Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade mocha-jenkins-reporter from 0.1.9 to 0.4.3 #13

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

kekazoh
Copy link
Owner

@kekazoh kekazoh commented Nov 30, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • microtrader-specs/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: mocha-jenkins-reporter The new version differs by 86 commits.
  • c4ad366 Update version number to 0.4.3
  • b12abe1 also update mocha
  • 16c2ba3 update mkdirp to fix security issue
  • 93e5b23 [misc] fix the dependency relation with mocha
  • d313c64 Update version number to 0.4.2.
  • cb036cc Upgrade eslint to avoid a vulnerability warning.
  • da16815 Upgrade diff to the latest version, should be compatible.
  • 70a7625 Remove invalid characters from failure message.
  • 2747938 Update version number to 0.4.1.
  • 939f2af Better support skipped cypress.io test cases
  • 38472fb Update version number to 0.4.0.
  • f04d816 Merge pull request #79 from mrbar42/patch-1
  • e95468c update mocha due to vulnerability
  • dd99369 Update version number to 0.3.12.
  • ac36626 Fix a possible crash as suggested by #51.
  • ae5cfb6 Update README to avoid confusion.
  • 707f690 Enable the epilogue again, but this time inside a try-catch.
  • 3736ba4 Merge pull request #73 from eyalzek/fix/fd-closed
  • f3f582a Update version number to 0.3.11.
  • a029c0e Merge pull request #76 from lmarkus/master
  • ef2ba3a Use the checkmark (✓) character for passing tests. Fixes #67
  • d2da9ad Merge pull request #71 from dostu/master
  • 61aa7c7 Comment out `epilogue` for now
  • ca75b70 Set `fd` to null after closing it

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants