Skip to content

Commit af3b1be

Browse files
authored
chore(deps): fix vulnerability inefficient regular expression complexity (#15082)
1 parent b7541ac commit af3b1be

File tree

8 files changed

+38
-37
lines changed

8 files changed

+38
-37
lines changed

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,7 @@
7979

8080
### Chore & Maintenance
8181

82+
- `[*]` Increase version of `micromatch` to `^4.0.7` ([#15082](https://github.com/jestjs/jest/pull/15082))
8283
- `[*]` [**BREAKING**] Drop support for Node.js versions 14 and 19 ([#14460](https://github.com/jestjs/jest/pull/14460))
8384
- `[*]` [**BREAKING**] Drop support for `[email protected]`, minimum version is now `5.0` ([#14542](https://github.com/jestjs/jest/pull/14542))
8485
- `[*]` Depend on exact versions of monorepo dependencies instead of `^` range ([#14553](https://github.com/jestjs/jest/pull/14553))

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@
6161
"jest-watch-typeahead": "^2.2.0",
6262
"jquery": "^3.2.1",
6363
"js-yaml": "^4.1.0",
64-
"micromatch": "^4.0.4",
64+
"micromatch": "^4.0.7",
6565
"mock-fs": "^5.1.2",
6666
"netlify-plugin-cache": "^1.0.3",
6767
"node-notifier": "^10.0.0",

packages/jest-config/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,15 +49,15 @@
4949
"jest-runner": "workspace:*",
5050
"jest-util": "workspace:*",
5151
"jest-validate": "workspace:*",
52-
"micromatch": "^4.0.4",
52+
"micromatch": "^4.0.7",
5353
"parse-json": "^5.2.0",
5454
"pretty-format": "workspace:*",
5555
"slash": "^3.0.0",
5656
"strip-json-comments": "^3.1.1"
5757
},
5858
"devDependencies": {
5959
"@types/graceful-fs": "^4.1.3",
60-
"@types/micromatch": "^4.0.1",
60+
"@types/micromatch": "^4.0.7",
6161
"@types/parse-json": "^4.0.0",
6262
"semver": "^7.5.3",
6363
"ts-node": "^10.5.0",

packages/jest-core/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@
3939
"jest-util": "workspace:*",
4040
"jest-validate": "workspace:*",
4141
"jest-watcher": "workspace:*",
42-
"micromatch": "^4.0.4",
42+
"micromatch": "^4.0.7",
4343
"pretty-format": "workspace:*",
4444
"slash": "^3.0.0",
4545
"strip-ansi": "^6.0.0"
@@ -49,7 +49,7 @@
4949
"@jest/test-utils": "workspace:*",
5050
"@types/exit": "^0.1.30",
5151
"@types/graceful-fs": "^4.1.3",
52-
"@types/micromatch": "^4.0.1"
52+
"@types/micromatch": "^4.0.7"
5353
},
5454
"peerDependencies": {
5555
"node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0"

packages/jest-haste-map/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,13 @@
2727
"jest-regex-util": "workspace:*",
2828
"jest-util": "workspace:*",
2929
"jest-worker": "workspace:*",
30-
"micromatch": "^4.0.4",
30+
"micromatch": "^4.0.7",
3131
"walker": "^1.0.8"
3232
},
3333
"devDependencies": {
3434
"@types/fb-watchman": "^2.0.0",
3535
"@types/graceful-fs": "^4.1.3",
36-
"@types/micromatch": "^4.0.1",
36+
"@types/micromatch": "^4.0.7",
3737
"slash": "^3.0.0"
3838
},
3939
"optionalDependencies": {

packages/jest-message-util/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@
2727
"@types/stack-utils": "^2.0.0",
2828
"chalk": "^4.0.0",
2929
"graceful-fs": "^4.2.9",
30-
"micromatch": "^4.0.4",
30+
"micromatch": "^4.0.7",
3131
"pretty-format": "workspace:*",
3232
"slash": "^3.0.0",
3333
"stack-utils": "^2.0.3"
3434
},
3535
"devDependencies": {
3636
"@types/babel__code-frame": "^7.0.0",
3737
"@types/graceful-fs": "^4.1.3",
38-
"@types/micromatch": "^4.0.1",
38+
"@types/micromatch": "^4.0.7",
3939
"tempy": "^1.0.0"
4040
},
4141
"publishConfig": {

