[Snyk] Upgrade karma-qunit from 4.1.1 to 4.1.2 by snyk-bot · Pull Request #22 · turkdevops/jquery

snyk-bot · 2021-04-13T04:33:33Z

Snyk has created this PR to upgrade karma-qunit from 4.1.1 to 4.1.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released 2 months ago, on 2021-02-03.

Release notes

Package name: karma-qunit

4.1.2 - 2021-02-03
v4.1.1...v4.1.2
4.1.1 - 2020-05-06
No content.

from karma-qunit GitHub release notes

Commit messages

Package name: karma-qunit

bd14b1a chore: release v4.1.2
974aa4d chore: update contributors
108391f Switch to GitHub Actions CI.
1358c60 Move ESLint and karma tests to npm scripts
f8dac22 Update devDependencies and add karma 6
6c237ca chore(deps): bump http-proxy from 1.18.0 to 1.18.1 (Nokia browser support workaround jquery/jquery#143)
a41903c chore(deps): bump lodash from 4.17.15 to 4.17.19 (Fix #7817 and #6355 together for the common good of Array.prototype jquery/jquery#142)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade karma-qunit from 4.1.1 to 4.1.2. See this package in npm: https://www.npmjs.com/package/karma-qunit See this project in Snyk: https://app.snyk.io/org/kadirselcuk/project/28ac5072-f66b-4183-bbda-99b4324cbf96?utm_source=github&utm_medium=upgrade-pr

mistaken-pull-closer · 2021-04-13T04:33:38Z

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

pull-dog · 2021-04-13T04:33:38Z

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

@pull-dog up to reprovision or provision the server.
@pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
682cddc0-9c11-11eb-8133-19a47021f78c

guardrails · 2021-04-13T04:34:21Z

⚠️ We detected 118 security issues in this pull request:
Mode: paranoid | Total findings: 118 | Considered vulnerability: 0

Hard-Coded Secrets (2)

jquery/test/unit/event.js

Line 1182 in b17ea5f

$child.trigger( { "type": "foo", "secret": "boo!" } );

jquery/test/unit/selector.js

Line 2115 in b17ea5f

assert.equal( jQuery.escapeSelector( "a0123456789b" ), "a0123456789b",

More info on how to fix Hard-Coded Secrets in General.

Insecure File Management (41)

jquery/Gruntfile.js

Line 9 in b17ea5f

fs.readFileSync( filepath, { encoding: "utf8" } )

jquery/build/release.js

Line 25 in b17ea5f

var contents = fs.readFileSync( filepath, "utf8" );

jquery/build/release.js

Line 27 in b17ea5f

fs.writeFileSync( filepath, contents, "utf8" );

jquery/build/release/cdn.js

Line 46 in b17ea5f

text = fs.readFileSync( builtFile, "utf8" )

jquery/build/release/cdn.js

Line 51 in b17ea5f

fs.writeFileSync( releaseFile, text );

jquery/build/release/cdn.js

Line 74 in b17ea5f

output = fs.createWriteStream(

jquery/build/release/cdn.js

Line 93 in b17ea5f

fs.writeFileSync( md5file, sum );

jquery/build/release/cdn.js

Line 97 in b17ea5f

archiver.append( fs.createReadStream( file ),

jquery/build/release/dist.js

Line 8 in b17ea5f

const pkg = require( `${ Release.dir.repo }/package.json` );

jquery/build/release/dist.js

Line 73 in b17ea5f

const readme = await fs.readFile(

jquery/build/release/dist.js

Line 106 in b17ea5f

await fs.writeFile( `${ Release.dir.dist }/bower.json`, generateBower() );

jquery/build/release/dist.js

Line 108 in b17ea5f

await fs.writeFile( `${ Release.dir.dist }/README.md`,

jquery/build/tasks/build.js

Line 102 in b17ea5f

fs.readdirSync( `${ srcFolder }/${ prepend }${ module }` ),

jquery/build/tasks/build.js

Line 154 in b17ea5f

fs.readdirSync( `${ srcFolder }/${ module }` ),

jquery/build/tasks/dist.js

Line 33 in b17ea5f

text = fs.readFileSync( filename, "utf8" );

jquery/build/tasks/node_smoke_tests.js

Line 15 in b17ea5f

fs.readdirSync( testsDir )

jquery/build/tasks/node_smoke_tests.js

Line 17 in b17ea5f

fs.statSync( testsDir + testFilePath ).isFile() &&

jquery/build/tasks/qunit_fixture.js

Line 8 in b17ea5f

fs.writeFileSync(

jquery/build/tasks/sourcemap.js

Line 13 in b17ea5f

var text = fs.readFileSync( minLoc, "utf8" )

jquery/build/tasks/sourcemap.js

Line 15 in b17ea5f

fs.writeFileSync( minLoc, text );

jquery/src/ajax/xhr.js

Line 24 in b17ea5f

xhr.open(

jquery/test/data/jquery-1.9.1.js

Line 8753 in b17ea5f

xhr.open( s.type, s.url, s.async, s.username, s.password );

jquery/test/data/jquery-1.9.1.js

Line 8755 in b17ea5f

xhr.open( s.type, s.url, s.async );

jquery/test/data/testinit.js

Line 329 in b17ea5f

require( [ parentUrl + "test/data/testrunner.js" ], function() {

jquery/test/data/testinit.js

Line 366 in b17ea5f

require( [ parentUrl + "test/" + dep ], loadDep );

jquery/test/data/testinit.js

Line 389 in b17ea5f

    
           require( [ "http://swarm.jquery.org/js/inject.js?" + ( new Date() ).getTime() ],

jquery/test/jquery.js

Line 89 in b17ea5f

require( [ src ], loadTests );

jquery/test/jquery.js

Line 91 in b17ea5f

require( [ src ] );

jquery/test/middleware-mockserver.js

Line 134 in b17ea5f

var body = fs.readFileSync( __dirname + "/data/with_fries.xml" ).toString();

jquery/test/middleware-mockserver.js

Line 214 in b17ea5f

var body = fs.readFileSync( __dirname + "/data/test.include.html" ).toString();

jquery/test/middleware-mockserver.js

Line 223 in b17ea5f

var body = fs.readFileSync( __dirname + "/data/csp.include.html" ).toString();

jquery/test/middleware-mockserver.js

Line 232 in b17ea5f

var body = fs.readFileSync(

jquery/test/middleware-mockserver.js

Line 241 in b17ea5f

var body = fs.readFileSync(

Conversation

snyk-bot commented Apr 13, 2021

Snyk has created this PR to upgrade karma-qunit from 4.1.1 to 4.1.2.

Uh oh!

mistaken-pull-closer Bot commented Apr 13, 2021

Uh oh!

pull-dog Bot commented Apr 13, 2021

Uh oh!

guardrails Bot commented Apr 13, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant