Skip to content

fix: Update ts-jest version to avoid ejs package with vulnerability #2786

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dgca wants to merge 1 commit into
base: master
Choose a base branch
from
+72 −69
Open

fix: Update ts-jest version to avoid ejs package with vulnerability #2786

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion apps/web/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -126,7 +126,7 @@
"prettier-plugin-tailwindcss": "^0.2.5",
"tailwindcss": "^3.2.4",
"tailwindcss-text-scale": "^0.3.1",
"ts-jest": "^29.2.5",
"ts-jest": "^29.4.5",
"typescript": "5.0.4"
}
}
2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@
"prettier": "^2.7.1",
"react": "^18.2.0",
"react-test-renderer": "18.2.0",
"ts-jest": "^29.0.5",
"ts-jest": "^29.4.5",
"ts-node": "^10.9.1",
"typescript": "~4.9.4"
},
Expand Down
137 changes: 70 additions & 67 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -204,7 +204,7 @@ __metadata:
tailwindcss-text-scale: ^0.3.1
three: ^0.168.0
three-stdlib: ^2.33.0
ts-jest: ^29.2.5
ts-jest: ^29.4.5
tunnel-rat: ^0.1.2
twemoji: ^14.0.2
typed.js: ^2.1.0
Expand Down Expand Up @@ -1819,7 +1819,7 @@ __metadata:
prettier: ^2.7.1
react: ^18.2.0
react-test-renderer: 18.2.0
ts-jest: ^29.0.5
ts-jest: ^29.4.5
ts-node: ^10.9.1
tslib: ^2.3.0
typescript: ~4.9.4
Expand Down Expand Up @@ -10428,13 +10428,6 @@ __metadata:
languageName: node
linkType: hard

"async@npm:^3.2.3":
version: 3.2.6
resolution: "async@npm:3.2.6"
checksum: ee6eb8cd8a0ab1b58bd2a3ed6c415e93e773573a91d31df9d5ef559baafa9dab37d3b096fa7993e84585cac3697b2af6ddb9086f45d3ac8cae821bb2aab65682
languageName: node
linkType: hard

"asynckit@npm:^0.4.0":
version: 0.4.0
resolution: "asynckit@npm:0.4.0"
Expand Down Expand Up @@ -11155,7 +11148,7 @@ __metadata:
languageName: node
linkType: hard

"chalk@npm:^4.0.0, chalk@npm:^4.0.2, chalk@npm:^4.1.0, chalk@npm:^4.1.2":
"chalk@npm:^4.0.0, chalk@npm:^4.1.0, chalk@npm:^4.1.2":
version: 4.1.2
resolution: "chalk@npm:4.1.2"
dependencies:
Expand Down Expand Up @@ -12653,17 +12646,6 @@ __metadata:
languageName: node
linkType: hard

"ejs@npm:^3.1.10":
version: 3.1.10
resolution: "ejs@npm:3.1.10"
dependencies:
jake: ^10.8.5
bin:
ejs: bin/cli.js
checksum: ce90637e9c7538663ae023b8a7a380b2ef7cc4096de70be85abf5a3b9641912dde65353211d05e24d56b1f242d71185c6d00e02cb8860701d571786d92c71f05
languageName: node
linkType: hard

"electron-to-chromium@npm:^1.5.73":
version: 1.5.104
resolution: "electron-to-chromium@npm:1.5.104"
Expand Down Expand Up @@ -14241,15 +14223,6 @@ __metadata:
languageName: node
linkType: hard

"filelist@npm:^1.0.4":
version: 1.0.4
resolution: "filelist@npm:1.0.4"
dependencies:
minimatch: ^5.0.1
checksum: a303573b0821e17f2d5e9783688ab6fbfce5d52aaac842790ae85e704a6f5e4e3538660a63183d6453834dedf1e0f19a9dadcebfa3e926c72397694ea11f5160
languageName: node
linkType: hard

"fill-range@npm:^7.1.1":
version: 7.1.1
resolution: "fill-range@npm:7.1.1"
Expand Down Expand Up @@ -14867,6 +14840,24 @@ __metadata:
languageName: node
linkType: hard

