[Snyk] Upgrade ava from 0.23.0 to 2.4.0 #1

snyk-bot · 2019-10-27T01:03:03Z

Snyk has created this PR to upgrade ava from 0.23.0 to 2.4.0.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 29 versions ahead of your current version.
The recommended version was released a month ago, on 2019-09-16.

The recommended version fixes:

Severity	Title	Issue ID
	Regular Expression Denial of Service (ReDoS)	npm:braces:20180219

Release notes

Package name: ava
- 2.4.0 - 2019-09-16
 Experimental t.try() assertions
 
 Thanks to the amazing work and patience of @qlonik we're shipping a new assertion! t.try() lets you perform assertions and decide whether to commit or discard their outcome. All kinds of interesting things can be built on top of this, from fuzzy testers to new test interfaces and more.
 
 We're excited to get this out there, but it's not quite done yet. For now you have to opt in to this new feature. Being opt-in, we may make changes (breaking ones even!) until we feel this is stable.
 
 To opt in, configure AVA with the following:
 
 package.json:
```
{
 "ava": {
 "nonSemVerExperiments": {
 "tryAssertion": true
 }
 }
}
```
 ava.config.js:
```
export default {
	nonSemVerExperiments: {
		tryAssertion: true
	}
};
```
 We'd love to hear your feedback. Please join us in this issue: #2250
 
 Also, if you're looking to help out with the remaining issues so that we can ship this without the opt-in, have a look at this project: https://github.com/orgs/avajs/projects/1
 
 Thanks again @qlonik!
 
 Other changes
 - We've added the common pitfall of sharing variables across asynchronous tests 49b202f
 - We've updated the endpoint testing recipe to focus on the concept, not specific libraries 67e4dea
 All changes
 
 v2.3.0...v2.4.0
 
 Thanks
 
 Thank you @jeremenichelli, @jamesgeorge007, @dongjae93, @qlonik and @tryzniak. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great article on getting started contributing and a comprehensive contributing guide.
- 2.3.0 - 2019-08-18
 Changes
 - We've fixed some bugs to improve watch mode. ffa62ce 9e8d28f
 - AVA now prints an error when it receives non-existent test files on the command line. f01d05f
 - When using the TAP reporter, remaining tests are now included in failed test count. Failed hooks are no longer treated as test failures, and logs are printed. 8628976
 - Internal errors that may occur for some edge cases are now printed. b27cb8d
 - TTY in the worker processes should follow the new APIs in Node.js 12.7.0 (when used with those Node.js versions). 7dcb473
 - AVA now handles stage-4 syntax like dynamic import, and stage-3 syntax like BigInt, numeric separators and class properties that are supported by V8. 9baca8c
 - AVA now supports dynamic import through our stage-4 preset.
 - AVA now uses import-local@^3.0.2 which fixes issues with Lerna projects.
 - For our TypeScript users, we've changed the default type of t.context to unknown, in line with TypeScript's changes in their 3.5 release. 2fc7d56
 All changes
 
 v2.2.0...v2.3.0
 
 Thanks
 
 Thank you @MarchWorks, @yovasx2 and @bobthekingofegypt. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great article on getting started contributing and a comprehensive contributing guide.
- 2.2.0 - 2019-07-08
 Enhancements
 
 You can now specify an alternative config file, using the --config CLI argument. This is useful if you want to run unit tests separately from integration tests, since you can have a config file specific to your integration tests which specifies different glob patterns. 2dae2bf
 
 Bug fixes
 
 We're now faking the new hasColors() method for better compatibility with Node.js 12. d399797
 
 Node.js 11
 
 We've removed Node.js 11 from our test matrix. You should upgrade to Node.js 12. 90acbb9
 
 All changes
 
 v2.1.0...v2.2.0
 
 Thanks
 
 Thank you @langri-sha, @keyspress, @cdaringe and @okyantoro. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great article on getting started contributing and a comprehensive contributing guide.
- 2.1.0 - 2019-06-10
 Bug fixes
 - AVA's TypeScript definition now explicitly references the Node.js definition bb44da7
 Enhancements
 - Did you know you can provide human-readable timeout values? We've now documented this. 486acaf
 - We're now including all stack trace lines in the TAP output (though we still pre-process them). ac212ba
 - Logs from successful hooks are now included in the TAP output. 007c7af
 - Our ESLint plugin helper has been updated to allow extensions and glob patterns to be overridden b3c9ea7
 All changes
 
 v2.0.0...v2.1.0
 
 Thanks
 
 Thank you @anishkny, @yovasx2 and @mihai-dinu. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great article on getting started contributing and a comprehensive contributing guide.
- 2.0.0 - 2019-06-01
 Breaking changes
 
 AVA now requires at least Node.js 8.9.4
 
 Per the Node.js release schedule, the 6.x releases reach end of live on April 30th. Consequently we've removed support in AVA. We are now testing with Node.js 12 though. 3a4afc6
 
 Test file and helper selection
 
 We've been working on simplifying how test files and helpers are selected. First off, the files option now only accepts glob patterns. If you configured it with directories before, please add /**/* to get the previous behavior.
 
