fix #4837 Update glob due to vulnerability in dep#4970
fix #4837 Update glob due to vulnerability in dep#4970juergba merged 8 commits intomochajs:masterfrom
Conversation
… from coffee-script to coffeescript
|
@juergba this should be ready to be tested again. 2 things I have concerns about. #1 The tests referenced coffee-script, with a hyphen, but when I ran the tests, I got a "module not found error" and it looks like the hyphen package is depreciated, and mocha's package.json references "coffeescript" with no hyphen, so I updated those tests. Additionally, I got an error during linting that "eslint-plugin-n" is missing. I though it was my local setup, but it also happened when the tests ran in the CI process. Anyways, I added that package to the dev deps. Let me know if you have any questions or concerns |
|
@jb2311 thank you for this PR. We will see wether our CI tests will pass. Tbh I don't trust your Edit: looks good, I will have a closer look on coming week-end. Could you evtl. add any link about this additional lint dependency? |
|
esline-plugin-node is no longer being maintained, so eslint-plugin-n (https://github.com/eslint-community/eslint-plugin-n) is a fork that is still active. However, I have no idea why it's erroring out without it suddenly. It happened on the first test run, when I did nothing but update the glob package https://github.com/mochajs/mocha/actions/runs/4368808387/jobs/7681675449 Edit: it looks like eslint-plugin-n is a peerDep for some packages. I was running an old version of NPM, newer versions of NPM don't require peerDeps to be referenced in the main package.json, so I removed the package. |
|
@juergba have you had a chance to take a look at this? |
juergba
left a comment
There was a problem hiding this comment.
I'm not convinced completely, I'm afraid there might be some unwanted side-effects by windowsPathsNoEscape. Anyway let's do it.
|
@juergba updated |
|
@juergba okay, I think the whitespace should be appropriate. |
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [mocha](https://mochajs.org/) ([source](https://togithub.com/mochajs/mocha)) | [`10.2.0` -> `10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>mochajs/mocha (mocha)</summary> ### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0) [Compare Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0) This is a stable release equivalent to [v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0). #### What's Changed - Fix deprecated warn gh actions by [@​outsideris](https://togithub.com/outsideris) in [https://github.com/mochajs/mocha/pull/4962](https://togithub.com/mochajs/mocha/pull/4962) - fix [#​4837](https://togithub.com/mochajs/mocha/issues/4837) Update glob due to vulnerability in dep by [@​jb2311](https://togithub.com/jb2311) in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - Add Node v19 to test matrix by [@​juergba](https://togithub.com/juergba) in [https://github.com/mochajs/mocha/pull/4974](https://togithub.com/mochajs/mocha/pull/4974) - chore: fix the ci by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - update can-i-use by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5021](https://togithub.com/mochajs/mocha/pull/5021) - chore: remove uuid dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5022](https://togithub.com/mochajs/mocha/pull/5022) - chore: remove nanoid as dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5024](https://togithub.com/mochajs/mocha/pull/5024) - chore: remove touch as dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5023](https://togithub.com/mochajs/mocha/pull/5023) - chore: remove stale workflow by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5029](https://togithub.com/mochajs/mocha/pull/5029) - docs: fix fragment ID for yargs' "extends" documentation by [@​Spencer-Doak](https://togithub.com/Spencer-Doak) in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - docs: use mocha.js instead of mocha in the example run by [@​nikolas](https://togithub.com/nikolas) in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - docs: fix jsdoc return type of `titlePath` method by [@​F3n67u](https://togithub.com/F3n67u) in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) - docs: overhaul contributing and maintenance docs for end-of-year 2023 by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5038](https://togithub.com/mochajs/mocha/pull/5038) - docs: touchups to labels and a template title post-revamp by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5050](https://togithub.com/mochajs/mocha/pull/5050) - fix: add alt text to Built with Netlify badge by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5068](https://togithub.com/mochajs/mocha/pull/5068) - chore: inline nyan reporter's write function by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5056](https://togithub.com/mochajs/mocha/pull/5056) - chore: remove unnecessary canvas dependency by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5069](https://togithub.com/mochajs/mocha/pull/5069) #### New Contributors - [@​jb2311](https://togithub.com/jb2311) made their first contribution in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - [@​Uzlopak](https://togithub.com/Uzlopak) made their first contribution in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - [@​Spencer-Doak](https://togithub.com/Spencer-Doak) made their first contribution in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - [@​nikolas](https://togithub.com/nikolas) made their first contribution in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - [@​F3n67u](https://togithub.com/F3n67u) made their first contribution in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) **Full Changelog**: mochajs/mocha@v10.2.0...v10.3.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/line/line-bot-sdk-nodejs). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [mocha](https://mochajs.org/) ([source](https://togithub.com/mochajs/mocha)) | [`10.2.0` -> `10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>mochajs/mocha (mocha)</summary> ### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0) [Compare Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0) This is a stable release equivalent to [v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0). #### What's Changed - Fix deprecated warn gh actions by [@​outsideris](https://togithub.com/outsideris) in [https://github.com/mochajs/mocha/pull/4962](https://togithub.com/mochajs/mocha/pull/4962) - fix [#​4837](https://togithub.com/mochajs/mocha/issues/4837) Update glob due to vulnerability in dep by [@​jb2311](https://togithub.com/jb2311) in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - Add Node v19 to test matrix by [@​juergba](https://togithub.com/juergba) in [https://github.com/mochajs/mocha/pull/4974](https://togithub.com/mochajs/mocha/pull/4974) - chore: fix the ci by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - update can-i-use by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5021](https://togithub.com/mochajs/mocha/pull/5021) - chore: remove uuid dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5022](https://togithub.com/mochajs/mocha/pull/5022) - chore: remove nanoid as dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5024](https://togithub.com/mochajs/mocha/pull/5024) - chore: remove touch as dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5023](https://togithub.com/mochajs/mocha/pull/5023) - chore: remove stale workflow by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5029](https://togithub.com/mochajs/mocha/pull/5029) - docs: fix fragment ID for yargs' "extends" documentation by [@​Spencer-Doak](https://togithub.com/Spencer-Doak) in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - docs: use mocha.js instead of mocha in the example run by [@​nikolas](https://togithub.com/nikolas) in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - docs: fix jsdoc return type of `titlePath` method by [@​F3n67u](https://togithub.com/F3n67u) in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) - docs: overhaul contributing and maintenance docs for end-of-year 2023 by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5038](https://togithub.com/mochajs/mocha/pull/5038) - docs: touchups to labels and a template title post-revamp by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5050](https://togithub.com/mochajs/mocha/pull/5050) - fix: add alt text to Built with Netlify badge by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5068](https://togithub.com/mochajs/mocha/pull/5068) - chore: inline nyan reporter's write function by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5056](https://togithub.com/mochajs/mocha/pull/5056) - chore: remove unnecessary canvas dependency by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5069](https://togithub.com/mochajs/mocha/pull/5069) #### New Contributors - [@​jb2311](https://togithub.com/jb2311) made their first contribution in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - [@​Uzlopak](https://togithub.com/Uzlopak) made their first contribution in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - [@​Spencer-Doak](https://togithub.com/Spencer-Doak) made their first contribution in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - [@​nikolas](https://togithub.com/nikolas) made their first contribution in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - [@​F3n67u](https://togithub.com/F3n67u) made their first contribution in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) **Full Changelog**: mochajs/mocha@v10.2.0...v10.3.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/matzkoh/eslint-plugin-generate-test-id). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [mocha](https://mochajs.org/) ([source](https://togithub.com/mochajs/mocha)) | devDependencies | minor | [`10.2.0` -> `10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) | --- ### Release Notes <details> <summary>mochajs/mocha (mocha)</summary> ### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0) [Compare Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0) This is a stable release equivalent to [v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0). #### What's Changed - Fix deprecated warn gh actions by [@​outsideris](https://togithub.com/outsideris) in [https://github.com/mochajs/mocha/pull/4962](https://togithub.com/mochajs/mocha/pull/4962) - fix [#​4837](https://togithub.com/mochajs/mocha/issues/4837) Update glob due to vulnerability in dep by [@​jb2311](https://togithub.com/jb2311) in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - Add Node v19 to test matrix by [@​juergba](https://togithub.com/juergba) in [https://github.com/mochajs/mocha/pull/4974](https://togithub.com/mochajs/mocha/pull/4974) - chore: fix the ci by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - update can-i-use by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5021](https://togithub.com/mochajs/mocha/pull/5021) - chore: remove uuid dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5022](https://togithub.com/mochajs/mocha/pull/5022) - chore: remove nanoid as dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5024](https://togithub.com/mochajs/mocha/pull/5024) - chore: remove touch as dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5023](https://togithub.com/mochajs/mocha/pull/5023) - chore: remove stale workflow by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5029](https://togithub.com/mochajs/mocha/pull/5029) - docs: fix fragment ID for yargs' "extends" documentation by [@​Spencer-Doak](https://togithub.com/Spencer-Doak) in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - docs: use mocha.js instead of mocha in the example run by [@​nikolas](https://togithub.com/nikolas) in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - docs: fix jsdoc return type of `titlePath` method by [@​F3n67u](https://togithub.com/F3n67u) in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) - docs: overhaul contributing and maintenance docs for end-of-year 2023 by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5038](https://togithub.com/mochajs/mocha/pull/5038) - docs: touchups to labels and a template title post-revamp by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5050](https://togithub.com/mochajs/mocha/pull/5050) - fix: add alt text to Built with Netlify badge by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5068](https://togithub.com/mochajs/mocha/pull/5068) - chore: inline nyan reporter's write function by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5056](https://togithub.com/mochajs/mocha/pull/5056) - chore: remove unnecessary canvas dependency by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5069](https://togithub.com/mochajs/mocha/pull/5069) #### New Contributors - [@​jb2311](https://togithub.com/jb2311) made their first contribution in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - [@​Uzlopak](https://togithub.com/Uzlopak) made their first contribution in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - [@​Spencer-Doak](https://togithub.com/Spencer-Doak) made their first contribution in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - [@​nikolas](https://togithub.com/nikolas) made their first contribution in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - [@​F3n67u](https://togithub.com/F3n67u) made their first contribution in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) **Full Changelog**: mochajs/mocha@v10.2.0...v10.3.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMy4zIiwidXBkYXRlZEluVmVyIjoiMzcuMTMuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciJ9-->
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@aws-sdk/client-dynamodb](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-dynamodb) ([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb)) | [`3.506.0` -> `3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-dynamodb/3.506.0/3.511.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@aws-sdk/client-s3](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3) ([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3)) | [`3.507.0` -> `3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-s3/3.507.0/3.511.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@aws-sdk/client-sqs](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-sqs) ([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs)) | [`3.507.0` -> `3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-sqs/3.507.0/3.511.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@aws-sdk/lib-dynamodb](https://togithub.com/aws/aws-sdk-js-v3/tree/main/lib/lib-dynamodb) ([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-dynamodb)) | [`3.506.0` -> `3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2flib-dynamodb/3.506.0/3.511.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/typescript-eslint) ([source](https://togithub.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)) | [`6.20.0` -> `6.21.0`](https://renovatebot.com/diffs/npm/@typescript-eslint%2feslint-plugin/6.20.0/6.21.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@typescript-eslint/parser](https://togithub.com/typescript-eslint/typescript-eslint) ([source](https://togithub.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)) | [`6.20.0` -> `6.21.0`](https://renovatebot.com/diffs/npm/@typescript-eslint%2fparser/6.20.0/6.21.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [lint-staged](https://togithub.com/okonet/lint-staged) | [`15.2.1` -> `15.2.2`](https://renovatebot.com/diffs/npm/lint-staged/15.2.1/15.2.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [mocha](https://mochajs.org/) ([source](https://togithub.com/mochajs/mocha)) | [`10.2.0` -> `10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [semantic-release](https://togithub.com/semantic-release/semantic-release) | [`23.0.0` -> `23.0.2`](https://renovatebot.com/diffs/npm/semantic-release/23.0.0/23.0.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | semantic-release-monorepo | [`8.0.1` -> `8.0.2`](https://renovatebot.com/diffs/npm/semantic-release-monorepo/8.0.1/8.0.