Skip to content

[Snyk] Security upgrade ava from 0.23.0 to 4.0.0 - #22

Open
ajesse11x wants to merge 1 commit into
masterfrom
snyk-fix-b6e79335a71a09b0dbd54a2e7301e2e1
Open

[Snyk] Security upgrade ava from 0.23.0 to 4.0.0#22
ajesse11x wants to merge 1 commit into
masterfrom
snyk-fix-b6e79335a71a09b0dbd54a2e7301e2e1

Conversation

@ajesse11x

Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • tests/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 556/1000
Why? Recently disclosed, Has a fix available, CVSS 5.4
Open Redirect
SNYK-JS-GOT-2932019
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: ava The new version differs by 250 commits.
  • 9bc615e 4.0.0
  • f09742f Clean up documentation in preparation for AVA 4
  • 0187779 Dependency updates
  • 29024af Test compatibility with TypeScript 4.5
  • 8df118b Use AVA 4 for the self-hosted tests
  • bedd1d0 Remove dependency on `equal-length`
  • d4ec097 Improve wording in TypeScript recipe
  • b3a1b72 Mention experimental specifier resolution in TypeScript recipe
  • 77623a5 Handle path sources
  • 5cdeb9d 4.0.0-rc.1
  • 88e7680 Final ESM tweaks
  • 60b7cf8 Align shared worker protocol identifier with provider protocols
  • ad521af Graduate shared workers to be non-experimental
  • 0edfd00 Skip flaky tests in CI
  • c4f6723 Use thread IDs
  • af30e73 Remove dead code and obsolete TODOs
  • 6ed3ad1 Reduce XO exceptions
  • 5a48893 Update XO and fix problems
  • a7737cd Update dependencies
  • dc405ef Fix Mongoose recipe
  • c214512 Find ava.config.* files outside of project directory
  • 44aebd9 Exclude more files from code coverage
  • def2885 Improve handling of temporary file changes in watch mode
  • 1a62f15 Switch to .xo-config.cjs

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-GOT-2932019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants