From 2bbd21872bdaf861bf526a8ecdcf9a60183d9f16 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 30 Mar 2025 19:51:56 +0000 Subject: [PATCH] Update dependency chai to v4.5.0 (#22696) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [chai](http://chaijs.com) ([source](https://redirect.github.com/chaijs/chai)) | [`4.3.8` -> `4.5.0`](https://renovatebot.com/diffs/npm/chai/4.3.8/4.5.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/chai/4.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/chai/4.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/chai/4.3.8/4.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/chai/4.3.8/4.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes
chaijs/chai (chai) ### [`v4.5.0`](https://redirect.github.com/chaijs/chai/releases/tag/v4.5.0) [Compare Source](https://redirect.github.com/chaijs/chai/compare/v4.4.1...v4.5.0) - Update type detect ([#​1631](https://redirect.github.com/chaijs/chai/issues/1631)) [`1a36d35`](https://redirect.github.com/chaijs/chai/commit/1a36d35) #### What's Changed - Update type detect by [@​koddsson](https://redirect.github.com/koddsson) in [https://github.com/chaijs/chai/pull/1631](https://redirect.github.com/chaijs/chai/pull/1631) **Full Changelog**: https://github.com/chaijs/chai/compare/v4.4.1...v4.5.0 ### [`v4.4.1`](https://redirect.github.com/chaijs/chai/releases/tag/v4.4.1) [Compare Source](https://redirect.github.com/chaijs/chai/compare/v4.4.0...v4.4.1) #### What's Changed - fix: removes `??` for node compat by [@​43081j](https://redirect.github.com/43081j) in [https://github.com/chaijs/chai/pull/1574](https://redirect.github.com/chaijs/chai/pull/1574) **Full Changelog**: https://github.com/chaijs/chai/compare/v4.4.0...v4.4.1 ### [`v4.4.0`](https://redirect.github.com/chaijs/chai/releases/tag/v4.4.0) [Compare Source](https://redirect.github.com/chaijs/chai/compare/v4.3.10...v4.4.0) #### What's Changed - Allow deepEqual fonction to be configured globally (4.x.x branch) by [@​forty](https://redirect.github.com/forty) in [https://github.com/chaijs/chai/pull/1553](https://redirect.github.com/chaijs/chai/pull/1553) **Full Changelog**: https://github.com/chaijs/chai/compare/v4.3.10...v4.4.0 ### [`v4.3.10`](https://redirect.github.com/chaijs/chai/releases/tag/v4.3.10) [Compare Source](https://redirect.github.com/chaijs/chai/compare/v4.3.9...v4.3.10) This release simply bumps all dependencies to their latest non-breaking versions. #### What's Changed - upgrade all dependencies by [@​keithamus](https://redirect.github.com/keithamus) in [https://github.com/chaijs/chai/pull/1540](https://redirect.github.com/chaijs/chai/pull/1540) **Full Changelog**: https://github.com/chaijs/chai/compare/v4.3.9...v4.3.10 ### [`v4.3.9`](https://redirect.github.com/chaijs/chai/releases/tag/v4.3.9) [Compare Source](https://redirect.github.com/chaijs/chai/compare/v4.3.8...v4.3.9) Upgrade dependencies. This release upgrades dependencies to address **[CVE-2023-43646](https://www.cve.org/CVERecord?id=CVE-2023-43646)** where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang. **Full Changelog**: https://github.com/chaijs/chai/compare/v4.3.8...v4.3.9
