Skip to content

Commit

Permalink
Add 'Mocha@11' as a peer dependency
Browse files Browse the repository at this point in the history
Also this updates 'eslint' to v8.57.1 and overrides 'cross-spawn' to ^7.0.6 in order to
fix the known vulnerabilities:

```

ajv  <6.12.3
Severity: moderate
Prototype Pollution in Ajv - GHSA-v88g-cgmw-v5xw
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/ajv
  ajv-keywords  2.1.1
  Depends on vulnerable versions of ajv
  node_modules/ajv-keywords
  eslint  2.5.0 - 2.5.2 || 4.2.0 - 5.0.0-rc.0
  Depends on vulnerable versions of ajv
  Depends on vulnerable versions of cross-spawn
  Depends on vulnerable versions of table
  node_modules/eslint
  table  3.7.10 - 4.0.2
  Depends on vulnerable versions of ajv
  node_modules/table

cross-spawn  <6.0.6
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - GHSA-3xgq-45jj-v275
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/cross-spawn

5 vulnerabilities (3 moderate, 2 high)
```

Signed-off-by: Victor Rubezhny <[email protected]>
  • Loading branch information
vrubezhny committed Dec 2, 2024
1 parent 5d0ec19 commit 33faefa
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -23,14 +23,17 @@
"xml": "^1.0.1"
},
"peerDependencies": {
"mocha": "^5.2.0 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0"
"mocha": "^5.2.0 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0"
},
"overrides": {
"cross-spawn": "^7.0.6"
},
"author": "Juho Vähä-Herttua",
"license": "MIT",
"bugs": {
"url": "https://github.com/juhovh/mocha-jenkins-reporter/issues"
},
"devDependencies": {
"eslint": "4.18.2"
"eslint": "^8.57.1"
}
}

0 comments on commit 33faefa

Please sign in to comment.