"handlebars@npm:^4.7.8":
version: 4.7.8
resolution: "handlebars@npm:4.7.8"
dependencies:
minimist: ^1.2.5
neo-async: ^2.6.2
source-map: ^0.6.1
uglify-js: ^3.1.4
wordwrap: ^1.0.0
dependenciesMeta:
uglify-js:
optional: true
bin:
handlebars: bin/handlebars
checksum: 00e68bb5c183fd7b8b63322e6234b5ac8fbb960d712cb3f25587d559c2951d9642df83c04a1172c918c41bcfc81bfbd7a7718bbce93b893e0135fc99edea93ff
languageName: node
linkType: hard

"has-bigints@npm:^1.0.2":
version: 1.1.0
resolution: "has-bigints@npm:1.1.0"
Expand Down Expand Up @@ -16018,20 +16009,6 @@ __metadata:
languageName: node
linkType: hard

"jake@npm:^10.8.5":
version: 10.9.2
resolution: "jake@npm:10.9.2"
dependencies:
async: ^3.2.3
chalk: ^4.0.2
filelist: ^1.0.4
minimatch: ^3.1.2
bin:
jake: bin/cli.js
checksum: f2dc4a086b4f58446d02cb9be913c39710d9ea570218d7681bb861f7eeaecab7b458256c946aeaa7e548c5e0686cc293e6435501e4047174a3b6a504dcbfcaae
languageName: node
linkType: hard

"jest-changed-files@npm:^29.7.0":
version: 29.7.0
resolution: "jest-changed-files@npm:29.7.0"
Expand Down Expand Up @@ -16417,7 +16394,7 @@ __metadata:
languageName: node
linkType: hard

"jest-util@npm:^29.0.0, jest-util@npm:^29.7.0":
"jest-util@npm:^29.7.0":
version: 29.7.0
resolution: "jest-util@npm:29.7.0"
dependencies:
Expand Down Expand Up @@ -17538,15 +17515,6 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^5.0.1":
version: 5.1.6
resolution: "minimatch@npm:5.1.6"
dependencies:
brace-expansion: ^2.0.1
checksum: 7564208ef81d7065a370f788d337cd80a689e981042cb9a1d0e6580b6c6a8c9279eba80010516e258835a988363f99f54a6f711a315089b8b42694f5da9d0d77
languageName: node
linkType: hard

"minimatch@npm:^9.0.3, minimatch@npm:^9.0.4":
version: 9.0.5
resolution: "minimatch@npm:9.0.5"
Expand All @@ -17556,7 +17524,7 @@ __metadata:
languageName: node
linkType: hard

"minimist@npm:^1.2.0, minimist@npm:^1.2.6":
"minimist@npm:^1.2.0, minimist@npm:^1.2.5, minimist@npm:^1.2.6":
version: 1.2.8
resolution: "minimist@npm:1.2.8"
checksum: 75a6d645fb122dad29c06a7597bddea977258957ed88d7a6df59b5cd3fe4a527e253e9bbf2e783e4b73657f9098b96a5fe96ab8a113655d4109108577ecf85b0
Expand Down Expand Up @@ -17867,6 +17835,13 @@ __metadata:
languageName: node
linkType: hard

"neo-async@npm:^2.6.2":
version: 2.6.2
resolution: "neo-async@npm:2.6.2"
checksum: deac9f8d00eda7b2e5cd1b2549e26e10a0faa70adaa6fdadca701cc55f49ee9018e427f424bac0c790b7c7e2d3068db97f3093f1093975f2acb8f8818b936ed9
languageName: node
linkType: hard

"neverthrow@npm:^6.0.0":
version: 6.2.2
resolution: "neverthrow@npm:6.2.2"
Expand Down Expand Up @@ -20829,6 +20804,15 @@ __metadata:
languageName: node
linkType: hard

"semver@npm:^7.7.3":
version: 7.7.3
resolution: "semver@npm:7.7.3"
bin:
semver: bin/semver.js
checksum: f013a3ee4607857bcd3503b6ac1d80165f7f8ea94f5d55e2d3e33df82fce487aa3313b987abf9b39e0793c83c9fc67b76c36c067625141a9f6f704ae0ea18db2
languageName: node
linkType: hard

