Skip to content

Use ts-jest@25.5.1 - #264

Merged
whymarrh merged 1 commit into
developfrom
update-ts-jest
Sep 8, 2020
Merged

Use ts-jest@25.5.1#264
whymarrh merged 1 commit into
developfrom
update-ts-jest

Conversation

@whymarrh

Copy link
Copy Markdown
Contributor

This PR updates ts-jest to address a security advisory with yargs-parser.

See https://www.npmjs.com/advisories/1500 for more information.

The yarn audit output:

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ ts-jest │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ ts-jest > yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1500 │
└───────────────┴──────────────────────────────────────────────────────────────┘

@whymarrh
whymarrh requested a review from a team as a code ownerSeptember 7, 2020 14:46

@GudahttGudahtt left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@whymarrh
whymarrh merged commit b97abbf into developSep 8, 2020
@whymarrh
whymarrh deleted the update-ts-jest branch September 8, 2020 17:16
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@whymarrh@Gudahtt