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/TryGhost/Ghost). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- apps/admin-x-design-system/package.json | 2 +- apps/shade/package.json | 2 +- ghost/admin/package.json | 2 +- yarn.lock | 48 +++++++++++++------------ 4 files changed, 28 insertions(+), 26 deletions(-) diff --git a/apps/admin-x-design-system/package.json b/apps/admin-x-design-system/package.json index a3353ea79a..f345757c40 100644 --- a/apps/admin-x-design-system/package.json +++ b/apps/admin-x-design-system/package.json @@ -42,7 +42,7 @@ "@types/lodash-es": "4.17.12", "@vitejs/plugin-react": "4.2.1", "c8": "8.0.1", - "chai": "4.3.8", + "chai": "4.5.0", "eslint-plugin-react-hooks": "4.6.0", "eslint-plugin-react-refresh": "0.4.19", "eslint-plugin-tailwindcss": "3.13.0", diff --git a/apps/shade/package.json b/apps/shade/package.json index 5cda99bade..9b100b8e8f 100644 --- a/apps/shade/package.json +++ b/apps/shade/package.json @@ -43,7 +43,7 @@ "@types/node": "^22.10.1", "@vitejs/plugin-react": "4.2.1", "c8": "8.0.1", - "chai": "4.3.8", + "chai": "4.5.0", "eslint-plugin-react-hooks": "4.6.0", "eslint-plugin-react-refresh": "0.4.19", "eslint-plugin-tailwindcss": "3.13.0", diff --git a/ghost/admin/package.json b/ghost/admin/package.json index e0e272350e..b173d253be 100644 --- a/ghost/admin/package.json +++ b/ghost/admin/package.json @@ -67,7 +67,7 @@ "broccoli-funnel": "3.0.8", "broccoli-merge-trees": "4.2.0", "broccoli-terser-sourcemap": "4.1.1", - "chai": "4.3.8", + "chai": "4.5.0", "chai-dom": "1.11.0", "codemirror": "5.48.2", "cssnano": "4.1.10", diff --git a/yarn.lock b/yarn.lock index a997d635fd..48bf9a4709 100644 --- a/yarn.lock +++ b/yarn.lock @@ -12876,18 +12876,18 @@ chai-dom@1.11.0: resolved "https://registry.yarnpkg.com/chai-dom/-/chai-dom-1.11.0.tgz#aa3af405b3d9b0470d185b17081ed23ca5fdaeb4" integrity sha512-ZzGlEfk1UhHH5+N0t9bDqstOxPEXmn3EyXvtsok5rfXVDOFDJbHVy12rED6ZwkJAUDs2w7/Da4Hlq2LB63kltg== -chai@4.3.8, chai@^4.3.7: - version "4.3.8" - resolved "https://registry.yarnpkg.com/chai/-/chai-4.3.8.tgz#40c59718ad6928da6629c70496fe990b2bb5b17c" - integrity sha512-vX4YvVVtxlfSZ2VecZgFUTU5qPCYsobVI2O9FmwEXBhDigYGQA6jRXCycIs1yJnnWbZ6/+a2zNIF5DfVCcJBFQ== +chai@4.5.0, chai@^4.3.7: + version "4.5.0" + resolved "https://registry.yarnpkg.com/chai/-/chai-4.5.0.tgz#707e49923afdd9b13a8b0b47d33d732d13812fd8" + integrity sha512-RITGBfijLkBddZvnn8jdqoTypxvqbOLYQkGGxXzeFjVHvudaPw0HNFD9x928/eUwYWd2dPCugVqspGALTZZQKw== dependencies: assertion-error "^1.1.0" - check-error "^1.0.2" - deep-eql "^4.1.2" - get-func-name "^2.0.0" - loupe "^2.3.1" + check-error "^1.0.3" + deep-eql "^4.1.3" + get-func-name "^2.0.2" + loupe "^2.3.6" pathval "^1.1.1" - type-detect "^4.0.5" + type-detect "^4.1.0" chalk@4.1.2, chalk@^4.0.0, chalk@^4.0.2, chalk@^4.1.0, chalk@^4.1.1, chalk@^4.1.2: version "4.1.2" @@ -12995,10 +12995,12 @@ chartjs-color@^2.1.0: chartjs-color-string "^0.6.0" color-convert "^1.9.3" -check-error@^1.0.2: - version "1.0.2" - resolved "https://registry.yarnpkg.com/check-error/-/check-error-1.0.2.tgz#574d312edd88bb5dd8912e9286dd6c0aed4aac82" - integrity