Skip to content

Commit ece3465

Browse files
committed
Add 'Mocha@11' as a peer dependency
Also this updates 'eslint' to v8.57.1 and overrides 'cross-spawn' to ^7.0.6 in order to fix the known vulnerabilities: ``` ajv <6.12.3 Severity: moderate Prototype Pollution in Ajv - GHSA-v88g-cgmw-v5xw fix available via `npm audit fix --force` Will install [email protected], which is a breaking change node_modules/ajv ajv-keywords 2.1.1 Depends on vulnerable versions of ajv node_modules/ajv-keywords eslint 2.5.0 - 2.5.2 || 4.2.0 - 5.0.0-rc.0 Depends on vulnerable versions of ajv Depends on vulnerable versions of cross-spawn Depends on vulnerable versions of table node_modules/eslint table 3.7.10 - 4.0.2 Depends on vulnerable versions of ajv node_modules/table cross-spawn <6.0.6 Severity: high Regular Expression Denial of Service (ReDoS) in cross-spawn - GHSA-3xgq-45jj-v275 fix available via `npm audit fix --force` Will install [email protected], which is a breaking change node_modules/cross-spawn 5 vulnerabilities (3 moderate, 2 high) ``` Fixes: juhovh#107 Signed-off-by: Victor Rubezhny <[email protected]>
1 parent 5d0ec19 commit ece3465

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

package.json

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,14 +23,17 @@
2323
"xml": "^1.0.1"
2424
},
2525
"peerDependencies": {
26-
"mocha": "^5.2.0 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0"
26+
"mocha": "^5.2.0 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0"
27+
},
28+
"overrides": {
29+
"cross-spawn": "^7.0.6"
2730
},
2831
"author": "Juho Vähä-Herttua",
2932
"license": "MIT",
3033
"bugs": {
3134
"url": "https://github.com/juhovh/mocha-jenkins-reporter/issues"
3235
},
3336
"devDependencies": {
34-
"eslint": "4.18.2"
37+
"eslint": "^8.57.1"
3538
}
3639
}

0 commit comments

Comments
 (0)