-15
28.0.0-alpha.0 - 2022-02-10
27.5.1 - 2022-02-08
27.5.0 - 2022-02-05
27.4.6 - 2022-01-04
27.4.5 - 2021-12-13
27.4.4 - 2021-12-10
27.4.2 - 2021-11-30
27.4.1 - 2021-11-30
27.4.0 - 2021-11-29
27.3.1 - 2021-10-19
27.3.0 - 2021-10-17
27.2.5 - 2021-10-08
27.2.4 - 2021-09-29
27.2.3 - 2021-09-28
27.2.2 - 2021-09-25
27.2.1 - 2021-09-20
27.2.0 - 2021-09-13
27.1.1 - 2021-09-08
27.1.0 - 2021-08-27
27.0.6 - 2021-06-28
27.0.5 - 2021-06-22
27.0.2 - 2021-05-29
27.0.1 - 2021-05-25
27.0.0 - 2021-05-25
27.0.0-next.11 - 2021-05-20
27.0.0-next.10 - 2021-05-20
27.0.0-next.9 - 2021-05-04
27.0.0-next.8 - 2021-04-12
27.0.0-next.7 - 2021-04-02
27.0.0-next.6 - 2021-03-25
27.0.0-next.5 - 2021-03-15
27.0.0-next.4 - 2021-03-08
27.0.0-next.3 - 2021-02-18
27.0.0-next.2 - 2020-12-07
27.0.0-next.1 - 2020-12-07
27.0.0-next.0 - 2020-12-05
26.6.3 - 2020-11-04

from babel-jest GitHub release notes

Package name: jest

29.1.2 - 2022-09-30
Read more
29.1.1 - 2022-09-28
Fixes
- [jest-mock] Revert #13145 which broke mocking of transpiled ES modules
Full Changelog: v29.1.0...v29.1.1
29.1.0 - 2022-09-28
Read more
29.0.3 - 2022-09-10
Read more
29.0.2 - 2022-09-03
Read more
29.0.1 - 2022-08-26
Read more
29.0.0 - 2022-08-25
Read more
29.0.0-alpha.6 - 2022-08-19
Read more
29.0.0-alpha.5 - 2022-08-11
Read more
29.0.0-alpha.4 - 2022-08-08
Read more
29.0.0-alpha.3 - 2022-08-07
29.0.0-alpha.1 - 2022-08-04
29.0.0-alpha.0 - 2022-07-17
28.1.3 - 2022-07-13
28.1.2 - 2022-06-29
28.1.1 - 2022-06-07
28.1.0 - 2022-05-06
28.0.3 - 2022-04-29
28.0.2 - 2022-04-27
28.0.1 - 2022-04-26
28.0.0 - 2022-04-25
28.0.0-alpha.11 - 2022-04-20
28.0.0-alpha.10 - 2022-04-20
28.0.0-alpha.9 - 2022-04-19
28.0.0-alpha.8 - 2022-04-05
28.0.0-alpha.7 - 2022-03-06
28.0.0-alpha.6 - 2022-03-01
28.0.0-alpha.5 - 2022-02-24
28.0.0-alpha.4 - 2022-02-22
28.0.0-alpha.3 - 2022-02-17
28.0.0-alpha.2 - 2022-02-16
28.0.0-alpha.1 - 2022-02-15
28.0.0-alpha.0 - 2022-02-10
27.5.1 - 2022-02-08
27.5.0 - 2022-02-05
27.4.7 - 2022-01-05
27.4.6 - 2022-01-04
27.4.5 - 2021-12-13
27.4.4 - 2021-12-10
27.4.3 - 2021-12-01
27.4.2 - 2021-11-30
27.4.1 - 2021-11-30
27.4.0 - 2021-11-29
27.3.1 - 2021-10-19
27.3.0 - 2021-10-17
27.2.5 - 2021-10-08
27.2.4 - 2021-09-29
27.2.3 - 2021-09-28
27.2.2 - 2021-09-25
27.2.1 - 2021-09-20
27.2.0 - 2021-09-13
27.1.1 - 2021-09-08
27.1.0 - 2021-08-27
27.0.6 - 2021-06-28
27.0.5 - 2021-06-22
27.0.4 - 2021-06-03
27.0.3 - 2021-05-29
27.0.2 - 2021-05-29
27.0.1 - 2021-05-25
27.0.0 - 2021-05-25
27.0.0-next.11 - 2021-05-20
27.0.0-next.10 - 2021-05-20
27.0.0-next.9 - 2021-05-04
27.0.0-next.8 - 2021-04-12
27.0.0-next.7 - 2021-04-02
27.0.0-next.6 - 2021-03-25
27.0.0-next.5 - 2021-03-15
27.0.0-next.4 - 2021-03-08
27.0.0-next.3 - 2021-02-18
27.0.0-next.2 - 2020-12-07
27.0.0-next.1 - 2020-12-07
27.0.0-next.0 - 2020-12-05
26.6.3 - 2020-11-04

from jest GitHub release notes

Commit messages

Package name: babel-jest

3c31dd6 v29.1.2
5172592 chore: update changelog for release
9adadc4 fix: add jest-worker's missing dependency (#13341)
be0d4d1 fix(expect, @ jest/expect): do not infer argument types of `*CalledWith` and `*ReturnedWith` matchers (#13339)
e574964 chore: clean up extra `*` in TSDoc comments (#13336)
e21c5ab docs: update `--filter` to match code implementation (#13329)
fd9cd90 v29.1.1
52d45be Revert "fix: mocking of getters/setters on automatically mocked classes (#13145)"
738fbfb chore: tweak changelog
51f1030 v29.1.0
ba9b7fe chore: update changelog for release
b275e25 docs: roll version 29.1
82e503f fix: mocking of getters/setters on automatically mocked classes (#13145)
4adf6ab Additional fix for fix: Excluded settings and scripts globs microsoft/BotFramework-Composer#4444 to prevent errors on windows (#11423)
0c15eb6 fix: prioritize parser used in the project (#13323)
e341e46 fix: adjusted assert.throws error format when thrown (#13322)
96ac587 docs: matchers admonitions (#13309)
987102f docs: React Native tutorial admonitions (#13308)
ea6c200 docs: CLI admonitions (#13293)
cceeb30 docs: add admonitions to all versions of webpack docs (#13321)
f043e05 docs: getting Started admonitions (#13299)
6ca27a0 docs: ES6 class mocks admonitions (#13297)
6655c46 docs: add some type info for expect docs (#13317)
0919e13 docs: react tutorial admonitions (#13307)

Compare

Package name: jest

3c31dd6 v29.1.2
5172592 chore: update changelog for release
9adadc4 fix: add jest-worker's missing dependency (#13341)
be0d4d1 fix(expect, @ jest/expect): do not infer argument types of `*CalledWith` and `*ReturnedWith` matchers (#13339)
e574964 chore: clean up extra `*` in TSDoc comments (#13336)
e21c5ab docs: update `--filter` to match code implementation (#13329)
fd9cd90 v29.1.1
52d45be Revert "fix: mocking of getters/setters on automatically mocked classes (#13145)"
738fbfb chore: tweak changelog
51f1030 v29.1.0
ba9b7fe chore: update changelog for release
b275e25 docs: roll version 29.1
82e503f fix: mocking of getters/setters on automatically mocked classes (#13145)
4adf6ab Additional fix for fix: Excluded settings and scripts globs microsoft/BotFramework-Composer#4444 to prevent errors on windows (#11423)
0c15eb6 fix: prioritize parser used in the project (#13323)
e341e46 fix: adjusted assert.throws error format when thrown (#13322)
96ac587 docs: matchers admonitions (#13309)
987102f docs: React Native tutorial admonitions (#13308)
ea6c200 docs: CLI admonitions (#13293)
cceeb30 docs: add admonitions to all versions of webpack docs (#13321)
f043e05 docs: getting Started admonitions (#13299)
6ca27a0 docs: ES6 class mocks admonitions (#13297)
6655c46 docs: add some type info for expect docs (#13317)
0919e13 docs: react tutorial admonitions (#13307)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Create SECURITY.md

Snyk has created this PR to upgrade: - babel-jest from 26.6.3 to 29.1.2. See this package in npm: https://www.npmjs.com/package/babel-jest - jest from 26.6.3 to 29.1.2. See this package in npm: https://www.npmjs.com/package/jest See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/f93810f7-2e2e-405e-ab09-08928fac7953?utm_source=github&utm_medium=referral&page=upgrade-pr

MarcelRaschke and others added 3 commits May 2, 2021 22:27

Create SECURITY.md

c7e2e1d

Merge pull request #9 from devcode1981/main

5a3f566

Create SECURITY.md

pull bot force-pushed the main branch from 5a3f566 to e0939df Compare January 2, 2025 09:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: babel-jest, jest #14

[Snyk] Upgrade: babel-jest, jest #14

MarcelRaschke commented Oct 22, 2022

Fixes

New Contributors

Features

Fixes

New Contributors

Features

Fixes

Chore & Maintenance

New Contributors

Features

Fixes

New Contributors

Fixes

What's Changed

New Contributors

Fixes

[Snyk] Upgrade: babel-jest, jest #14

Are you sure you want to change the base?

[Snyk] Upgrade: babel-jest, jest #14

Conversation

MarcelRaschke commented Oct 22, 2022

Snyk has created this PR to upgrade multiple dependencies.

Fixes

New Contributors

Features

Fixes

New Contributors

Features

Fixes

Chore & Maintenance

New Contributors

Features

Fixes

New Contributors

Fixes

What's Changed

New Contributors

Fixes