Skip to content

Commit

Permalink
chore(deps): update dependency chai to ^4.3.10 (#5544)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [chai](http://chaijs.com) ([source](https://togithub.com/chaijs/chai))
| [`^4.3.8` ->
`^4.3.10`](https://renovatebot.com/diffs/npm/chai/4.3.8/4.3.10) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/chai/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/chai/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/chai/4.3.8/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/chai/4.3.8/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>chaijs/chai (chai)</summary>

### [`v4.3.10`](https://togithub.com/chaijs/chai/releases/tag/v4.3.10)

[Compare
Source](https://togithub.com/chaijs/chai/compare/v4.3.9...v4.3.10)

This release simply bumps all dependencies to their latest non-breaking
versions.

#### What's Changed

- upgrade all dependencies by
[@&#8203;keithamus](https://togithub.com/keithamus) in
[chaijs/chai#1540

**Full Changelog**:
chaijs/chai@v4.3.9...v4.3.10

### [`v4.3.9`](https://togithub.com/chaijs/chai/releases/tag/v4.3.9)

[Compare
Source](https://togithub.com/chaijs/chai/compare/v4.3.8...v4.3.9)

Upgrade dependencies.

This release upgrades dependencies to address
**[CVE-2023-43646](https://www.cve.org/CVERecord?id=CVE-2023-43646)**
where a large function name can cause "catastrophic backtracking" (aka
ReDOS attack) which can cause the test suite to hang.

**Full Changelog**:
chaijs/chai@v4.3.8...v4.3.9

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 8pm on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/compiler-explorer/compiler-explorer).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4wLjMiLCJ1cGRhdGVkSW5WZXIiOiIzNy4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] committed Oct 5, 2023
1 parent 1988fcd commit c40609b
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 16 deletions.
33 changes: 18 additions & 15 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Expand Up @@ -119,7 +119,7 @@
"approvals": "^6.2.2",
"aws-sdk-client-mock": "^3.0.0",
"c8": "^8.0.1",
"chai": "^4.3.8",
"chai": "^4.3.10",
"chai-as-promised": "^7.1.1",
"chai-http": "^4.4.0",
"cheerio": "^1.0.0-rc.12",
Expand Down

0 comments on commit c40609b

Please sign in to comment.