Skip to content

Commit a2a22c8

Browse files
mouadhbbmouadhbb
committed
chore(deps): fix vulnerability inefficient regular expression complexity in https://security.snyk.io/vuln/SNYK-JS-MICROMATCH-6838728 
1 parent a3975c8 commit a2a22c8

File tree

8 files changed

+38
-37
lines changed

8 files changed

+38
-37
lines changed

‎CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,7 @@
7777

7878
### Chore & Maintenance
7979

80+
- `[micromatch]` Increase peer dependency of `micromatch` to `^4.0.7` ([#15080](https://github.com/jestjs/jest/pull/15080))
8081
- `[*]` [**BREAKING**] Drop support for Node.js versions 14 and 19 ([#14460](https://github.com/jestjs/jest/pull/14460))
8182
- `[*]` [**BREAKING**] Drop support for `[email protected]`, minimum version is now `5.0` ([#14542](https://github.com/jestjs/jest/pull/14542))
8283
- `[*]` Depend on exact versions of monorepo dependencies instead of `^` range ([#14553](https://github.com/jestjs/jest/pull/14553))

‎package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@
6161
"jest-watch-typeahead": "^2.2.0",
6262
"jquery": "^3.2.1",
6363
"js-yaml": "^4.1.0",
64-
"micromatch": "^4.0.4",
64+
"micromatch": "^4.0.7",
6565
"mock-fs": "^5.1.2",
6666
"netlify-plugin-cache": "^1.0.3",
6767
"node-notifier": "^10.0.0",

‎packages/jest-config/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,15 +48,15 @@
4848
"jest-runner": "workspace:*",
4949
"jest-util": "workspace:*",
5050
"jest-validate": "workspace:*",
51-
"micromatch": "^4.0.4",
51+
"micromatch": "^4.0.7",
5252
"parse-json": "^5.2.0",
5353
"pretty-format": "workspace:*",
5454
"slash": "^3.0.0",
5555
"strip-json-comments": "^3.1.1"
5656
},
5757
"devDependencies": {
5858
"@types/graceful-fs": "^4.1.3",
59-
"@types/micromatch": "^4.0.1",
59+
"@types/micromatch": "^4.0.7",
6060
"@types/parse-json": "^4.0.0",
6161
"semver": "^7.5.3",
6262
"ts-node": "^10.5.0",

‎packages/jest-core/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
"jest-util": "workspace:*",
3939
"jest-validate": "workspace:*",
4040
"jest-watcher": "workspace:*",
41-
"micromatch": "^4.0.4",
41+
"micromatch": "^4.0.7",
4242
"pretty-format": "workspace:*",
4343
"slash": "^3.0.0",
4444
"strip-ansi": "^6.0.0"
@@ -48,7 +48,7 @@
4848
"@jest/test-utils": "workspace:*",
4949
"@types/exit": "^0.1.30",
5050
"@types/graceful-fs": "^4.1.3",
51-
"@types/micromatch": "^4.0.1"
51+
"@types/micromatch": "^4.0.7"
5252
},
5353
"peerDependencies": {
5454
"node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0"

‎packages/jest-haste-map/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,13 @@
2727
"jest-regex-util": "workspace:*",
2828
"jest-util": "workspace:*",
2929
"jest-worker": "workspace:*",
30-
"micromatch": "^4.0.4",
30+
"micromatch": "^4.0.7",
3131
"walker": "^1.0.8"
3232
},
3333
"devDependencies": {
3434
"@types/fb-watchman": "^2.0.0",
3535
"@types/graceful-fs": "^4.1.3",
36-
"@types/micromatch": "^4.0.1",
36+
"@types/micromatch": "^4.0.7",
3737
"slash": "^3.0.0"
3838
},
3939
"optionalDependencies": {

‎packages/jest-message-util/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@
2727
"@types/stack-utils": "^2.0.0",
2828
"chalk": "^4.0.0",
2929
"graceful-fs": "^4.2.9",
30-
"micromatch": "^4.0.4",
30+
"micromatch": "^4.0.7",
3131
"pretty-format": "workspace:*",
3232
"slash": "^3.0.0",
3333
"stack-utils": "^2.0.3"
3434
},
3535
"devDependencies": {
3636
"@types/babel__code-frame": "^7.0.0",
3737
"@types/graceful-fs": "^4.1.3",
38-
"@types/micromatch": "^4.0.1",
38+
"@types/micromatch": "^4.0.7",
3939
"tempy": "^1.0.0"
4040
},
4141
"publishConfig": {