packages/jest-transform/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
"jest-haste-map": "workspace:*",
3131
"jest-regex-util": "workspace:*",
3232
"jest-util": "workspace:*",
33-
"micromatch": "^4.0.4",
33+
"micromatch": "^4.0.7",
3434
"pirates": "^4.0.4",
3535
"slash": "^3.0.0",
3636
"write-file-atomic": "^5.0.0"
@@ -40,7 +40,7 @@
4040
"@types/babel__core": "^7.1.14",
4141
"@types/convert-source-map": "^2.0.0",
4242
"@types/graceful-fs": "^4.1.3",
43-
"@types/micromatch": "^4.0.1",
43+
"@types/micromatch": "^4.0.7",
4444
"@types/write-file-atomic": "^4.0.0",
4545
"dedent": "^1.0.0"
4646
},

yarn.lock

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2899,7 +2899,7 @@ __metadata:
28992899
"@jest/types": "workspace:*"
29002900
"@types/exit": ^0.1.30
29012901
"@types/graceful-fs": ^4.1.3
2902-
"@types/micromatch": ^4.0.1
2902+
"@types/micromatch": ^4.0.7
29032903
"@types/node": "*"
29042904
ansi-escapes: ^4.2.1
29052905
chalk: ^4.0.0
@@ -2919,7 +2919,7 @@ __metadata:
29192919
jest-util: "workspace:*"
29202920
jest-validate: "workspace:*"
29212921
jest-watcher: "workspace:*"
2922-
micromatch: ^4.0.4
2922+
micromatch: ^4.0.7
29232923
pretty-format: "workspace:*"
29242924
slash: ^3.0.0
29252925
strip-ansi: ^6.0.0
@@ -3089,7 +3089,7 @@ __metadata:
30893089
jest-watch-typeahead: ^2.2.0
30903090
jquery: ^3.2.1
30913091
js-yaml: ^4.1.0
3092-
micromatch: ^4.0.4
3092+
micromatch: ^4.0.7
30933093
mock-fs: ^5.1.2
30943094
netlify-plugin-cache: ^1.0.3
30953095
node-notifier: ^10.0.0
@@ -3289,7 +3289,7 @@ __metadata:
32893289
"@types/babel__core": ^7.1.14
32903290
"@types/convert-source-map": ^2.0.0
32913291
"@types/graceful-fs": ^4.1.3
3292-
"@types/micromatch": ^4.0.1
3292+
"@types/micromatch": ^4.0.7
32933293
"@types/write-file-atomic": ^4.0.0
32943294
babel-plugin-istanbul: ^6.1.1
32953295
chalk: ^4.0.0
@@ -3300,7 +3300,7 @@ __metadata:
33003300
jest-haste-map: "workspace:*"
33013301
jest-regex-util: "workspace:*"
33023302
jest-util: "workspace:*"
3303-
micromatch: ^4.0.4
3303+
micromatch: ^4.0.7
33043304
pirates: ^4.0.4
33053305
slash: ^3.0.0
33063306
write-file-atomic: ^5.0.0
@@ -5324,7 +5324,7 @@ __metadata:
53245324
languageName: node
53255325
linkType: hard
53265326

5327-
"@types/micromatch@npm:^4.0.1":
5327+
"@types/micromatch@npm:^4.0.7":
53285328
version: 4.0.7
53295329
resolution: "@types/micromatch@npm:4.0.7"
53305330
dependencies:
@@ -7014,12 +7014,12 @@ __metadata:
70147014
languageName: node
70157015
linkType: hard
70167016

7017-
"braces@npm:^3.0.2, braces@npm:~3.0.2":
7018-
version: 3.0.2
7019-
resolution: "braces@npm:3.0.2"
7017+
"braces@npm:^3.0.3, braces@npm:~3.0.2":
7018+
version: 3.0.3
7019+
resolution: "braces@npm:3.0.3"
70207020
dependencies:
7021-
fill-range: ^7.0.1
7022-
checksum: e2a8e769a863f3d4ee887b5fe21f63193a891c68b612ddb4b68d82d1b5f3ff9073af066c343e9867a393fe4c2555dcb33e89b937195feb9c1613d259edfcd459
7021+
fill-range: ^7.1.1
7022+
checksum: b95aa0b3bd909f6cd1720ffcf031aeaf46154dd88b4da01f9a1d3f7ea866a79eba76a6d01cbc3c422b2ee5cdc39a4f02491058d5df0d7bf6e6a162a832df1f69
70237023
languageName: node
70247024
linkType: hard
70257025

@@ -10304,12 +10304,12 @@ __metadata:
1030410304
languageName: node
1030510305
linkType: hard
1030610306

10307-
"fill-range@npm:^7.0.1":
10308-
version: 7.0.1
10309-
resolution: "fill-range@npm:7.0.1"
10307+
"fill-range@npm:^7.1.1":
10308+
version: 7.1.1
10309+
resolution: "fill-range@npm:7.1.1"
1031010310
dependencies:
1031110311
to-regex-range: ^5.0.1
10312-
checksum: cc283f4e65b504259e64fd969bcf4def4eb08d85565e906b7d36516e87819db52029a76b6363d0f02d0d532f0033c9603b9e2d943d56ee3b0d4f7ad3328ff917
10312+
checksum: b4abfbca3839a3d55e4ae5ec62e131e2e356bf4859ce8480c64c4876100f4df292a63e5bb1618e1d7460282ca2b305653064f01654474aa35c68000980f17798
1031310313
languageName: node
1031410314
linkType: hard
1031510315

@@ -12772,7 +12772,7 @@ __metadata:
1277212772
"@jest/test-sequencer": "workspace:*"
1277312773
"@jest/types": "workspace:*"
1277412774
"@types/graceful-fs": ^4.1.3
12775-
"@types/micromatch": ^4.0.1
12775+
"@types/micromatch": ^4.0.7
1277612776
"@types/parse-json": ^4.0.0
1277712777
babel-jest: "workspace:*"
1277812778
chalk: ^4.0.0
@@ -12788,7 +12788,7 @@ __metadata:
1278812788
jest-runner: "workspace:*"
1278912789
jest-util: "workspace:*"
1279012790
jest-validate: "workspace:*"
12791-
micromatch: ^4.0.4
12791+
micromatch: ^4.0.7
1279212792
parse-json: ^5.2.0
1279312793
pretty-format: "workspace:*"
1279412794
semver: ^7.5.3
@@ -12893,7 +12893,7 @@ __metadata:
1289312893
"@jest/types": "workspace:*"
1289412894
"@types/fb-watchman": ^2.0.0
1289512895
"@types/graceful-fs": ^4.1.3
12896-
"@types/micromatch": ^4.0.1
12896+
"@types/micromatch": ^4.0.7
1289712897
"@types/node": "*"
1289812898
anymatch: ^3.0.3
1289912899
fb-watchman: ^2.0.0
@@ -12902,7 +12902,7 @@ __metadata:
1290212902
jest-regex-util: "workspace:*"
1290312903
jest-util: "workspace:*"
1290412904
jest-worker: "workspace:*"
12905-
micromatch: ^4.0.4
12905+
micromatch: ^4.0.7
1290612906
slash: ^3.0.0
1290712907
walker: ^1.0.8
1290812908
dependenciesMeta:
@@ -12996,11 +12996,11 @@ __metadata:
1299612996
"@jest/types": "workspace:*"
1299712997
"@types/babel__code-frame": ^7.0.0
1299812998
"@types/graceful-fs": ^4.1.3
12999-
"@types/micromatch": ^4.0.1
12999+
"@types/micromatch": ^4.0.7
1300013000
"@types/stack-utils": ^2.0.0
1300113001
chalk: ^4.0.0
1300213002
graceful-fs: ^4.2.9
13003-
micromatch: ^4.0.4
13003+
micromatch: ^4.0.7
1300413004
pretty-format: "workspace:*"
1300513005
slash: ^3.0.0
1300613006
stack-utils: ^2.0.3
@@ -15266,13 +15266,13 @@ __metadata:
1526615266
languageName: node
1526715267
linkType: hard
1526815268

15269-
"micromatch@npm:^4.0.2, micromatch@npm:^4.0.4, micromatch@npm:^4.0.5":
15270-
version: 4.0.5
15271-
resolution: "micromatch@npm:4.0.5"
15269+
"micromatch@npm:^4.0.2, micromatch@npm:^4.0.4, micromatch@npm:^4.0.5, micromatch@npm:^4.0.7":
15270+
version: 4.0.7
15271+
resolution: "micromatch@npm:4.0.7"
1527215272
dependencies:
15273-
braces: ^3.0.2
15273+
braces: ^3.0.3
1527415274
picomatch: ^2.3.1
15275-
checksum: 02a17b671c06e8fefeeb6ef996119c1e597c942e632a21ef589154f23898c9c6a9858526246abb14f8bca6e77734aa9dcf65476fca47cedfb80d9577d52843fc
15275+
checksum: 3cde047d70ad80cf60c787b77198d680db3b8c25b23feb01de5e2652205d9c19f43bd81882f69a0fd1f0cde6a7a122d774998aad3271ddb1b8accf8a0f480cf7
1527615276
languageName: node
1527715277
linkType: hard
1527815278

0 commit comments

Comments
 (0)