From 6da736692b16d70b5b936324d5dddb99134c861e Mon Sep 17 00:00:00 2001 From: Karl Norling Date: Thu, 10 Aug 2023 14:19:37 +0100 Subject: [PATCH] Dependency update for jest-reporters, addressing CVE-2022-25883 - istanbul-lib-instrument updated from 5.10.0 to 6.0.0 - istanbul-lib-instrument dropping support for node 10 - fixing semver vuln. CVE-2022-25883 --- packages/jest-reporters/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/jest-reporters/package.json b/packages/jest-reporters/package.json index c9d469cf423d..925f8c65ec42 100644 --- a/packages/jest-reporters/package.json +++ b/packages/jest-reporters/package.json @@ -25,7 +25,7 @@ "glob": "^7.1.3", "graceful-fs": "^4.2.9", "istanbul-lib-coverage": "^3.0.0", - "istanbul-lib-instrument": "^5.1.0", + "istanbul-lib-instrument": "^6.0.0", "istanbul-lib-report": "^3.0.0", "istanbul-lib-source-maps": "^4.0.0", "istanbul-reports": "^3.1.3", @@ -78,4 +78,4 @@ "publishConfig": { "access": "public" } -} +} \ No newline at end of file