 The files and sources options must now be arrays containing at least one pattern. It's no longer possible to override a default exclusion pattern, but we're looking at making these configurable separately.
 
 AVA used to treat all files inside a helpers directory as test helpers. Finding these files could be really slow, however, and it also meant you couldn't have tests inside a helpers directory. Instead you can now specify glob paterns to find these helpers:
```
{
 "ava": {
 "helpers": [
 "**/helpers/**/*"
 ]
 }
}
```
 Test files starting with an underscore are still recognized as helpers.
 
 Files inside fixtures directories are no longer ignored, and will now be treated as test files. The watcher now also watches ava.config.js files.
 
 AVA now also selects files ending with .spec.js when looking for tests, as well as looking in tests directories. 08e99e5 b1e54b1
 
 The CLI now only takes file paths, not glob patterns.
 
 We'd like some help updating our ESLint plugin as well.
 
 Snapshots in CI
 
 When you run tests locally and add a new snapshot, AVA automatically updates the .snap file. However if you forget to commit this file and then run your CI tests, they won't fail because AVA quietly updates the .snap file, just like it does locally.
 
 With this release, AVA will fail the t.snapshot() assertion if it is run in CI and no snapshot could be found. 0804107
 
 Assertion messages must be strings
 
 AVA now enforces assertion messages to be strings. The message is only used when the assertion fails, and non-string values may cause AVA to crash. You may see test failures if you were accidentally passing a non-string message. 49120aa
 
 Flow type definitions
 
 We've decided to remove the Flow type definitions from AVA itself. We don't have anybody to maintain them and consequently they've become a blocker when adding features to AVA. c633cf0
 
 We've set up a new repository from which we'll publish the definitions, but we need your help setting it up. If you use AVA and Flow, please join us in avajs/flow-typed#1.
 
 Observable typing
 
 Test implementations may return observables. We've updated our TypeScript definition to require these to have a Symbol.observable function. c2d8218
 
 New features
 
 Configurable printing depth
 
 AVA now uses the util.inspect.defaultOptions.depth option when printing objects, so you can configure the depth. 98034fb
 
 Specify environment variables in your AVA config
 
 You can now specify environment variables in your config, using the environmentVariables object. a53ea15
 
 Other changes
 - We've added UntitledMacro and UntitledCbMacro types, for macro functions that will never have a .title function. Though really this just helped simplify the type definition. Thanks @qlonik! ebf4807
 - The dependency tracking in watch mode now respects custom require hooks you install in the worker processes. Thanks @lo1tuma! cb4c809
 - The TypeScript definition once again allows test.skip(macro) ba5cd80
 - AVA now exposes some methods to our ESLint plugin, allowing our plugin to support the new test & helper file selection. 51433be
 All changes
 
 v1.4.1...v2.0.0
 
 Thanks
 
 Thank you @StoneCypher, @LukasHechenberger, @lo1tuma, @htor, @alexisfontaine and @grnch. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great article on getting started contributing and a comprehensive contributing guide.
- 2.0.0-rc.1 - 2019-05-28
 ⚠️ If you're looking to upgrade from 1.4.1, make sure to read the Beta 1 and Beta 2 release notes.
 
 Support for the new test & helper file selection in our ESLint plugin
 
 AVA now exposes some methods to our ESLint plugin, allowing our plugin to support the new test & helper file selection. 51433be
 
 Configurable object printing depth
 
 AVA now uses the util.inspect.defaultOptions.depth option when printing objects. 98034fb
 
 All changes
 
 v2.0.0-beta.2...v2.0.0-rc.1
 
 Thanks
 
 Thank you @grnch. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great articleon getting started contributing and a comprehensive contributing guide.
- 2.0.0-beta.2 - 2019-05-19
 ⚠️ If you're looking to upgrade from 1.4.1, make sure to read the Beta 1 release notes.
 
 Breaking changes
 - Test implementations may return observables. We've updated our TypeScript definition to require these to have a Symbol.observable function. c2d8218
 Test file and helper selection
 
 AVA now also selects files ending with .spec.js when looking for tests. 08e99e5
 
 You can now specify custom globs to select helper files:
```
{
 "ava": {
 "helpers": [
 "**/helpers/**/*"
 ]
 }
}
```
 Bugfixes
 - The dependency tracking in watch mode now respects custom require hooks you install in the worker processes. Thanks @lo1tuma! cb4c809
 - The TypeScript definition once again allows test.skip(macro) ba5cd80
 All changes
 
 v2.0.0-beta.1...v2.0.0-beta.2
 
 Thanks
 
 Thank you @StoneCypher, @LukasHechenberger, @lo1tuma, @htor and @alexisfontaine. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great articleon getting started contributing and a comprehensive contributing guide.
- 2.0.0-beta.1 - 2019-04-29
 Breaking changes
 
 AVA now requires at least Node.js 8.9.4
 
 Per the Node.js release schedule, the 6.x releases reach end of live on April 30th. Consequently we've removed support in AVA. We are now testing with Node.js 12 though. 3a4afc6
 
 Test file and helper selection
 
 We've been working on simplifying how test files and helpers are selected. First off, the files option now only accepts glob patterns. If you configured it with directories before, please add /**/* to get the previous behavior.
 
 The files and sources options must now be arrays containing at least one pattern. It's no longer possible to override a default exclusion pattern, but we're looking at making these configurable separately.
 
 AVA used to treat all files inside a helpers directory as test helpers. Finding these files could be really slow, however, and it also meant you couldn't have tests inside a helpers directory. Instead we're going to let you specify glob patterns to find these helpers. That work hasn't landed yet. For now, if you have such helpers we'd advise to not upgrade to this release.
 
 Test files starting with an underscore are still recognized as helpers.
 
 Files inside fixtures directories are no longer ignored, and will now be treated as test files. The watcher now also watches ava.config.js files.
 
 The CLI now only takes file paths, not glob patterns.
 
 We'd like some help updating our ESLint plugin as well.
 
 Snapshots in CI
 
 When you run tests locally and add a new snapshot, AVA automatically updates the .snap file. However if you forget to commit this file and then run your CI tests, they won't fail because AVA quietly updates the .snap file, just like it does locally.
 
 With this release, AVA will fail the t.snapshot() assertion if it is run in CI and no snapshot could be found. 0804107
 
 Assertion messages must be strings
 
 AVA now enforces assertion messages to be strings. The message is only used when the assertion fails, and non-string values may cause AVA to crash. You may see test failures if you were accidentally passing a non-string message. 49120aa
 
 Flow type definitions
 
 We've decided to remove the Flow type definitions from AVA itself. We don't have anybody to maintain them and consequently they've become a blocker when adding features to AVA. c633cf0
 
 We've set up a new repository from which we'll publish the definitions, but we need your help setting it up. If you use AVA and Flow, please join us in avajs/flow-typed#1.
 
 Other changes
 - We've added UntitledMacro and UntitledCbMacro types, for macro functions that will never have a .title function. Though really this just helped simplify the type definition. Thanks @qlonik! ebf4807
 All changes
 
 v1.4.1...v2.0.0-beta.1
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great article on getting started contributing and a comprehensive contributing guide.
- 1.4.1 - 2019-03-27
 Focusing power-assert
 
 AVA comes with power-assert built-in, giving you more descriptive assertion messages. However it's been confusing to understand which assertions come with power-assert. To address this we've added the new t.assert() assertion. It's now the only assertion that is power-assert enabled. The assertion passes if called with a truthy value. Consider this example:
```
test('enhanced assertions', t => {
	const a = /foo/;
	const b = 'bar';
	const c = 'baz';
	t.assert(a.test(b) || b === c);
});
```
 AVA will output:
```
6: const c = 'baz';
7: t.assert(a.test(b) || b === c);
8: });
Value is not truthy:
false
a.test(b) || b === c

=> false
b === c

=> false
c

=> 'baz'
b

=> 'bar'
a.test(b)

=> false
b

=> 'bar'
a

=> /foo/
```
 Our ESLint plugin has been updated to support this new assertion. Many thanks to @eemed for implementing this! 9406470
 
 Watch mode
 
 Watch mode now prints the available commands. Thanks @KompKK! cd256ac
 
 Bug fixes
 - Filtered tests (when using --match, .skip() or .only()) are no longer included in the list of pending tests when timeouts occur or when you interrupt a test run. Thanks @vancouverwill! 23e302a
 - We're now shimming all TTY methods in the worker processes, thanks to @okyantoro. c1f6fdf
 Documentation updates
 - We've added a note to say that, by default, AVA does not have a default test timeout. Thanks @amokmen! 99a10a1
 All changes
 
 v1.3.1...v1.4.1
 
 Thanks
 
 Thank you @eemed, @KompKK, @vancouverwill, @okyantoro and @amokmen. We couldn't have done this without you!
 
