Update dependency karma to v5 #203

mend-for-github-com · 2023-04-23T16:42:54Z

This PR contains the following updates:

Package	Type	Update	Change
karma (source)	devDependencies	major	`~2.0.0` -> `~5.0.0`

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
Critical	9.8	CVE-2019-10196	#28
Critical	9.8	CVE-2020-7769	#72
Critical	9.8	CVE-2021-23406	#10
Critical	9.8	CVE-2021-23406	#10
Critical	9.8	CVE-2021-23518	#129
Critical	9.8	CVE-2021-42740	#170
Critical	9.8	CVE-2022-2421	#212
Critical	9.8	CVE-2023-42282	#216
Critical	9.4	CVE-2021-31597	#91
Critical	9.1	CVE-2021-28918	#98
High	8.8	CVE-2021-23400	#122
High	8.1	CVE-2020-28502	#47
High	8.1	WS-2020-0443	#71
High	7.8	CVE-2021-43138	#155
High	7.7	CVE-2020-13822	#79
High	7.5	CVE-2017-20165	#198
High	7.5	CVE-2018-16472	#9
High	7.5	CVE-2019-10742	#12
High	7.5	CVE-2020-36048	#111
High	7.5	CVE-2020-36049	#114
High	7.5	CVE-2021-29469	#117
High	7.5	CVE-2021-3749	#157
High	7.5	CVE-2022-0654	#144
High	7.5	CVE-2022-24999	#187
High	7.5	CVE-2023-46234	#209
High	7.5	CVE-2024-37890	#228
High	7.5	WS-2020-0091	#109
High	7.2	CVE-2021-23358	#107

Release Notes

karma-runner/karma (karma)

`v5.0.8`

Compare Source

Bug Fixes

dependencies: update and unlock socket.io dependency (#3513) (b60391f)
dependencies: update to latest log4js major (#3514) (47f1cb2)

`v5.0.7`

Compare Source

Bug Fixes

detect type for URLs with query parameter or fragment identifier (#3509) (f399063), closes #3497

`v5.0.6`

Compare Source

Bug Fixes

dependencies: update production dependencies (#3512) (0cd696f)

`v5.0.5`

Compare Source

Bug Fixes

cli: restore command line help contents (#3502) (e99da31), closes #3474

`v5.0.4`

Compare Source

Bug Fixes

browser: make sure that empty results array is still recognized (#3486) (fa95fa3)

`v5.0.3`

Compare Source

Bug Fixes

client: flush resultsBuffer on engine upgrade (#3212) (e44ca94), closes #3211

`v5.0.2`

Compare Source

Bug Fixes

ci: stop the proxy before killing the child, handle errors (#3472) (abe9af6), closes #3464

`v5.0.1`

Compare Source

Bug Fixes

file-list: do not define fs.statAsync (#3467) (55a59e7)

`v5.0.0`

Compare Source

Bug Fixes

install semantic-release as a regular dev dependency (#3455) (1eaf35e)
ci: echo travis env that gates release after_success (#3446) (b8b2ed8)
ci: poll every 10s to avoid rate limit. (#3388) (91e7e00)
middleware/runner: handle file list rejections (#3400) (80febfb), closes #3396 #3396
server: cleanup import of the removed method (#3439) (cb1bcbf)
server: createPreprocessor was removed (#3435) (5c334f5)
server: detection new MS Edge Chromium (#3440) (7166ce2)
server: replace optimist on yargs lib (#3451) (ec1e69a), closes #2473
server: Report original error message (#3415) (79ee331), closes #3414

Code Refactoring

use native Promise instead of Bluebird (#3436) (33a069f), closes /github.com/karma-runner/karma/pull/3060#discussion_r284797390

Continuous Integration

drop node 8, adopt node 12 (#3430) (a673aa8)

Features

docs: document DEFAULT_LISTEN_ADDR constant (#3443) (057d527), closes #2479
karma-server: added log to the server.js for uncaught exception (#3399) (adc6a66)
preprocessor: obey Pattern.isBinary when set (#3422) (708ae13), closes #3405

BREAKING CHANGES

Karma plugins which rely on the fact that Karma uses Bluebird promises may break as Bluebird-specific API is no longer available on Promises returned by the Karma core
server: Deprecated createPreprocessor removed, karma-browserify < 7 version doesn't work
no more testing on node 8.

