Update dependency karma to v4 - autoclosed #158

mend-for-github-com · 2022-04-18T20:03:45Z

This PR contains the following updates:

Package	Type	Update	Change
karma (source)	devDependencies	major	`~2.0.0` -> `~4.0.0`

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	9.8	CVE-2018-16492	#97
High	9.8	CVE-2019-10196	#28
High	9.8	CVE-2020-7769	#72
High	9.8	CVE-2021-23406	#10
High	9.8	CVE-2021-23406	#10
High	9.8	CVE-2021-23518	#129
High	9.4	CVE-2021-31597	#91
High	9.1	CVE-2021-28918	#98
High	8.8	CVE-2021-23400	#122
High	8.1	CVE-2020-28502	#47
High	8.1	WS-2020-0443	#71
High	7.8	CVE-2021-43138	#155
High	7.7	CVE-2020-13822	#79
High	7.5	CVE-2018-16472	#9
High	7.5	CVE-2019-10742	#12
High	7.5	CVE-2020-36048	#111
High	7.5	CVE-2020-36049	#114
High	7.5	CVE-2021-29469	#117
High	7.5	CVE-2021-3749	#157
High	7.5	CVE-2022-0654	#144
High	7.5	WS-2020-0091	#109
High	7.2	CVE-2021-23358	#107

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	9.8	CVE-2021-44906	#150

Release Notes

karma-runner/karma

`v4.0.1`

Compare Source

Bug Fixes

browser: allow updating total specs count (#3264) (d5df723)
remove vulnerable dependency combine-lists (#3273) (c43f584), closes #3265
remove vulnerable dependency expand-braces (#3270) (4ec4f6f), closes #3268 #3269
filelist: correct logger name. (#3262) (375bb5e)
launcher: Debug Child Processes exit signal (#3259) (c277a6b)

`v4.0.0`

Compare Source

Bug Fixes

client: fix issue with loaded on safari 10 (#3252) (571191c), closes #3198
config: add test:unit npm script (#3242) (02f071d)

Chores

remove support for node 6 (#3246) (8a83990), closes #3151

BREAKING CHANGES

Drop Support for Node 6, to make it possible to use async/await in karma codebase.

3.1.4 (2018-12-17)

Bug Fixes

file-list: revert "do not preprocess up-to-date files" (#3226) (#3230) (bb022a7)
improve error msg when bin is a directory (#3231) (584dddc)
restarted browsers not running tests (#3233) (cc2eff2)

3.1.3 (2018-12-01)

Bug Fixes

add missing dep flatted (#3223) (655d4d2)

3.1.2 (2018-12-01)

Bug Fixes

browser: report errors to console during singleRun=false (#3209) (30ff73b), closes #3131
changelog: remove release which does not exist (#3214) (4e87902)
dep: Bump useragent to fix HeadlessChrome version (#3201) (240209f), closes #2762
deps: upgrade sinon-chai 2.x -> 3.x (#3207) (dc5f5de)
file-list: do not preprocess up-to-date files (#3196) (5334d1a), closes #2829
package: bump lodash version (#3203) (d38f344), closes #3177
server: use flatted for json.stringify (#3220) (fb05fb1), closes #3215

Features

docs: callout the key debug strategies. (#3219) (2682bff)

3.1.1 (2018-10-23)

Bug Fixes

config: move puppeteer from dependency to dev-dependency (#3193) (f0d52ad), closes #3191

`v3.1.4`

Compare Source

Bug Fixes

file-list: revert "do not preprocess up-to-date files" (#3226) (#3230) (bb022a7)
improve error msg when bin is a directory (#3231) (584dddc)
restarted browsers not running tests (#3233) (cc2eff2)

`v3.1.3`

Compare Source

Bug Fixes

add missing dep flatted (#3223) (655d4d2)

`v3.1.2`

Compare Source

Bug Fixes

browser: report errors to console during singleRun=false (#3209) (30ff73b), closes #3131
changelog: remove release which does not exist (#3214) (4e87902)
dep: Bump useragent to fix HeadlessChrome version (#3201) (240209f), closes #2762
deps: upgrade sinon-chai 2.x -> 3.x (#3207) (dc5f5de)
file-list: do not preprocess up-to-date files (#3196) (5334d1a), closes #2829
package: bump lodash version (#3203) (d38f344), closes #3177
server: use flatted for json.stringify (#3220) (fb05fb1), closes #3215