‎packages/jest-transform/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
"jest-haste-map": "workspace:*",
3131
"jest-regex-util": "workspace:*",
3232
"jest-util": "workspace:*",
33-
"micromatch": "^4.0.4",
33+
"micromatch": "^4.0.7",
3434
"pirates": "^4.0.4",
3535
"slash": "^3.0.0",
3636
"write-file-atomic": "^5.0.0"
@@ -40,7 +40,7 @@
4040
"@types/babel__core": "^7.1.14",
4141
"@types/convert-source-map": "^2.0.0",
4242
"@types/graceful-fs": "^4.1.3",
43-
"@types/micromatch": "^4.0.1",
43+
"@types/micromatch": "^4.0.7",
4444
"@types/write-file-atomic": "^4.0.0",
4545
"dedent": "^1.0.0"
4646
},

‎yarn.lock

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2898,7 +2898,7 @@ __metadata:
28982898
"@jest/types": "workspace:*"
28992899
"@types/exit": ^0.1.30
29002900
"@types/graceful-fs": ^4.1.3
2901-
"@types/micromatch": ^4.0.1
2901+
"@types/micromatch": ^4.0.7
29022902
"@types/node": "*"
29032903
ansi-escapes: ^4.2.1
29042904
chalk: ^4.0.0
@@ -2918,7 +2918,7 @@ __metadata:
29182918
jest-util: "workspace:*"
29192919
jest-validate: "workspace:*"
29202920
jest-watcher: "workspace:*"
2921-
micromatch: ^4.0.4
2921+
micromatch: ^4.0.7
29222922
pretty-format: "workspace:*"
29232923
slash: ^3.0.0
29242924
strip-ansi: ^6.0.0
@@ -3088,7 +3088,7 @@ __metadata:
30883088
jest-watch-typeahead: ^2.2.0
30893089
jquery: ^3.2.1
30903090
js-yaml: ^4.1.0
3091-
micromatch: ^4.0.4
3091+
micromatch: ^4.0.7
30923092
mock-fs: ^5.1.2
30933093
netlify-plugin-cache: ^1.0.3
30943094
node-notifier: ^10.0.0
@@ -3264,7 +3264,7 @@ __metadata:
32643264
"@types/babel__core": ^7.1.14
32653265
"@types/convert-source-map": ^2.0.0
32663266
"@types/graceful-fs": ^4.1.3
3267-
"@types/micromatch": ^4.0.1
3267+
"@types/micromatch": ^4.0.7
32683268
"@types/write-file-atomic": ^4.0.0
32693269
babel-plugin-istanbul: ^6.1.1
32703270
chalk: ^4.0.0
@@ -3275,7 +3275,7 @@ __metadata:
32753275
jest-haste-map: "workspace:*"
32763276
jest-regex-util: "workspace:*"
32773277
jest-util: "workspace:*"
3278-
micromatch: ^4.0.4
3278+
micromatch: ^4.0.7
32793279
pirates: ^4.0.4
32803280
slash: ^3.0.0
32813281
write-file-atomic: ^5.0.0
@@ -5298,7 +5298,7 @@ __metadata:
52985298
languageName: node
52995299
linkType: hard
53005300

5301-
"@types/micromatch@npm:^4.0.1":
5301+
"@types/micromatch@npm:^4.0.7":
53025302
version: 4.0.7
53035303
resolution: "@types/micromatch@npm:4.0.7"
53045304
dependencies:
@@ -6988,12 +6988,12 @@ __metadata:
69886988
languageName: node
69896989
linkType: hard
69906990

6991-
"braces@npm:^3.0.2, braces@npm:~3.0.2":
6992-
version: 3.0.2
6993-
resolution: "braces@npm:3.0.2"
6991+
"braces@npm:^3.0.3, braces@npm:~3.0.2":
6992+
version: 3.0.3
6993+
resolution: "braces@npm:3.0.3"
69946994
dependencies:
6995-
fill-range: ^7.0.1
6996-
checksum: e2a8e769a863f3d4ee887b5fe21f63193a891c68b612ddb4b68d82d1b5f3ff9073af066c343e9867a393fe4c2555dcb33e89b937195feb9c1613d259edfcd459
6995+
fill-range: ^7.1.1
6996+
checksum: b95aa0b3bd909f6cd1720ffcf031aeaf46154dd88b4da01f9a1d3f7ea866a79eba76a6d01cbc3c422b2ee5cdc39a4f02491058d5df0d7bf6e6a162a832df1f69
69976997
languageName: node
69986998
linkType: hard
69996999

@@ -10278,12 +10278,12 @@ __metadata:
1027810278
languageName: node
1027910279
linkType: hard
1028010280