4.4.1 (2019-10-18)

Bug Fixes

deps: back to karma-browserstack-launcher 1.4 (#3361) (1cd87ad)
server: Add test coverage for config.singleRun true branch. (#3384) (259be0d)
if preprocessor is async function and doesn't return a content then await donePromise (#3387) (f91be24)

`v4.4.1`

Compare Source

Bug Fixes

deps: back to karma-browserstack-launcher 1.4 (#3361) (1cd87ad)
server: Add test coverage for config.singleRun true branch. (#3384) (259be0d)
if preprocessor is async function and doesn't return a content then await donePromise (#3387) (f91be24)

`v4.4.0`

Compare Source

Bug Fixes

runner: remove explicit error on all tests failed (#3369) (f8005c6), closes #3367

Features

client: Add trusted types support (#3360) (019bfd4)
Preprocessor can return Promise (#3376) (3ffcd83)
config: add failOnSkippedTests option. (#3374) (4ed3af0)
config: clientDisplayNone sets client elements display none. (#3348) (6235e68)
deps: Remove core-js dependency. (#3379) (0d70809)

`v4.3.0`

Compare Source

Bug Fixes

build: switch from yarn to package-lock.json (#3351) (6c5add2)
config: Simpilfy error proceesing. (#3345) (582a406), closes #3339
deps: lodash update. (#3341) (5614c04)
server: Simplify 'dom' inclusion. (#3356) (5f13e11)
test: test:client silently failing on Travis (#3343) (1489e9a), closes /travis-ci.org/karma-runner/karma/jobs/537027667#L1046
travis: Pin to trusty (#3347) (1c6c690)

Features

async: frameworks can be loaded asynchronously (#3297) (177e2ef), closes #851
config: socket.io server pingTimeout config option. (#3355) (817fbbd)
preprocessor: preprocessor_priority execution order. (#3303) (c5f3560)
runner: feat(runner): (62d4c5a), closes #2121 #2799 #2121 #2799

`v4.2.0`

Compare Source

Bug Fixes

logging: Util inspect for logging the config. (#3332) (70b72a9)
reporter: format stack with 1-based column (#3325) (182c04d), closes #3324
server: Add error handler for webserver socket. (#3300) (fe9a1dd)

`v4.1.0`

Compare Source

Bug Fixes

client: Enable loading different file types when running in parent mode without iframe (#3289) (7968db6)
client: Only create the funky object if message is not a string (#3298) (ce6825f), closes #3296
launcher: Log state transitions in debug (#3294) (6556ab4), closes #3290
middleware: log invalid filetype (#3292) (7eb48c5), closes #3291

4.0.1 (2019-02-28)

Bug Fixes

browser: allow updating total specs count (#3264) (d5df723)
remove vulnerable dependency combine-lists (#3273) (c43f584), closes #3265
remove vulnerable dependency expand-braces (#3270) (4ec4f6f), closes #3268 #3269
filelist: correct logger name. (#3262) (375bb5e)
launcher: Debug Child Processes exit signal (#3259) (c277a6b)

`v4.0.1`

Compare Source

Bug Fixes

browser: allow updating total specs count (#3264) (d5df723)
remove vulnerable dependency combine-lists (#3273) (c43f584), closes #3265
remove vulnerable dependency expand-braces (#3270) (4ec4f6f), closes #3268 #3269
filelist: correct logger name. (#3262) (375bb5e)
launcher: Debug Child Processes exit signal (#3259) (c277a6b)

`v4.0.0`

Compare Source

Bug Fixes

client: fix issue with loaded on safari 10 (#3252) (571191c), closes #3198
config: add test:unit npm script (#3242) (02f071d)

Chores

remove support for node 6 (#3246) (8a83990), closes #3151

BREAKING CHANGES

Drop Support for Node 6, to make it possible to use async/await in karma codebase.