Features

docs: callout the key debug strategies. (#3219) (2682bff)

`v3.1.1`

Compare Source

Bug Fixes

config: move puppeteer from dependency to dev-dependency (#3193) (f0d52ad), closes #3191

`v3.1.0`

Compare Source

Bug Fixes

work around broken console methods (873e4f9), closes /github.com/angular/angular.js/pull/16644#issuecomment-407680658
browser: emit 'browsers_change' in collection (#3183) (7634e71)
config: remove phantomjs in favor of chrome headless (#3175) (0f8b2b1)
init: Support ChromeHeadless in validateBrowser (#3110) (eeadcf2)
middleware: simplify stripHost. (#3115) (d65e911)
runner: Do not persist grep option across runs (#3121) (c91cb81)
runner: Make exit code configurable when tests are failing (#3116) (74da748), closes #1300
test/client: revert const/let changes. (c097ecf)

Features

config: Add config option for browser socket timeout (#3102) (11e3a9d), closes #2927
config: add support for ES modules (e811adb)
frameworks: report start() errors back to server. (#3126) (8257375)
server: .dom files include HTML tags in page. (#3178) (4651524)
server: Add public API to force a file refresh (dab8a82)
server: Add stop method (#3153) (6d96d8e), closes #3149
server: Add support for encoded source files (#3123) (68b37d3)

`v3.0.0`

Compare Source

Bug Fixes

config: wait 20s for browser activity. (#3087) (88b977f)
config: Wait 30s for browser activity per Travis. (#3091) (f6d2f0e)
init: add "ChromeHeadless" to the browsers' options (#3096) (56fda53)
server: Exit clean on unhandledRejections. (#3092) (02f54c6), closes #3064
travis: Up the socket timeout 2->20s. (#3103) (732396a), closes #3102
travis: use the value not the key name. (#3097) (90f5546)
travis: validate TRAVIS_COMMIT if TRAVIS_PULL_REQUEST_SHA is not set. (#3094) (fba5d36)
travis: Validate TRAVIS_PULL_REQUEST_SHA rather than TRAVIS_COMMIT. (#3093) (a58fa45)

BREAKING CHANGES

Drop Support for Nodejs4 (#3082)

2.0.5 (2018-07-24)

Bug Fixes

remove circular reference in Browser (518cb11), closes #3075
browser: ensure browser state is EXECUTING when tests start (#3074) (dc7265b), closes #1640
doc: Document release steps for admins (#3063) (a701732)
middleware: Obey the Promise API. (93ba05a)
server: pass bound port to preventEADDRINUSE issue. (#3065) (850a90b)

Features

preprocessor: Allow preprocessor to handle binary files (#3054) (7b66e18)

2.0.4 (2018-06-21)

Bug Fixes

deps: remove babel-core and babel call in wallaby. (#3044) (7da8ca0)
events: bind emitters with for..in. (#3059) (b99f03f), closes #3057
launcher: Only markCaptured browsers that are launched. (#3047) (f8f3ebc)
server: actually call stert(). (#3062) (40d836a)
server: Resurrect static function Server.start() lost in 2.0.3 (#3055) (c88ebc6)

2.0.3 (2018-06-15)

The 2.03. change log was incorrectly created due to an extra pending tag in the repo.

2.0.2 (2018-04-19)

Bug Fixes

package.json: sinon-chai 2.13 is not compatible with sinon 4.x (#2977) (e095b05)

2.0.1 (2018-04-19)

Bug Fixes

browser: nicer "disconnect" - no more "Disconnectedundefined" (a987d63)
common: fix AppVeyor build (6c5e7d0)
common: more detailed info about error (424aacc)
config: Call debug log methods after setting the loglevel based upon config/cli-options. (a340dae)
config: Call debug log methods after setting the loglevel based upon config/cli-options. (99fd3f0)
config: Retry install with appveyor-retry. (17d5791)
config: Workaround npm 5.4 windows bug (ec47d81)
deps: update socket.io to version 2.0.3. (3b7b019), closes #2777
logging: Upgrade to log4js 2.x API. (#2868) (f6f8707), closes #2858
middleware: add file type to absolute urls (bd1f799)
ignore jsVersion configuration property in Firefox 59+ (2694d54), closes #2957
middleware: avoid using deprecated Buffer API (018e6be)
reporter: Fix issue causing error stack not to be parsed correctly (ac4e1a9), closes #2930
reporter: show file path correctly when urlRoot specified (34dc7d3), closes #2897
server: switch to sync write (6ec74ee)

