[Snyk] Security upgrade jest from 26.6.3 to 27.0.0#7
[Snyk] Security upgrade jest from 26.6.3 to 27.0.0#7dmgoldstein1 wants to merge 1 commit intodevelopfrom
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BRACES-6838727 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660 - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
There was a problem hiding this comment.
Pull request overview
This PR upgrades Jest from version 26.6.3 to 27.0.0 to address 4 security vulnerabilities in transitive dependencies (braces, inflight, micromatch, and unset-value). The upgrade is a Snyk-generated security fix that patches high and medium severity issues.
Key Changes:
- Upgraded jest from 26.6.3 to 27.0.0 (major version upgrade)
Critical Issue Identified:
- The ts-jest dependency (26.4.4) is incompatible with Jest 27.x and must also be upgraded to version 27.x for tests to function properly
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "eslint": "7.15.0", | ||
| "jest": "26.6.3", | ||
| "jest": "27.0.0", | ||
| "ts-jest": "26.4.4", |
There was a problem hiding this comment.
Upgrading jest from 26.6.3 to 27.0.0 is a major version upgrade that introduces breaking changes. The current ts-jest version (26.4.4) is not compatible with jest 27.x. According to ts-jest's compatibility matrix, jest 27.x requires ts-jest 27.x. This incompatibility will cause the tests to fail.
Consider upgrading ts-jest to version 27.x (e.g., "ts-jest": "^27.0.0") to ensure compatibility with jest 27.0.0.
| "ts-jest": "26.4.4", | |
| "ts-jest": "^27.0.0", |
Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-BRACES-6838727
SNYK-JS-INFLIGHT-6095116
SNYK-JS-UNSETVALUE-2400660
SNYK-JS-MICROMATCH-6838728
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Inefficient Regular Expression Complexity
🦉 Prototype Pollution