Skip to content

dependabot npm(deps-dev): bump chai from 4.3.8 to 4.3.10

Depen d'Abot requested to merge dependabot-npm_and_yarn-chai-4.3.10 into master

Bumps chai from 4.3.8 to 4.3.10.

Release notes

Sourced from chai's releases.

v4.3.10

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

Full Changelog: https://github.com/chaijs/chai/compare/v4.3.9...v4.3.10

v4.3.9

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: https://github.com/chaijs/chai/compare/v4.3.8...v4.3.9

Commits

Merge request reports

Loading