Update dependency mocha to v5 - autoclosed #105
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![mend-for-github-com[bot]](https://avatars.githubusercontent.com/in/30796?s=60&v=4){kind=small}
mend-for-github-com
bot
added
the
security fix
mend-for-github-com
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^2.4.5->^5.0.0By merging this PR, the below issues will be automatically resolved and closed:
Release Notes
mochajs/mocha
v5.0.3Compare Source
This patch features a fix to address a potential "low severity" ReDoS vulnerability in the diff package (a dependency of Mocha).
🔒 Security Fixes
diffto v3.5.0 (@anishkny)🔩 Other
generateDiff()inBasereporter (@harrysarson)v5.0.2Compare Source
This release fixes a class of tests which report as false positives. Certain tests will now break, though they would have previously been reported as passing. Details below. Sorry for the inconvenience!
🐛 Fixes
#3226: Do not swallow errors that are thrown asynchronously from passing tests (@boneskull). Example:
```js
it('should actually fail, sorry!', function (done) {
// passing assertion
assert(true === true);
// test complete & is marked as passing
done();
// ...but something evil lurks within
setTimeout(() => {
throw new Error('chaos!');
}, 100);
});
```
Previously to this version, Mocha would have silently swallowed the
chaos!exception, and you wouldn't know. Well, now you know. Mocha cannot recover from this gracefully, so it will exit with a nonzero code.Maintainers of external reporters: If a test of this class is encountered, the
Runnerinstance will emit theendevent twice; you may need to change your reporter to userunner.once('end')intead ofrunner.on('end').#3093: Fix stack trace reformatting problem (@outsideris)
🔩 Other
browser-stdoutto v1.3.1 (@honzajavorek)v5.0.1Compare Source
...your garden-variety patch release.
Special thanks to Wallaby.js for their continued support! ❤️
🐛 Fixes
--delaynow works with.only()(@silviom)📖 Documentation
--globdocs (@outsideris)🔩 Other
v5.0.0Compare Source
Mocha starts off 2018 right by again dropping support for unmaintained rubbish.
Welcome @vkarpov15 to the team!
💥 Breaking Changes
Practically speaking, only code which consumes (through bundling or otherwise) the userland buffer module should be affected. However, Mocha will no longer test against these browsers, nor apply fixes for them.
🎉 Enhancements
--filecommand line argument (documentation) (@hswolff)🐛 Fixes
😎 Developer Experience
📖 Documentation
--no-timeoutsdocs (@dfberry)done()callback docs (@maraisr)README.mdorganization (@xxczaki)🔩 Other
v4.1.0Compare Source
4.1.0 / 2017-12-28
This is mainly a "housekeeping" release.
Welcome @Bamieh and @xxczaki to the team!
🐛: Fixes
progressreporter now accepts reporter options (@canoztokmak)xitinbddinterface now properly returns itsTestobject (@Bamieh)--helpwill now help you even if you have amocha.opts(@Zarel)🎉 Enhancements
--no-diffflag will completely disable diff output (@CapacitorSet)📖 Documentation
docs/(@boneskull)🔩 Other
v4.0.1Compare Source
4.0.1 / 2017-10-05
🐛 Fixes
v4.0.0Compare Source
4.0.0 / 2017-10-02
You might want to read this before filing a new bug! 😝
💥 Breaking Changes
For more info, please read this article.
Compatibility
Default Behavior
nodefrom exiting will do so when run in Mocha. Supply the--exitflag to revert to pre-v4.0.0 behavior (@ScottFreeCode, @boneskull)Reporter Output
stdout:prefix from browser reporter logs (@skeggse)--forbid-pendingor--forbid-onlyis specified (@ScottFreeCode)👎 Deprecations
--compilerscommand-line option is now soft-deprecated and will emit a warning onSTDERR. Read this for more info and workarounds (@ScottFreeCode, @boneskull)🎉 Enhancements
📖 Documentation
README.mdandCONTRIBUTING.md(@skeggse)🔩 Other
v3.5.3Compare Source
3.5.3 / 2017-09-11
🐛 Fixes
v3.5.2Compare Source
3.5.2 / 2017-09-10
🐛 Fixes
v3.5.1Compare Source
3.5.1 / 2017-09-09
📰 News
🐛 Fixes
xitexport for "require" interface (@solodynamo)🔩 Other
--compilerscoverage (@ScottFreeCode)v3.5.0Compare Source
v3.5.0 / 2017-07-31
📰 News
🔒 Security Fixes
🎉 Enhancements
--forbid-onlyand--forbid-pendingflags. Use these in CI or hooks to ensure tests aren't accidentally being skipped! (@charlierudolph)--napi-modulesflag (@jupp0r)🔩 Other
v3.4.2Compare Source
3.4.2 / 2017-05-24
🐛 Fixes
🔩 Other
v3.4.1Compare Source
Fixed a publishing mishap with git's autocrlf settings.
v3.3.0Compare Source
Thanks to all our contributors, maintainers, sponsors, and users! ❤️
As highlights:
🎉 Enhancements
--inspect-brkon command-line (@igwejk)🐛 Fixes
🔍 Coverage
🔩 Other
semistandarddirectly (@kt3k)v3.2.0Compare Source
3.2.0 / 2016-11-24
📰 News
Mocha is now a JS Foundation Project!
Mocha is proud to have joined the JS Foundation. For more information, read the announcement.
Contributor License Agreement
Under the foundation, all contributors to Mocha must sign the JS Foundation CLA before their code can be merged. When sending a PR--if you have not already signed the CLA--a friendly bot will ask you to do so.
Mocha remains licensed under the MIT license.
🐛 Bug Fix
--watchencounters broken symlinks (@villesau)listreporter (@Aldaviva)🎉 Enhancement
--inspectflag to CLI help (@ughitsaaron)🔩 Other
README.md(@boneskull, @ScottFreeCode, @dasilvacontin)Thanks to all our contributors, sponsors and backers! Keep on the lookout for a public roadmap and new contribution guide coming soon.
v3.1.2Compare Source
3.1.2 / 2016-10-10
🐛 Bug Fix
Error'sstackproperty isn't writable ([@boneskull])v3.1.1Compare Source
3.1.1 / 2016-10-09
🐛 Bug Fix
done()was called multiple times when it wasn't (@frankleonrose)🔩 Other
.jsfiles ([@boneskull])v3.1.0Compare Source
3.1.0 / 2016-09-27
🎉 Enhancement
--inspecton command-line (@simov)🐛 Bug Fix
this.skip()is called (@boneskull)SIGINTencountered; exit code can no longer rollover at 256 (@Munter)only()/skip()in IE7/IE8 (@boneskull)Stringconstructor (more) (@boneskull)v3.0.2Compare Source
v3.0.1Compare Source
v3.0.0Compare Source