Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

devDeps: jenkins-mocha@^6.0.0->^10.0.0 #6

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

legobeat
Copy link

@legobeat legobeat commented May 4, 2023

Update jenkins-mocha to v10.

@legobeat legobeat marked this pull request as draft November 9, 2023 02:46
@legobeat legobeat force-pushed the devdeps-jenkins-mocha branch from 49dcba5 to 1ed0215 Compare January 29, 2024 23:16
Copy link

socket-security bot commented Jan 29, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/code-frame@7.25.7 environment 0 67.2 kB nicolo-ribaudo
npm/@babel/compat-data@7.25.8 None 0 109 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/core@7.25.8 None +1 881 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/generator@7.25.7 Transitive: environment +1 3.09 MB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/helper-compilation-targets@7.25.7 None +2 122 kB nicolo-ribaudo
npm/@babel/helper-module-imports@7.25.7 None 0 122 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/helper-module-transforms@7.25.7 None 0 233 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/helper-simple-access@7.25.7 None 0 71.8 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/helper-string-parser@7.25.7 None 0 74.4 kB nicolo-ribaudo
npm/@babel/helper-validator-identifier@7.25.7 None 0 93.3 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/helper-validator-option@7.25.7 None 0 54.7 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/helpers@7.25.7 None 0 936 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/highlight@7.25.7 environment +1 79 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/parser@7.25.8 None 0 1.89 MB nicolo-ribaudo
npm/@babel/template@7.25.7 None 0 131 kB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/traverse@7.25.7 None 0 740 kB existentialism, hzoo, jlhwung, ...1 more
npm/@istanbuljs/load-nyc-config@1.1.0 environment, filesystem 0 10.9 kB coreyfarrell
npm/@istanbuljs/schema@0.1.3 None 0 17.2 kB coreyfarrell
npm/@jridgewell/gen-mapping@0.3.5 None 0 81.6 kB jridgewell
npm/@jridgewell/resolve-uri@3.1.2 None 0 53.2 kB jridgewell
npm/@jridgewell/set-array@1.2.1 None 0 17.9 kB jridgewell
npm/@jridgewell/trace-mapping@0.3.25 None +1 282 kB jridgewell
npm/@ungap/promise-all-settled@1.1.2 None 0 4.88 kB webreflection
npm/aggregate-error@3.1.0 None 0 6.69 kB sindresorhus
npm/ansi-colors@4.1.1 environment 0 24.4 kB jonschlinkert
npm/anymatch@3.1.3 None +1 18.9 kB phated
npm/append-transform@2.0.0 None 0 8.33 kB jakxz
npm/binary-extensions@2.3.0 None 0 5.03 kB sindresorhus
npm/braces@3.0.3 None 0 44.6 kB jonschlinkert
npm/browser-stdout@1.3.1 None 0 2.3 kB kumavis
npm/browserslist@4.24.0 environment, filesystem 0 63.5 kB ai
npm/caching-transform@4.0.0 filesystem 0 10.1 kB coreyfarrell
npm/camelcase@6.3.0 None 0 11.7 kB sindresorhus
npm/caniuse-lite@1.0.30001669 None 0 2.11 MB ai, beneb, caniuse-lite
npm/chokidar@3.5.3 environment, filesystem 0 90.1 kB paulmillr
npm/clean-stack@2.2.0 None 0 5.51 kB sindresorhus
npm/cliui@7.0.4 None +1 34.6 kB oss-bot
npm/debug@4.3.7 environment 0 42.1 kB qix
npm/default-require-extensions@3.0.1 filesystem 0 3.34 kB sindresorhus
npm/diff@5.0.0 None 0 369 kB kpdecker
npm/electron-to-chromium@1.5.39 None 0 149 kB kilianvalkhof
npm/emoji-regex@8.0.0 None 0 48.3 kB mathias
npm/es6-error@4.1.1 None 0 9.86 kB bjy
npm/escalade@3.2.0 filesystem 0 12.4 kB lukeed
npm/fill-range@7.1.1 None 0 16.7 kB jonschlinkert