sha512-BrgHpW9NURQgzoNyjfq0Wu6VFO6D7IZEmJNdtgNqpzGG8RuNFHt2jQxWlAs4HMe119chBnv+34syEZtc6IhLtA== +check-error@^1.0.3: + version "1.0.3" + resolved "https://registry.yarnpkg.com/check-error/-/check-error-1.0.3.tgz#a6502e4312a7ee969f646e83bb3ddd56281bd694" + integrity sha512-iKEoDYaRmd1mxM90a2OEfWhjsjPpYPuQ+lMYsoxB126+t8fw7ySEO48nmDg5COTjxDI65/Y2OWpeEHk3ZOe8zg== + dependencies: + get-func-name "^2.0.2" cheerio-select@^2.1.0: version "2.1.0" @@ -14650,10 +14652,10 @@ dedent@^1.0.0: resolved "https://registry.yarnpkg.com/dedent/-/dedent-1.5.3.tgz#99aee19eb9bae55a67327717b6e848d0bf777e5a" integrity sha512-NHQtfOOW68WD8lgypbLA5oT+Bt0xXJhiYvoR6SmmNXZfpzOGXwdKWmcwG8N7PwVVWV3eF/68nmD9BaJSsTBhyQ== -deep-eql@^4.1.2: - version "4.1.2" - resolved "https://registry.yarnpkg.com/deep-eql/-/deep-eql-4.1.2.tgz#270ceb902f87724077e6f6449aed81463f42fc1c" - integrity sha512-gT18+YW4CcW/DBNTwAmqTtkJh7f9qqScu2qFVlx7kCoeY9tlBu9cUcr7+I+Z/noG8INehS3xQgLpTtd/QUTn4w== +deep-eql@^4.1.3: + version "4.1.4" + resolved "https://registry.yarnpkg.com/deep-eql/-/deep-eql-4.1.4.tgz#d0d3912865911bb8fac5afb4e3acfa6a28dc72b7" + integrity sha512-SUwdGfqdKOwxCPeVYjwSyRpJ7Z+fhpwIAtmCUdZIWZ/YP5R9WAsyuSgpLVDi9bjWoN2LXHNss/dk3urXtdQxGg== dependencies: type-detect "^4.0.0" @@ -19022,10 +19024,10 @@ get-east-asian-width@^1.0.0: resolved "https://registry.yarnpkg.com/get-east-asian-width/-/get-east-asian-width-1.2.0.tgz#5e6ebd9baee6fb8b7b6bd505221065f0cd91f64e" integrity sha512-2nk+7SIVb14QrgXFHcm84tD4bKQz0RxPuMT8Ag5KPOq7J5fEmAg0UbXdTOSHqNuHSU28k55qnceesxXRZGzKWA== -get-func-name@^2.0.0: - version "2.0.0" - resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.0.tgz#ead774abee72e20409433a066366023dd6887a41" - integrity sha512-Hm0ixYtaSZ/V7C8FJrtZIuBBI+iSgL+1Aq82zSu8VQNB4S3Gk8e7Qs3VwBDJAhmRZcFqkl3tQu36g/Foh5I5ig== +get-func-name@^2.0.0, get-func-name@^2.0.2: + version "2.0.2" + resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.2.tgz#0d7cf20cd13fda808669ffa88f4ffc7a3943fc41" + integrity sha512-8vXOvuE167CtIc3OyItco7N/dpRtBbYOsPsXCz7X/PMnlGjYjSGuZJgM1Y7mmew7BKf9BqvLX2tnOVy1BBUsxQ== get-intrinsic@^1.1.1, get-intrinsic@^1.1.3, get-intrinsic@^1.2.0, get-intrinsic@^1.2.4, get-intrinsic@^1.2.6: version "1.2.6" @@ -23169,7 +23171,7 @@ loose-envify@^1.0.0, loose-envify@^1.1.0, loose-envify@^1.4.0: dependencies: js-tokens "^3.0.0 || ^4.0.0" -loupe@^2.3.1, loupe@^2.3.6: +loupe@^2.3.6: version "2.3.6" resolved "https://registry.yarnpkg.com/loupe/-/loupe-2.3.6.tgz#76e4af498103c532d1ecc9be102036a21f787b53" integrity sha512-RaPMZKiMy8/JruncMU5Bt6na1eftNoo++R4Y+N2FrxkDVTrGvcyzFTsaGif4QTeKESheMGegbhw6iUAq+5A8zA== @@ -31297,7 +31299,7 @@ type-detect@4.0.8: resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.0.8.tgz#7646fb5f18871cfbb7749e69bd39a6388eb7450c" integrity sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g== -type-detect@^4.0.0, type-detect@^4.0.5, type-detect@^4.0.8, type-detect@^4.1.0: +type-detect@^4.0.0, type-detect@^4.0.8, type-detect@^4.1.0: version "4.1.0" resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.1.0.tgz#deb2453e8f08dcae7ae98c626b13dddb0155906c" integrity sha512-Acylog8/luQ8L7il+geoSxhEkazvkslg7PSNKOX59mbB9cOveP5aq9h74Y7YU8yDpJwetzQQrfIwtf4Wp4LKcw==