10281-
"fill-range@npm:^7.0.1":
10282-
version: 7.0.1
10283-
resolution: "fill-range@npm:7.0.1"
10281+
"fill-range@npm:^7.1.1":
10282+
version: 7.1.1
10283+
resolution: "fill-range@npm:7.1.1"
1028410284
dependencies:
1028510285
to-regex-range: ^5.0.1
10286-
checksum: cc283f4e65b504259e64fd969bcf4def4eb08d85565e906b7d36516e87819db52029a76b6363d0f02d0d532f0033c9603b9e2d943d56ee3b0d4f7ad3328ff917
10286+
checksum: b4abfbca3839a3d55e4ae5ec62e131e2e356bf4859ce8480c64c4876100f4df292a63e5bb1618e1d7460282ca2b305653064f01654474aa35c68000980f17798
1028710287
languageName: node
1028810288
linkType: hard
1028910289

@@ -12745,7 +12745,7 @@ __metadata:
1274512745
"@jest/test-sequencer": "workspace:*"
1274612746
"@jest/types": "workspace:*"
1274712747
"@types/graceful-fs": ^4.1.3
12748-
"@types/micromatch": ^4.0.1
12748+
"@types/micromatch": ^4.0.7
1274912749
"@types/parse-json": ^4.0.0
1275012750
babel-jest: "workspace:*"
1275112751
chalk: ^4.0.0
@@ -12761,7 +12761,7 @@ __metadata:
1276112761
jest-runner: "workspace:*"
1276212762
jest-util: "workspace:*"
1276312763
jest-validate: "workspace:*"
12764-
micromatch: ^4.0.4
12764+
micromatch: ^4.0.7
1276512765
parse-json: ^5.2.0
1276612766
pretty-format: "workspace:*"
1276712767
semver: ^7.5.3
@@ -12866,7 +12866,7 @@ __metadata:
1286612866
"@jest/types": "workspace:*"
1286712867
"@types/fb-watchman": ^2.0.0
1286812868
"@types/graceful-fs": ^4.1.3
12869-
"@types/micromatch": ^4.0.1
12869+
"@types/micromatch": ^4.0.7
1287012870
"@types/node": "*"
1287112871
anymatch: ^3.0.3
1287212872
fb-watchman: ^2.0.0
@@ -12875,7 +12875,7 @@ __metadata:
1287512875
jest-regex-util: "workspace:*"
1287612876
jest-util: "workspace:*"
1287712877
jest-worker: "workspace:*"
12878-
micromatch: ^4.0.4
12878+
micromatch: ^4.0.7
1287912879
slash: ^3.0.0
1288012880
walker: ^1.0.8
1288112881
dependenciesMeta:
@@ -12969,11 +12969,11 @@ __metadata:
1296912969
"@jest/types": "workspace:*"
1297012970
"@types/babel__code-frame": ^7.0.0
1297112971
"@types/graceful-fs": ^4.1.3
12972-
"@types/micromatch": ^4.0.1
12972+
"@types/micromatch": ^4.0.7
1297312973
"@types/stack-utils": ^2.0.0
1297412974
chalk: ^4.0.0
1297512975
graceful-fs: ^4.2.9
12976-
micromatch: ^4.0.4
12976+
micromatch: ^4.0.7
1297712977
pretty-format: "workspace:*"
1297812978
slash: ^3.0.0
1297912979
stack-utils: ^2.0.3
@@ -15241,13 +15241,13 @@ __metadata:
1524115241
languageName: node
1524215242
linkType: hard
1524315243

15244-
"micromatch@npm:^4.0.2, micromatch@npm:^4.0.4, micromatch@npm:^4.0.5":
15245-
version: 4.0.5
15246-
resolution: "micromatch@npm:4.0.5"
15244+
"micromatch@npm:^4.0.2, micromatch@npm:^4.0.4, micromatch@npm:^4.0.5, micromatch@npm:^4.0.7":
15245+
version: 4.0.7
15246+
resolution: "micromatch@npm:4.0.7"
1524715247
dependencies:
15248-
braces: ^3.0.2
15248+
braces: ^3.0.3
1524915249
picomatch: ^2.3.1
15250-
checksum: 02a17b671c06e8fefeeb6ef996119c1e597c942e632a21ef589154f23898c9c6a9858526246abb14f8bca6e77734aa9dcf65476fca47cedfb80d9577d52843fc
15250+
checksum: 3cde047d70ad80cf60c787b77198d680db3b8c25b23feb01de5e2652205d9c19f43bd81882f69a0fd1f0cde6a7a122d774998aad3271ddb1b8accf8a0f480cf7
1525115251
languageName: node
1525215252
linkType: hard
1525315253

0 commit comments

Comments
 (0)