npm/find-cache-dir@3.3.2 filesystem 0 6.79 kB sindresorhus
npm/find-up@5.0.0 None 0 11.8 kB sindresorhus
npm/flat@5.0.2 None 0 26.6 kB timoxley
npm/foreground-child@2.0.0 shell Transitive: environment, filesystem +3 36 kB bcoe
npm/fromentries@1.3.2 None 0 4.95 kB feross
npm/fsevents@2.3.3 None 0 173 kB pipobscure
npm/gensync@1.0.0-beta.2 None 0 28.9 kB loganfsmyth
npm/get-package-type@0.1.0 filesystem 0 6.01 kB coreyfarrell
npm/glob-parent@5.1.2 None +1 25.7 kB phated
npm/growl@1.10.5 environment, filesystem, shell 0 59.3 kB deiga
npm/hasha@5.2.2 filesystem +1 74 kB sindresorhus
npm/he@1.2.0 None 0 124 kB mathias
npm/html-escaper@2.0.2 None 0 13.1 kB webreflection
npm/indent-string@4.0.0 None 0 4.4 kB sindresorhus
npm/is-binary-path@2.1.0 None 0 3.08 kB sindresorhus
npm/is-extglob@2.1.1 None 0 6.22 kB jonschlinkert
npm/is-number@7.0.0 None 0 9.62 kB jonschlinkert
npm/is-stream@2.0.1 None 0 5.93 kB sindresorhus
npm/is-unicode-supported@0.1.0 None 0 3.54 kB sindresorhus
npm/istanbul-lib-coverage@3.2.2 None 0 34.4 kB oss-bot
npm/istanbul-lib-hook@3.0.0 unsafe 0 17.9 kB coreyfarrell
npm/istanbul-lib-instrument@4.0.3 None 0 57.9 kB coreyfarrell
npm/istanbul-lib-processinfo@2.0.3 environment, filesystem 0 16.1 kB isaacs
npm/istanbul-lib-report@3.0.1 filesystem +3 150 kB oss-bot
npm/istanbul-lib-source-maps@4.0.1 filesystem 0 34.1 kB oss-bot
npm/istanbul-reports@3.1.7 None 0 294 kB oss-bot
npm/jenkins-mocha@10.0.0 None 0 15.5 kB stjohnjohnson
npm/jsesc@3.0.2 None 0 31.7 kB mathias
npm/json5@2.2.3 None 0 235 kB jordanbtucker
npm/locate-path@6.0.0 filesystem 0 7.02 kB sindresorhus
npm/lodash.flattendeep@4.4.0 None 0 12.1 kB jdalton
npm/mocha@9.2.2 environment, eval, filesystem +14 4.7 MB juergba
npm/ms@2.1.3 None 0 6.72 kB styfle
npm/nanoid@3.3.1 None 0 21.7 kB ai
npm/node-preload@0.2.1 environment 0 9.22 kB coreyfarrell
npm/node-releases@2.0.18 None 0 35.7 kB chicoxyzzy
npm/nyc@15.1.0 environment, filesystem, unsafe +13 511 kB coreyfarrell
npm/p-limit@3.1.0 None 0 7.75 kB sindresorhus
npm/p-locate@5.0.0 None 0 7.24 kB sindresorhus
npm/p-map@3.0.0 None 0 8.39 kB sindresorhus
npm/p-try@2.2.0 None 0 4.37 kB sindresorhus
npm/package-hash@4.0.0 environment, shell 0 9.18 kB coreyfarrell
npm/path-exists@4.0.0 filesystem 0 3.92 kB sindresorhus
npm/path-key@3.1.1 None 0 4.55 kB sindresorhus
npm/picocolors@1.1.0 environment 0 11.4 kB alexeyraspopov
npm/pkg-dir@4.2.0 None 0 4.75 kB sindresorhus
npm/process-on-spawn@1.0.0 shell 0 7.47 kB coreyfarrell
npm/randombytes@2.1.0 None 0 6.36 kB cwmma
npm/readdirp@3.6.0 filesystem +1 110 kB paulmillr
npm/release-zalgo@1.0.0 None 0 10.9 kB novemberborn
npm/require-main-filename@2.0.0 None 0 3.93 kB bcoe
npm/serialize-javascript@6.0.0 None 0 16.8 kB okuryu
npm/shelljs@0.8.5 environment, filesystem 0 212 kB nfischer
npm/spawn-wrap@2.0.0 environment, filesystem, shell, unsafe 0 34.1 kB coreyfarrell
npm/test-exclude@6.0.0 None 0 23.6 kB coreyfarrell
npm/to-fast-properties@2.0.0 None 0 3.5 kB sindresorhus
npm/to-regex-range@5.0.1 None 0 22.9 kB jonschlinkert
npm/update-browserslist-db@1.1.1 environment, filesystem, shell 0 14.8 kB ai
npm/uuid@8.3.2 None 0 116 kB ctavan
npm/workerpool@6.2.0 None 0 330 kB josdejong
npm/wrap-ansi@7.0.0 None +1 27.6 kB sindresorhus
npm/y18n@5.0.8 filesystem 0 23.4 kB oss-bot
npm/yargs-parser@20.2.4 environment, filesystem 0 120 kB oss-bot
npm/yargs-unparser@2.0.0 None +1 17.9 kB oss-bot
npm/yargs@16.2.0 environment, filesystem +3 421 kB oss-bot
npm/yocto-queue@0.1.0 None 0 6.03 kB sindresorhus