3.1.4 (2018-12-17)

Bug Fixes

file-list: revert "do not preprocess up-to-date files" (#3226) (#3230) (bb022a7)
improve error msg when bin is a directory (#3231) (584dddc)
restarted browsers not running tests (#3233) (cc2eff2)

3.1.3 (2018-12-01)

Bug Fixes

add missing dep flatted (#3223) (655d4d2)

3.1.2 (2018-12-01)

Bug Fixes

browser: report errors to console during singleRun=false (#3209) (30ff73b), closes #3131
changelog: remove release which does not exist (#3214) (4e87902)
dep: Bump useragent to fix HeadlessChrome version (#3201) (240209f), closes #2762
deps: upgrade sinon-chai 2.x -> 3.x (#3207) (dc5f5de)
file-list: do not preprocess up-to-date files (#3196) (5334d1a), closes #2829
package: bump lodash version (#3203) (d38f344), closes #3177
server: use flatted for json.stringify (#3220) (fb05fb1), closes #3215

Features

docs: callout the key debug strategies. (#3219) (2682bff)

3.1.1 (2018-10-23)

Bug Fixes

config: move puppeteer from dependency to dev-dependency (#3193) (f0d52ad), closes #3191

`v3.1.4`

Compare Source

Bug Fixes

file-list: revert "do not preprocess up-to-date files" (#3226) (#3230) (bb022a7)
improve error msg when bin is a directory (#3231) (584dddc)
restarted browsers not running tests (#3233) (cc2eff2)

`v3.1.3`

Compare Source

Bug Fixes

add missing dep flatted (#3223) (655d4d2)

`v3.1.2`

Compare Source

Bug Fixes

browser: report errors to console during singleRun=false (#3209) (30ff73b), closes #3131
changelog: remove release which does not exist (#3214) (4e87902)
dep: Bump useragent to fix HeadlessChrome version (#3201) (240209f), closes #2762
deps: upgrade sinon-chai 2.x -> 3.x (#3207) (dc5f5de)
file-list: do not preprocess up-to-date files (#3196) (5334d1a), closes #2829
package: bump lodash version (#3203) (d38f344), closes #3177
server: use flatted for json.stringify (#3220) (fb05fb1), closes #3215

Features

docs: callout the key debug strategies. (#3219) (2682bff)

`v3.1.1`

Compare Source

Bug Fixes

config: move puppeteer from dependency to dev-dependency (#3193) (f0d52ad), closes #3191

`v3.1.0`

Compare Source

Bug Fixes

work around broken console methods (873e4f9), closes /github.com/angular/angular.js/pull/16644#issuecomment-407680658
browser: emit 'browsers_change' in collection (#3183) (7634e71)
config: remove phantomjs in favor of chrome headless (#3175) (0f8b2b1)
init: Support ChromeHeadless in validateBrowser (#3110) (eeadcf2)
middleware: simplify stripHost. (#3115) (d65e911)
runner: Do not persist grep option across runs (#3121) (c91cb81)
runner: Make exit code configurable when tests are failing (#3116) (74da748), closes #1300
test/client: revert const/let changes. (c097ecf)

Features

config: Add config option for browser socket timeout (#3102) (11e3a9d), closes #2927
config: add support for ES modules (e811adb)
frameworks: report start() errors back to server. (#3126) (8257375)
server: .dom files include HTML tags in page. (#3178) (4651524)
server: Add public API to force a file refresh (dab8a82)
server: Add stop method (#3153) (6d96d8e), closes #3149
server: Add support for encoded source files (#3123) (68b37d3)

`v3.0.0`

Compare Source

Bug Fixes

config: wait 20s for browser activity. (#3087) (88b977f)
config: Wait 30s for browser activity per Travis. (#3091) (f6d2f0e)
init: add "ChromeHeadless" to the browsers' options (#3096) (56fda53)
server: Exit clean on unhandledRejections. (#3092) (02f54c6), closes #3064
travis: Up the socket timeout 2->20s. (#3103) (732396a), closes #3102
travis: use the value not the key name. (#3097) (90f5546)
travis: validate TRAVIS_COMMIT if TRAVIS_PULL_REQUEST_SHA is not set. (#3094) (fba5d36)
travis: Validate TRAVIS_PULL_REQUEST_SHA rather than TRAVIS_COMMIT. (#3093) (a58fa45)

BREAKING CHANGES

Drop Support for Nodejs4 (#3082)

2.0.5 (2018-07-24)

Bug Fixes

remove circular reference in Browser (518cb11), closes #3075
browser: ensure browser state is EXECUTING when tests start (#3074) (dc7265b), closes #1640
doc: Document release steps for admins (#3063) (a701732)
middleware: Obey the Promise API. (93ba05a)
server: pass bound port to preventEADDRINUSE issue. (#3065) (850a90b)

Features

preprocessor: Allow preprocessor to handle binary files (#3054) (7b66e18)

2.0.4 (2018-06-21)

Bug Fixes

deps: remove babel-core and babel call in wallaby. (#3044) (7da8ca0)
events: bind emitters with for..in. (#3059) (b99f03f), closes #3057
launcher: Only markCaptured browsers that are launched. (#3047) (f8f3ebc)
server: actually call stert(). (#3062) (40d836a)
server: Resurrect static function Server.start() lost in 2.0.3 (#3055) (c88ebc6)

2.0.3 (2018-06-15)

The 2.03. change log was incorrectly created due to an extra pending tag in the repo.

2.0.2 (2018-04-19)

Bug Fixes

package.json: sinon-chai 2.13 is not compatible with sinon 4.x (#2977) (e095b05)

2.0.1 (2018-04-19)

Bug Fixes

browser: nicer "disconnect" - no more "Disconnectedundefined" (a987d63)
common: fix AppVeyor build (6c5e7d0)
common: more detailed info about error (424aacc)
config: Call debug log methods after setting the loglevel based upon config/cli-options. (a340dae)
config: Call debug log methods after setting the loglevel based upon config/cli-options. (99fd3f0)
config: Retry install with appveyor-retry. (17d5791)
config: Workaround npm 5.4 windows bug (ec47d81)
deps: update socket.io to version 2.0.3. (3b7b019), closes #2777
logging: Upgrade to log4js 2.x API. (#2868) (f6f8707), closes #2858
middleware: add file type to absolute urls (bd1f799)
ignore jsVersion configuration property in Firefox 59+ (2694d54), closes #2957
middleware: avoid using deprecated Buffer API (018e6be)
reporter: Fix issue causing error stack not to be parsed correctly (ac4e1a9), closes #2930
reporter: show file path correctly when urlRoot specified (34dc7d3), closes #2897
server: switch to sync write (6ec74ee)

Features

cli: Warn on commands with underscores. (0801a7f)
config: allow to use newer versions of CoffeeScript (c1fcf42)
launcher: trim whitespace in browser name (871d46f)
launcher: trim whitespace in browser name (334f9fb)
middleware: added manual file type option (0330cd1), closes #2824
better string representation of errors (c9e1ca9)
drop core-js and babel where possible (60dfc5c)
update of supported node versions (e79463b)

1.7.1 (2017-08-25)

Bug Fixes

debug-runner: support asynchronous tests in the debug runner (a36f3eb), closes #2811
file-list: Stop polluting global environment with core-js (0988022)
preprocessor: renamed handeFile to readFileCallback (92a8c81)
preprocessor: retry if fs.readFile fails (4b60513)
preprocessor: throw if retry fails (2789bf5)

Features

ci: disable testing of node versions below 4 (ec92ea9)
client: log global error stack trace (523d608), closes #2812
config: remove polling usage (b0f41c7), closes #2669
deps: add support for node@8 (7feaee3), closes #2754
deps: update socket.io to 1.7.4 to avoid issue with ws[@1](https://togithub.com/1).1.2 (264442b), closes #2593
watcher: Debounce autoWatchBatchDelay (2f8c049), closes #2331

`v2.0.5`

Compare Source

Bug Fixes

remove circular reference in Browser (518cb11), closes #3075
browser: ensure browser state is EXECUTING when tests start (#3074) (dc7265b), closes #1640
doc: Document release steps for admins (#3063) (a701732)
middleware: Obey the Promise API. (93ba05a)
server: pass bound port to preventEADDRINUSE issue. (#3065) (850a90b)

Features

preprocessor: Allow preprocessor to handle binary files (#3054) (7b66e18)

`v2.0.4`

Compare Source

Bug Fixes

deps: remove babel-core and babel call in wallaby. (#3044) (7da8ca0)
events: bind emitters with for..in. (#3059) (b99f03f), closes #3057
launcher: Only markCaptured browsers that are launched. (#3047) (f8f3ebc)
server: actually call stert(). (#3062) (40d836a)
server: Resurrect static function Server.start() lost in 2.0.3 (#3055) (c88ebc6)

`v2.0.3`

Compare Source

The 2.03. change log was incorrectly created due to an extra pending tag in the repo.

`v2.0.2`

Compare Source

Bug Fixes

package.json: sinon-chai 2.13 is not compatible with sinon 4.x (#2977) (e095b05)

If you want to rebase/retry this PR, check this box

mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 23, 2023

mend-for-github-com bot changed the title ~~Update dependency karma to v5~~ Update dependency karma to v5 - autoclosed Jun 15, 2023

mend-for-github-com bot closed this Jun 15, 2023

mend-for-github-com bot deleted the whitesource-remediate/karma-5.x branch June 15, 2023 04:11

mend-for-github-com bot changed the title ~~Update dependency karma to v5 - autoclosed~~ Update dependency karma to v5 Jun 20, 2023

mend-for-github-com bot restored the whitesource-remediate/karma-5.x branch June 20, 2023 02:16

mend-for-github-com bot reopened this Jun 20, 2023

Update dependency karma to v5

174308f

mend-for-github-com bot force-pushed the whitesource-remediate/karma-5.x branch from 5e6e26a to 174308f Compare June 20, 2023 02:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency karma to v5 #203

Update dependency karma to v5 #203

mend-for-github-com bot commented Apr 23, 2023 •

edited

Update dependency karma to v5 #203

Are you sure you want to change the base?

Update dependency karma to v5 #203

Conversation

mend-for-github-com bot commented Apr 23, 2023 • edited

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Code Refactoring

Continuous Integration

Features

BREAKING CHANGES

4.4.1 (2019-10-18)

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

4.0.1 (2019-02-28)

Bug Fixes

Bug Fixes

Bug Fixes

Chores

BREAKING CHANGES

3.1.4 (2018-12-17)

Bug Fixes

3.1.3 (2018-12-01)

Bug Fixes

3.1.2 (2018-12-01)

Bug Fixes

Features

3.1.1 (2018-10-23)

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

BREAKING CHANGES

2.0.5 (2018-07-24)

Bug Fixes

Features

2.0.4 (2018-06-21)

Bug Fixes

2.0.3 (2018-06-15)

2.0.2 (2018-04-19)

Bug Fixes

2.0.1 (2018-04-19)

Bug Fixes

Features

1.7.1 (2017-08-25)

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

mend-for-github-com bot commented Apr 23, 2023 •

edited