 Get involved
 
 We welcome new contributors. AVA is a friendly place to get started in open source. We have a great article on getting started contributing and a comprehensive contributing guide.
- 1.4.0 - 2019-03-24
 1.4.0
- 1.3.1 - 2019-03-05
```
 </li>
 <li>
 1.3.0 - <a href="">2019-03-05</a>
 
 </li>
 <li>
 1.2.1 - <a href="">2019-02-05</a>
 
 </li>
 <li>
 1.2.0 - <a href="">2019-01-27</a>
 
 </li>
 <li>
 1.1.0 - <a href="">2019-01-13</a>
 
 </li>
 <li>
 1.0.1 - <a href="">2018-12-15</a>
 
 </li>
 <li>
 1.0.0-rc.2 - <a href="">2018-11-11</a>
 
 </li>
 <li>
 1.0.0-rc.1 - <a href="">2018-10-14</a>
 
 </li>
 <li>
 1.0.0-beta.8 - <a href="">2018-08-28</a>
 
 </li>
 <li>
 1.0.0-beta.7 - <a href="">2018-08-12</a>
 
 </li>
 <li>
 1.0.0-beta.6 - <a href="">2018-06-14</a>
 
 </li>
 <li>
 1.0.0-beta.5.1 - <a href="">2018-06-01</a>
 
 </li>
 <li>
 1.0.0-beta.5 - <a href="">2018-05-31</a>
 
 </li>
 <li>
 1.0.0-beta.4 - <a href="">2018-04-14</a>
 
 </li>
 <li>
 1.0.0-beta.3 - <a href="">2018-02-15</a>
 
 </li>
 <li>
 1.0.0-beta.2 - <a href="">2018-02-14</a>
 
 </li>
 <li>
 1.0.0-beta.1 - <a href="">2018-01-31</a>
 
 </li>
 <li>
 0.25.0 - <a href="">2018-01-26</a>
 
 </li>
 <li>
 0.24.0 - <a href="">2017-11-27</a>
 
 </li>
 <li>
 0.23.0 - <a href="">2017-10-24</a>
 
 </li>
</ul>
```

------------

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade ava from 0.23.0 to 2.4.0. See this package in NPM: https://www.npmjs.com/package/ava See this project in Snyk: https://app.snyk.io/org/ajesse11x/project/8d58fb14-6b19-49f6-aef3-a4e9d55d180d?utm_source=github&utm_medium=upgrade-pr

[Snyk] Upgrade ava from 0.23.0 to 2.4.0 #1

Are you sure you want to change the base?

[Snyk] Upgrade ava from 0.23.0 to 2.4.0 #1

Conversation

snyk-bot commented Oct 27, 2019

Experimental t.try() assertions

Other changes

All changes

Thanks

Get involved

Changes

All changes

Thanks

Get involved

Enhancements

Bug fixes

Node.js 11

All changes

Thanks

Get involved

Bug fixes

Enhancements

All changes

Thanks

Get involved

Breaking changes

AVA now requires at least Node.js 8.9.4

Test file and helper selection

Snapshots in CI

Assertion messages must be strings

Flow type definitions

Observable typing

New features

Configurable printing depth

Specify environment variables in your AVA config

Other changes

All changes

Thanks

Get involved

Support for the new test & helper file selection in our ESLint plugin

Configurable object printing depth

All changes

Thanks

Get involved

Breaking changes

Test file and helper selection

Bugfixes

All changes

Thanks

Get involved

Breaking changes

AVA now requires at least Node.js 8.9.4

Test file and helper selection

Snapshots in CI

Assertion messages must be strings

Flow type definitions

Other changes

All changes

Get involved

Focusing power-assert

Watch mode

Bug fixes

Documentation updates

All changes

Thanks

Get involved

Experimental `t.try()` assertions

Focusing `power-assert`