🚮 Removed packages: npm/@babel/helper-validator-identifier@7.19.1, npm/@babel/highlight@7.18.6, npm/append-transform@0.4.0, npm/arr-diff@4.0.0, npm/arr-flatten@1.1.0, npm/arr-union@3.1.0, npm/array-unique@0.3.2, npm/arrify@1.0.1, npm/assign-symbols@1.0.0, npm/atob@2.1.2, npm/babel-generator@6.26.1, npm/babel-messages@6.23.0, npm/babel-template@6.26.0, npm/babylon@6.18.0, npm/base@0.11.2, npm/braces@2.3.2, npm/browser-stdout@1.3.0, npm/cache-base@1.0.1, npm/caching-transform@1.0.1, npm/camelcase@4.1.0, npm/class-utils@0.3.6, npm/cliui@4.1.0, npm/code-point-at@1.1.0, npm/collection-visit@1.0.0, npm/component-emitter@1.3.0, npm/copy-descriptor@0.1.1, npm/core-js@2.6.12, npm/debug-log@1.0.1, npm/debug@4.3.4, npm/decode-uri-component@0.2.2, npm/default-require-extensions@1.0.0, npm/define-property@2.0.2, npm/diff@3.3.1, npm/execa@0.7.0, npm/expand-brackets@2.1.4, npm/expand-range@1.8.2, npm/extend-shallow@3.0.2, npm/extglob@2.0.4, npm/filename-regex@2.0.1, npm/fill-range@4.0.0, npm/find-cache-dir@0.1.1, npm/find-up@2.1.0, npm/for-in@1.0.2, npm/for-own@0.1.5, npm/foreground-child@1.5.6, npm/fragment-cache@0.2.1, npm/get-caller-file@1.0.3, npm/get-stream@3.0.0, npm/get-value@2.0.6, npm/glob-base@0.3.0, npm/glob-parent@2.0.0, npm/growl@1.10.3, npm/has-value@1.0.0, npm/has-values@1.0.0, npm/he@1.1.1, npm/invariant@2.2.4, npm/invert-kv@1.0.0, npm/is-accessor-descriptor@1.0.0, npm/is-buffer@1.1.6, npm/is-data-descriptor@1.0.0, npm/is-descriptor@1.0.2, npm/is-dotfile@1.0.3, npm/is-equal-shallow@0.1.3, npm/is-extendable@1.0.1, npm/is-extglob@1.0.0, npm/is-finite@1.1.0, npm/is-glob@2.0.1, npm/is-number@3.0.0, npm/is-posix-bracket@0.1.1, npm/is-primitive@2.0.0, npm/is-stream@1.1.0, npm/is-utf8@0.2.1, npm/isobject@3.0.1, npm/istanbul-lib-coverage@1.2.1, npm/istanbul-lib-hook@1.2.2, npm/istanbul-lib-instrument@1.10.2, npm/istanbul-lib-report@1.1.5, npm/istanbul-lib-source-maps@1.2.6, npm/istanbul-reports@1.5.1, npm/jenkins-mocha@6.0.0, npm/jsesc@1.3.0, npm/kind-of@6.0.3, npm/lcid@1.0.0, npm/locate-path@2.0.0, npm/loose-envify@1.4.0, npm/map-cache@0.2.2, npm/map-visit@1.0.0, npm/math-random@1.0.4, npm/md5-hex@1.3.0, npm/md5-o-matic@0.1.1, npm/mem@1.1.0, npm/merge-source-map@1.1.0, npm/micromatch@3.1.10, npm/mixin-deep@1.3.2, npm/mocha@4.1.0, npm/nanomatch@1.2.13, npm/normalize-path@2.1.1, npm/npm-run-path@2.0.2, npm/number-is-nan@1.0.1, npm/nyc@11.9.0, npm/object-copy@0.1.0, npm/object-visit@1.0.1, npm/object.omit@2.0.1, npm/object.pick@1.3.0, npm/os-homedir@1.0.2, npm/os-locale@2.1.0, npm/p-finally@1.0.0, npm/p-limit@1.3.0, npm/p-locate@2.0.0, npm/p-try@1.0.0, npm/parse-glob@3.0.4, npm/pascalcase@0.1.1, npm/path-exists@3.0.0, npm/path-key@2.0.1, npm/path-type@1.1.0, npm/pify@2.3.0, npm/pinkie-promise@2.0.1, npm/pinkie@2.0.4, npm/pkg-dir@1.0.0, npm/posix-character-classes@0.1.1, npm/preserve@0.2.0, npm/randomatic@3.1.1, npm/read-pkg-up@1.0.1, npm/read-pkg@1.1.0, npm/regenerator-runtime@0.11.1, npm/regex-cache@0.4.4, npm/regex-not@1.0.2, npm/remove-trailing-separator@1.1.0, npm/repeat-element@1.1.4, npm/repeat-string@1.6.1, npm/repeating@2.0.1, npm/require-main-filename@1.0.1, npm/resolve-url@0.2.1, npm/ret@0.1.15, npm/safe-regex@1.1.0, npm/set-value@2.0.1, npm/shelljs@0.7.8, npm/snapdragon-node@2.1.1, npm/snapdragon-util@3.0.1, npm/snapdragon@0.8.2, npm/source-map-resolve@0.5.3, npm/source-map-url@0.4.1, npm/spawn-wrap@1.4.3, npm/split-string@3.1.0, npm/static-extend@0.1.2, npm/strip-eof@1.0.0, npm/test-exclude@4.2.3, npm/to-fast-properties@1.0.3, npm/to-object-path@0.3.0, npm/to-regex-range@2.1.1, npm/trim-right@1.0.1, npm/union-value@1.0.1, npm/unset-value@1.0.0, npm/urix@0.1.0, npm/use@3.1.1, npm/wrap-ansi@2.1.0, npm/y18n@3.2.2, npm/yargs-parser@8.1.0, npm/yargs@11.1.0