"set-blocking@npm:^2.0.0":
version: 2.0.0
resolution: "set-blocking@npm:2.0.0"
Expand Down Expand Up @@ -22199,25 +22183,26 @@ __metadata:
languageName: node
linkType: hard

"ts-jest@npm:^29.0.5, ts-jest@npm:^29.2.5":
version: 29.2.6
resolution: "ts-jest@npm:29.2.6"
"ts-jest@npm:^29.4.5":
version: 29.4.5
resolution: "ts-jest@npm:29.4.5"
dependencies:
bs-logger: ^0.2.6
ejs: ^3.1.10
fast-json-stable-stringify: ^2.1.0
jest-util: ^29.0.0
handlebars: ^4.7.8
json5: ^2.2.3
lodash.memoize: ^4.1.2
make-error: ^1.3.6
semver: ^7.7.1
semver: ^7.7.3
type-fest: ^4.41.0
yargs-parser: ^21.1.1
peerDependencies:
"@babel/core": ">=7.0.0-beta.0 <8"
"@jest/transform": ^29.0.0
"@jest/types": ^29.0.0
babel-jest: ^29.0.0
jest: ^29.0.0
"@jest/transform": ^29.0.0 || ^30.0.0
"@jest/types": ^29.0.0 || ^30.0.0
babel-jest: ^29.0.0 || ^30.0.0
jest: ^29.0.0 || ^30.0.0
jest-util: ^29.0.0 || ^30.0.0
typescript: ">=4.3 <6"
peerDependenciesMeta:
"@babel/core":
Expand All @@ -22230,9 +22215,11 @@ __metadata:
optional: true
esbuild:
optional: true
jest-util:
optional: true
bin:
ts-jest: cli.js
checksum: ff71b27e997e4c5e6bcf2d38804b188eb1c7eec78570329f058f434ba1bd112a4806cdc4e7baac0e0e834bd20ca3be16e03d5c546304aa28e5cfeaccca82139e
checksum: b2ba677d32bd0024356ab8d43a1b88cb81ecad94be277b111975e626fd37a9ed17fd446a2e3a399a3c8534dcf89ea7c28a4bf4f094b153a4a9972c67b680ad0d
languageName: node
linkType: hard

Expand Down Expand Up @@ -22385,7 +22372,7 @@ __metadata:
languageName: node
linkType: hard

"type-fest@npm:^4.28.1":
"type-fest@npm:^4.28.1, type-fest@npm:^4.41.0":
version: 4.41.0
resolution: "type-fest@npm:4.41.0"
checksum: 7055c0e3eb188425d07403f1d5dc175ca4c4f093556f26871fe22041bc93d137d54bef5851afa320638ca1379106c594f5aa153caa654ac1a7f22c71588a4e80
Expand Down Expand Up @@ -22517,6 +22504,15 @@ __metadata:
languageName: node
linkType: hard

"uglify-js@npm:^3.1.4":
version: 3.19.3
resolution: "uglify-js@npm:3.19.3"
bin:
uglifyjs: bin/uglifyjs
checksum: 7ed6272fba562eb6a3149cfd13cda662f115847865c03099e3995a0e7a910eba37b82d4fccf9e88271bb2bcbe505bb374967450f433c17fa27aa36d94a8d0553
languageName: node
linkType: hard

"uint8-varint@npm:^2.0.1":
version: 2.0.4
resolution: "uint8-varint@npm:2.0.4"
Expand Down Expand Up @@ -23530,6 +23526,13 @@ __metadata:
languageName: node
linkType: hard

"wordwrap@npm:^1.0.0":
version: 1.0.0
resolution: "wordwrap@npm:1.0.0"
checksum: 2a44b2788165d0a3de71fd517d4880a8e20ea3a82c080ce46e294f0b68b69a2e49cff5f99c600e275c698a90d12c5ea32aff06c311f0db2eb3f1201f3e7b2a04
languageName: node
linkType: hard

"wrap-ansi-cjs@npm:wrap-ansi@^7.0.0, wrap-ansi@npm:^7.0.0":
version: 7.0.0
resolution: "wrap-ansi@npm:7.0.0"
Expand Down
Loading