tenfold / sinon-mocha / 71

86%

master: 86%

Build Type

Pull #10

drone

Committed by dependabot[bot]

Commit Message

Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 5.0.0 to 5.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/chalk/ansi-regex/releases">ansi-regex's releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<h3>Fixes (backport of <code>6.0.1</code> to v5)</h3>
<p>This is a backport of the <strong>minor</strong> ReDos vulnerability in <code>ansi-regex@&lt;6.0.1</code>, as requested in <a href="https://redirect.github.com/chalk/ansi-regex/issues/38">#38</a>.</p>
<ul>
<li>Fix <a href="https://en.wikipedia.org/wiki/ReDoS">ReDoS</a> in certain cases (<a href="https://redirect.github.com/chalk/ansi-regex/issues/37">#37</a>)
You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.</li>
</ul>
<p><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807">CVE-2021-3807</a></p>
<p><a href="https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1">https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1</a></p>
<p>Thank you <a href="https://github.com/yetingli"><code>@​yetingli</code></a> for the patch and reproduction case!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/chalk/ansi-regex/commit/a9babce88"><code>a9babce</code></a> 5.0.1</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/4657833b3"><code>4657833</code></a> fix incorrect format</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/c3c0b3f27"><code>c3c0b3f</code></a> Fix potential ReDoS (<a href="https://redirect.github.com/chalk/ansi-regex/issues/37">#37</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/178363b3a"><code>178363b</code></a> Move to GitHub Actions (<a href="https://redirect.github.com/chalk/

Pull Request Pull Request #10: Bump ansi-regex from 5.0.0 to 5.0.1

Run Details

1 of 2 branches covered (50.0%)

Branch coverage included in aggregate %.

11 of 12 relevant lines covered (91.67%)

1.75 hits per line