View full report↗︎

Copy link

socket-security bot commented Jan 29, 2024

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/istanbul-lib-report@3.0.1, npm/istanbul-lib-source-maps@4.0.1, npm/convert-source-map@2.0.0, npm/anymatch@3.1.3, npm/foreground-child@2.0.0, npm/package-hash@4.0.0, npm/process-on-spawn@1.0.0, npm/update-browserslist-db@1.1.1

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

@legobeat legobeat marked this pull request as ready for review May 30, 2024 20:03
@legobeat legobeat force-pushed the devdeps-jenkins-mocha branch from 1ed0215 to 0a81b52 Compare May 30, 2024 20:05
@legobeat
Copy link
Author

@SocketSecurity ignore npm/istanbul-lib-report@3.0.1
@SocketSecurity ignore npm/istanbul-lib-source-maps@4.0.1
@SocketSecurity ignore npm/convert-source-map@2.0.0
@SocketSecurity ignore npm/anymatch@3.1.3
@SocketSecurity ignore npm/foreground-child@2.0.0

new authors ok

@legobeat
Copy link
Author

@SocketSecurity ignore npm/process-on-spawn@1.0.0
@SocketSecurity ignore npm/update-browserslist-db@1.0.16

shell access ok

@legobeat
Copy link
Author

@SocketSecurity ignore npm/package-hash@4.0.0

shell access, new author ok

@legobeat legobeat requested a review from a team October 16, 2024 09:29
@legobeat legobeat changed the base branch from master to main October 16, 2024 09:38
@legobeat legobeat force-pushed the devdeps-jenkins-mocha branch from 0a81b52 to ad6623c Compare October 16, 2024 09:41
@legobeat
Copy link
Author

@SocketSecurity ignore npm/update-browserslist-db@1.1.1

shell access ok

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant