Skip to content

[Snyk] Security upgrade jest from 26.6.3 to 28.0.0#105

Open
svc-ast-gh-snyk5 wants to merge 1 commit intomasterfrom
snyk-fix-4a6598354d94ef87af32539eb5081d43
Open

[Snyk] Security upgrade jest from 26.6.3 to 28.0.0#105
svc-ast-gh-snyk5 wants to merge 1 commit intomasterfrom
snyk-fix-4a6598354d94ef87af32539eb5081d43

Conversation

@svc-ast-gh-snyk5
Copy link

snyk-top-banner

Snyk has created this PR to fix 5 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • AMF4/package.json

Merge Risk: High

This major upgrade from Jest 26 to 28 introduces significant breaking changes, including a new default test environment, removal of bundled packages, and API updates. Manual configuration and code changes are required.

Highlights:

  • Test Environment: The default environment changed from jsdom to node. For browser-based tests, you must now explicitly install jest-environment-jsdom and set testEnvironment: 'jsdom' in your config.
  • Configuration & API: The testURL option is removed; use testEnvironmentOptions instead. The expect package now uses a named export, so change import expect from 'expect' to import {expect} from 'expect'.

Source: Jest documentation
Recommendation: Carefully follow the official migration guides for v27 and v28, update your Jest configuration, and install jest-environment-jsdom before merging.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.


Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727
  696  
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
  631  
medium severity Prototype Pollution
SNYK-JS-JSYAML-13961110
  631  
high severity Prototype Pollution
SNYK-JS-UNSETVALUE-2400660
  589  
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
  479  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Inefficient Regular Expression Complexity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants