Bump micromatch, jest and jest-environment-node

[dependabot]

Bumps micromatch to 4.0.8 and updates ancestor dependencies micromatch, jest and jest-environment-node. These dependencies need to be updated together.

Updates micromatch from 3.1.10 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

4.0.4

• fix: Update picomatch to fix regression #179 (8becb55)

4.0.3

• Enforce newer version of picomatch with bugfixes

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

• backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

• this is basically v4.0.5, with some README updates
• it is vulnerable to CVE-2024-4067
• Updated braces to v3.0.3 to avoid CVE-2024-4068
• does NOT break API compatibility

[4.0.6] - 2024-05-21

• Added hasBraces to check if a pattern contains braces.
• Fixes CVE-2024-4067
• BREAKS API COMPATIBILITY
• Should be labeled as a major release, but it's not.

[4.0.1 - 4.0.5]

[4.0.0] - 2019-03-20

Added

• Adds support for options.onMatch. See the readme for details
• Adds support for options.onIgnore. See the readme for details
• Adds support for options.onResult. See the readme for details

Breaking changes

• Require Node.js >= 8.6
• Removed support for passing an array of brace patterns to micromatch.braces().
• To strictly enforce closing brackets (for {, [, and (), you must now use strictBrackets=true instead of strictErrors.
• cache - caching and all related options and methods have been removed
• options.unixify was renamed to options.windows
• options.nodupes Was removed. Duplicates are always removed by default. You can override this with custom behavior by using the onMatch, onResult and onIgnore functions.
• options.snapdragon was removed, as snapdragon is no longer used.
• options.sourcemap was removed, as snapdragon is no longer used, which provided sourcemap support.

[3.0.0] - 2017-04-11

Complete overhaul, with 36,000+ new unit tests validated against actual output generated by Bash and minimatch. More specifically, 35,000+ of the tests:

• micromatch results are directly compared to bash results
• in rare cases, when micromatch and bash disagree, micromatch's results are compared to minimatch's results
• micromatch is much more accurate than minimatch, so there were cases where I had to make assumptions. I'll try to document these.

This refactor introduces a parser and compiler that are supersets of more granular parsers and compilers from other sub-modules. Each of these sub-modules has a singular responsibility and focuses on a certain type of matching that aligns with a specific part of the Bash "expansion" API.

These sub-modules work like plugins to seamlessly create the micromatch parser/compiler, so that strings are parsed in one pass, an AST is created, then a new string is generated by the compiler.

... (truncated)

Commits

• 8bd704e 4.0.8
• a0e6841 run verb to generate README documentation
• 4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
• 03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
• 814f5f7 lint
• 67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
• 113f2e3 fix: CVE numbers in CHANGELOG
• d9dbd9a feat: updated CHANGELOG
• 2ab1315 fix: use actions/setup-node@v4
• 1406ea3 feat: rework test to work on macos with node 10,12 and 14
• Additional commits viewable in compare view

Updates jest from 24.9.0 to 25.1.0

Changelog

Sourced from jest's changelog.

25.1.0

Features

• [babel-plugin-jest-hoist] Show codeframe on static hoisting issues (#8865)
• [babel-plugin-jest-hoist] Add BigInt to ALLOWED_IDENTIFIERS (#8382)
• [babel-preset-jest] Add @babel/plugin-syntax-bigint (#8382)
• [expect] Add BigInt support to toBeGreaterThan, toBeGreaterThanOrEqual, toBeLessThan and toBeLessThanOrEqual (#8382)
• [expect, jest-matcher-utils] Display change counts in annotation lines (#9035)
• [expect, jest-snapshot] Support custom inline snapshot matchers (#9278)
• [jest-config] Throw the full error message and stack when a Jest preset is missing a dependency (#8924)
• [jest-config] [BREAKING] Set default display name color based on runner (#8689)
• [jest-config] Merge preset globals with project globals (#9027)
• [jest-config] Support .cjs config files (#9291)
• [jest-config] [BREAKING] Support .mjs config files (#9431)
• [jest-core] Support reporters as default exports (#9161)
• [jest-core] Support --findRelatedTests paths case insensitivity on Windows (#8961)
• [jest-diff] Add options for colors and symbols (#8841)
• [jest-diff] [BREAKING] Export as ECMAScript module (#8873)
• [jest-diff] Add includeChangeCounts and rename Indicator options (#8881)
• [jest-diff] Add changeColor and patchColor options (#8911)
• [jest-diff] Add trailingSpaceFormatter option and replace cyan with commonColor (#8927)
• [jest-diff] Add firstOrLastEmptyLineReplacement option and export 3 diffLines functions (#8955)
• [jest-environment] Add optional getVmContext next to runScript (#9252 & #9428)
• [jest-environment-jsdom] Add fakeTimersLolex (#8925)
• [jest-environment-node] Add fakeTimersLolex (#8925)
• [jest-environment-node] Add queueMicrotask (#9140)
• [jest-environment-node] Implement getVmContext (#9252 & #9428)
• [@jest/fake-timers] Add Lolex as implementation of fake timers (#8897)
• [jest-get-type] Add BigInt support. (#8382)
• [jest-matcher-utils] Add BigInt support to ensureNumbers ensureActualIsNumber, ensureExpectedIsNumber (#8382)
• [jest-matcher-utils] Ignore highlighting matched asymmetricMatcher in diffs (#9257)
• [jest-reporters] Export utils for path formatting (#9162)
• [jest-reporters] Provides global coverage thresholds as watermarks for istanbul (#9416)
• [jest-runner] Warn if a worker had to be force exited (#8206)
• [jest-runtime] [BREAKING] Do not export ScriptTransformer - it can be imported from @jest/transform instead (#9256)
• [jest-runtime] Use JestEnvironment.getVmContext and vm.compileFunction if available to avoid the module wrapper (#9252 & #9428)
• [jest-snapshot] Display change counts in annotation lines (#8982)
• [jest-snapshot] [BREAKING] Improve report when the matcher has properties (#9104)
• [jest-snapshot] Improve colors when snapshots are updatable (#9132)
• [jest-snapshot] Ignore indentation for most serialized objects (#9203)
• [jest-transform] Create createTranspilingRequire function for easy transpiling modules (#9194)
• [jest-transform] [BREAKING] Return transformed code as a string, do not wrap in vm.Script (#9253)
• [@jest/test-result] Create method to create empty TestResult (#8867)
• [jest-worker] [BREAKING] Return a promise from end(), resolving with the information whether workers exited gracefully (#8206)
• [jest-reporters] Transform file paths into hyperlinks (#8980)

Fixes

• [expect] Display expectedDiff more carefully in toBeCloseTo (#8389)

... (truncated)

Commits

• 5dcc480 Release 25.1.0
• b2c8a69 chore: remove Node 8 references and some dead code (#9284)
• 438118a chore: convert jest-cli and jest-validate to esm (#8874)
• 9d5ac83 chore: bump most dated deps (#8850)
• e52bec9 Get rid of Node 6 support (#8455)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by davidzilburg, a new releaser for jest since your current version.

Updates jest-environment-node from 24.9.0 to 25.5.0

Changelog

Sourced from jest-environment-node's changelog.

25.5.0

Features

• [@jest/globals] New package so Jest's globals can be explicitly imported (#9801)
• [jest-core] Show coverage of sources related to tests in changed files (#9769)
• [jest-runtime] Populate require.cache (#9841)

Fixes

• [*] Use graceful-fs directly in every package instead of relying on fs being monkey patched (#9443)
• [expect] Prints the Symbol name into the error message with a custom asymmetric matcher (#9888)
• [jest-circus, jest-jasmine2] Support older version of jest-runtime (#9903 & #9842)
• [@jest/environment] Make sure not to reference Jest types (#9875)
• [jest-message-util] Code frame printing should respect --noStackTrace flag (#9866)
• [jest-runtime] Support importing CJS from ESM using import statements (#9850)
• [jest-runtime] Support importing parallel dynamic imports (#9858)
• [jest-transform] Improve source map handling when instrumenting transformed code (#9811)

Chore & Maintenance

• [docs] Add an example for mocking non-default export class

Performance

• [jest-resolve] Update resolve to a version using native realpath, which is faster than the default JS implementation (#9872)
• [jest-resolve] Pass custom cached realpath function to resolve (#9873)
• [jest-runtime] Add teardown method to clear any caches when tests complete (#9906)
• [jest-runtime] Do not pass files required internally through transformation when loading them (#9900)
• [jest-runtime] Use Maps instead of object literals as cache holders (#9901)

25.4.0

• [expect] Support async functions in toThrow (#9817)
• [jest-console] Add code frame to console.error and console.warn (#9741)
• [jest-runtime, jest-jasmine2, jest-circus] Experimental, limited ECMAScript Modules support (#9772 & #9842)

Fixes

• [expect] Restore support for passing functions to toHaveLength matcher (#9796)
• [jest-changed-files] --only-changed should include staged files (#9799)
• [jest-circus] Throw on nested test definitions (#9828)
• [jest-each] each will throw an error when called with too many arguments (#9818)
• [jest-runner] Don't print warning to stdout when using --json (#9843)

Chore & Maintenance

• [*] Do not generate TypeScript declaration source maps (#9822)
• [*] Transpile code for Node 8.3, not 8.0 (#9827)

... (truncated)

Commits

• ddd73d1 v25.5.0
• 5b129d7 v25.4.0
• 45a4936 v25.3.0
• 43207b7 v25.2.6
• 964ec0e v25.2.5
• 3249385 v25.2.4
• 6f8bf80 v25.2.3
• 96aaf89 v25.2.2
• d1c81fd fix: remove getVmContext from node env on older versions of n… (#9708)
• a679390 v25.2.1
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by simenb, a new releaser for jest-environment-node since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.