Skip to content

Commit 232f177

Browse files
bors[bot]bidoubiwa
andauthored
Merge #747
747: Remove node-notifier vulnerability r=curquiza a=bidoubiwa Updated Jest that uses node-notifier. Version 8.0.0 of node-notifier introduced a injection risk by not checking the type an input. Updated to latest jest fixes that issue. Co-authored-by: Charlotte Vermandel <[email protected]>
2 parents ac1609b + 72ad550 commit 232f177

File tree

2 files changed

+751
-616
lines changed

2 files changed

+751
-616
lines changed

package.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -65,8 +65,8 @@
6565
"@rollup/plugin-babel": "^5.2.0",
6666
"@rollup/plugin-commonjs": "17.0.0",
6767
"@rollup/plugin-json": "^4.0.2",
68-
"@rollup/plugin-node-resolve": "11.1.0",
69-
"@types/jest": "26.0.14",
68+
"@rollup/plugin-node-resolve": "11.0.0",
69+
"@types/jest": "^26.0.14",
7070
"@types/prettier": "^2.0.0",
7171
"@typescript-eslint/eslint-plugin": "2.34.0",
7272
"@typescript-eslint/parser": "2.34.0",
@@ -83,7 +83,7 @@
8383
"eslint-plugin-promise": "4",
8484
"eslint-plugin-standard": "5",
8585
"gzip-size": "^6.0.0",
86-
"jest": "^25.2.4",
86+
"jest": "^26.6.3",
8787
"jest-watch-typeahead": "^0.5.0",
8888
"kleur": "^4.0.0",
8989
"lint-staged": "10.5.1",
@@ -93,7 +93,7 @@
9393
"rollup-plugin-terser": "^7.0.0",
9494
"rollup-plugin-typescript2": "^0.29.0",
9595
"shx": "^0.3.2",
96-
"ts-jest": "^25.3.0",
96+
"ts-jest": "^26.4.4",
9797
"typescript": "3.9.7"
9898
}
9999
}

0 commit comments

Comments
 (0)