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>aws/aws-sdk-js-v3 (@​aws-sdk/client-dynamodb)</summary> ### [`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-dynamodb/CHANGELOG.md#35110-2024-02-09) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0) **Note:** Version bump only for package [@​aws-sdk/client-dynamodb](https://togithub.com/aws-sdk/client-dynamodb) ### [`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-dynamodb/CHANGELOG.md#35090-2024-02-07) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0) **Note:** Version bump only for package [@​aws-sdk/client-dynamodb](https://togithub.com/aws-sdk/client-dynamodb) ### [`v3.507.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-dynamodb/CHANGELOG.md#35070-2024-02-05) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.506.0...v3.507.0) ##### Features - unified error dispatcher in protocols ([#​5756](https://togithub.com/aws/aws-sdk-js-v3/issues/5756)) ([0872087](https://togithub.com/aws/aws-sdk-js-v3/commit/0872087ef56422541bd38d293f97613dfd10236f)) </details> <details> <summary>aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)</summary> ### [`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35110-2024-02-09) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0) **Note:** Version bump only for package [@​aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3) ### [`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35090-2024-02-07) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0) **Note:** Version bump only for package [@​aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3) </details> <details> <summary>aws/aws-sdk-js-v3 (@​aws-sdk/client-sqs)</summary> ### [`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-sqs/CHANGELOG.md#35110-2024-02-09) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0) **Note:** Version bump only for package [@​aws-sdk/client-sqs](https://togithub.com/aws-sdk/client-sqs) ### [`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-sqs/CHANGELOG.md#35090-2024-02-07) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0) **Note:** Version bump only for package [@​aws-sdk/client-sqs](https://togithub.com/aws-sdk/client-sqs) </details> <details> <summary>aws/aws-sdk-js-v3 (@​aws-sdk/lib-dynamodb)</summary> ### [`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/lib/lib-dynamodb/CHANGELOG.md#35110-2024-02-09) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0) **Note:** Version bump only for package [@​aws-sdk/lib-dynamodb](https://togithub.com/aws-sdk/lib-dynamodb) ### [`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/lib/lib-dynamodb/CHANGELOG.md#35090-2024-02-07) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0) **Note:** Version bump only for package [@​aws-sdk/lib-dynamodb](https://togithub.com/aws-sdk/lib-dynamodb) ### [`v3.507.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/lib/lib-dynamodb/CHANGELOG.md#35070-2024-02-05) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.506.0...v3.507.0) **Note:** Version bump only for package [@​aws-sdk/lib-dynamodb](https://togithub.com/aws-sdk/lib-dynamodb) </details> <details> <summary>typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)</summary> ### [`v6.21.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#6210-2024-02-05) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.20.0...v6.21.0) ##### 🚀 Features - export plugin metadata - allow `parserOptions.project: false` - **eslint-plugin:** add rule prefer-find ##### 🩹 Fixes - **eslint-plugin:** \[no-unused-vars] don't report on types referenced in export assignment expression - **eslint-plugin:** \[switch-exhaustiveness-check] better support for intersections, infinite types, non-union values - **eslint-plugin:** \[consistent-type-imports] dont report on types used in export assignment expressions - **eslint-plugin:** \[no-unnecessary-condition] handle left-hand optional with exactOptionalPropertyTypes option - **eslint-plugin:** \[class-literal-property-style] allow getter when same key setter exists - **eslint-plugin:** \[no-unnecessary-type-assertion] provide valid fixes for assertions with extra tokens before `as` keyword ##### ❤️ Thank You - auvred - Brad Zacher - Kirk Waiblinger - Pete Gonzalez - YeonJuan You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. </details> <details> <summary>typescript-eslint/typescript-eslint (@​typescript-eslint/parser)</summary> ### [`v6.21.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#6210-2024-02-05) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.20.0...v6.21.0) ##### 🚀 Features - allow `parserOptions.project: false` ##### ❤️ Thank You - auvred - Brad Zacher - Kirk Waiblinger - Pete Gonzalez - YeonJuan You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. </details> <details> <summary>okonet/lint-staged (lint-staged)</summary> ### [`v15.2.2`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1522) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.2.1...v15.2.2) ##### Patch Changes - [#​1391](https://togithub.com/lint-staged/lint-staged/pull/1391) [`fdcdad4`](https://togithub.com/lint-staged/lint-staged/commit/fdcdad42ff96fea3c05598e378d3c44ad4a51bde) Thanks [@​iiroj](https://togithub.com/iiroj)! - *Lint-staged* no longer tries to load configuration from files that are not checked out. This might happen when using sparse-checkout. </details> <details> <summary>mochajs/mocha (mocha)</summary> ### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0) [Compare Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0) This is a stable release equivalent to [v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0). #### What's Changed - Fix deprecated warn gh actions by [@​outsideris](https://togithub.com/outsideris) in [https://github.com/mochajs/mocha/pull/4962](https://togithub.com/mochajs/mocha/pull/4962) - fix [#​4837](https://togithub.com/mochajs/mocha/issues/4837) Update glob due to vulnerability in dep by [@​jb2311](https://togithub.com/jb2311) in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - Add Node v19 to test matrix by [@​juergba](https://togithub.com/juergba) in [https://github.com/mochajs/mocha/pull/4974](https://togithub.com/mochajs/mocha/pull/4974) - chore: fix the ci by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - update can-i-use by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5021](https://togithub.com/mochajs/mocha/pull/5021) - chore: remove uuid dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5022](https://togithub.com/mochajs/mocha/pull/5022) - chore: remove nanoid as dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5024](https://togithub.com/mochajs/mocha/pull/5024) - chore: remove touch as dev dependency by [@​Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/mochajs/mocha/pull/5023](https://togithub.com/mochajs/mocha/pull/5023) - chore: remove stale workflow by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5029](https://togithub.com/mochajs/mocha/pull/5029) - docs: fix fragment ID for yargs' "extends" documentation by [@​Spencer-Doak](https://togithub.com/Spencer-Doak) in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - docs: use mocha.js instead of mocha in the example run by [@​nikolas](https://togithub.com/nikolas) in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - docs: fix jsdoc return type of `titlePath` method by [@​F3n67u](https://togithub.com/F3n67u) in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) - docs: overhaul contributing and maintenance docs for end-of-year 2023 by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5038](https://togithub.com/mochajs/mocha/pull/5038) - docs: touchups to labels and a template title post-revamp by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5050](https://togithub.com/mochajs/mocha/pull/5050) - fix: add alt text to Built with Netlify badge by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5068](https://togithub.com/mochajs/mocha/pull/5068) - chore: inline nyan reporter's write function by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5056](https://togithub.com/mochajs/mocha/pull/5056) - chore: remove unnecessary canvas dependency by [@​JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [https://github.com/mochajs/mocha/pull/5069](https://togithub.com/mochajs/mocha/pull/5069) #### New Contributors - [@​jb2311](https://togithub.com/jb2311) made their first contribution in [https://github.com/mochajs/mocha/pull/4970](https://togithub.com/mochajs/mocha/pull/4970) - [@​Uzlopak](https://togithub.com/Uzlopak) made their first contribution in [https://github.com/mochajs/mocha/pull/5020](https://togithub.com/mochajs/mocha/pull/5020) - [@​Spencer-Doak](https://togithub.com/Spencer-Doak) made their first contribution in [https://github.com/mochajs/mocha/pull/4918](https://togithub.com/mochajs/mocha/pull/4918) - [@​nikolas](https://togithub.com/nikolas) made their first contribution in [https://github.com/mochajs/mocha/pull/4927](https://togithub.com/mochajs/mocha/pull/4927) - [@​F3n67u](https://togithub.com/F3n67u) made their first contribution in [https://github.com/mochajs/mocha/pull/4886](https://togithub.com/mochajs/mocha/pull/4886) **Full Changelog**: mochajs/mocha@v10.2.0...v10.3.0 </details> <details> <summary>semantic-release/semantic-release (semantic-release)</summary> ### [`v23.0.2`](https://togithub.com/semantic-release/semantic-release/releases/tag/v23.0.2) [Compare Source](https://togithub.com/semantic-release/semantic-release/compare/v23.0.1...v23.0.2) ##### Bug Fixes - **deps:** update dependency marked to v12 ([#​3176](https://togithub.com/semantic-release/semantic-release/issues/3176)) ([38105f5](https://togithub.com/semantic-release/semantic-release/commit/38105f5bc8ac280d8fb726097962bb357bfc5dac)) ### [`v23.0.1`](https://togithub.com/semantic-release/semantic-release/releases/tag/v23.0.1) [Compare Source](https://togithub.com/semantic-release/semantic-release/compare/v23.0.0...v23.0.1) ##### Bug Fixes - **deps:** update dependency marked-terminal to v7 ([9faded8](https://togithub.com/semantic-release/semantic-release/commit/9faded8d50bd056374f79d0a1385dc9f140a85de)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 2pm on Saturday" in timezone Europe/Zurich, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/adobe/spacecat-shared). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Description of the Change
The minimatch npm package version <=3.0.4 has a security vulnerability explained here: GHSA-f8q6-p94x-37v3
Mocha has the glob package 7.2.0 as a dependency, which in turn has minimatch ^3.0.4 as a dependency
This results in a high security risk warning for consumers of mocha. See #4937 for an example.
This PR changes the glob dependency to 8.1.0 which no longer depends on the insecure version of minimatch.