Features

cli: Warn on commands with underscores. (0801a7f)
config: allow to use newer versions of CoffeeScript (c1fcf42)
launcher: trim whitespace in browser name (871d46f)
launcher: trim whitespace in browser name (334f9fb)
middleware: added manual file type option (0330cd1), closes #2824
better string representation of errors (c9e1ca9)
drop core-js and babel where possible (60dfc5c)
update of supported node versions (e79463b)

1.7.1 (2017-08-25)

Bug Fixes

debug-runner: support asynchronous tests in the debug runner (a36f3eb), closes #2811
file-list: Stop polluting global environment with core-js (0988022)
preprocessor: renamed handeFile to readFileCallback (92a8c81)
preprocessor: retry if fs.readFile fails (4b60513)
preprocessor: throw if retry fails (2789bf5)

Features

ci: disable testing of node versions below 4 (ec92ea9)
client: log global error stack trace (523d608), closes #2812
config: remove polling usage (b0f41c7), closes #2669
deps: add support for node@8 (7feaee3), closes #2754
deps: update socket.io to 1.7.4 to avoid issue with ws[@1](https://togithub.com/1).1.2 (264442b), closes #2593
watcher: Debounce autoWatchBatchDelay (2f8c049), closes #2331

`v2.0.5`

Compare Source

Bug Fixes

remove circular reference in Browser (518cb11), closes #3075
browser: ensure browser state is EXECUTING when tests start (#3074) (dc7265b), closes #1640
doc: Document release steps for admins (#3063) (a701732)
middleware: Obey the Promise API. (93ba05a)
server: pass bound port to preventEADDRINUSE issue. (#3065) (850a90b)

Features

preprocessor: Allow preprocessor to handle binary files (#3054) (7b66e18)

`v2.0.4`

Compare Source

Bug Fixes

deps: remove babel-core and babel call in wallaby. (#3044) (7da8ca0)
events: bind emitters with for..in. (#3059) (b99f03f), closes #3057
launcher: Only markCaptured browsers that are launched. (#3047) (f8f3ebc)
server: actually call stert(). (#3062) (40d836a)
server: Resurrect static function Server.start() lost in 2.0.3 (#3055) (c88ebc6)

`v2.0.3`

Compare Source

The 2.03. change log was incorrectly created due to an extra pending tag in the repo.

`v2.0.2`

Compare Source

Bug Fixes

package.json: sinon-chai 2.13 is not compatible with sinon 4.x (#2977) (e095b05)

If you want to rebase/retry this PR, click this checkbox.

Update dependency karma to v4

dec4648

mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 18, 2022

mend-for-github-com bot changed the title ~~Update dependency karma to v4~~ Update dependency karma to v4 - autoclosed Apr 25, 2022

mend-for-github-com bot closed this Apr 25, 2022

mend-for-github-com bot deleted the whitesource-remediate/karma-4.x branch April 25, 2022 05:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency karma to v4 - autoclosed #158

Update dependency karma to v4 - autoclosed #158

mend-for-github-com bot commented Apr 18, 2022

Update dependency karma to v4 - autoclosed #158

Update dependency karma to v4 - autoclosed #158

Conversation

mend-for-github-com bot commented Apr 18, 2022

Release Notes

Bug Fixes

Bug Fixes

Chores

BREAKING CHANGES

3.1.4 (2018-12-17)

Bug Fixes

3.1.3 (2018-12-01)

Bug Fixes

3.1.2 (2018-12-01)

Bug Fixes

Features

3.1.1 (2018-10-23)

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

BREAKING CHANGES

2.0.5 (2018-07-24)

Bug Fixes

Features

2.0.4 (2018-06-21)

Bug Fixes

2.0.3 (2018-06-15)

2.0.2 (2018-04-19)

Bug Fixes

2.0.1 (2018-04-19)

Bug Fixes

Features

1.7.1 (2017-08-25)

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes