simpleclub / firebase-rules-helper / 20032966639

89%

push

github

chore: upgrade dependencies and fix security vulnerabilities (#80)

* chore(firebase-rules-coverage): upgrade minor/patch dependencies

- source-map: ^0.7.4 -> ^0.7.6
- ts-jest: ^29.2.5 -> ^29.4.6
- @types/node: ^22.10.2 -> ^22.19.1
- typescript: ~5.7.2 -> ~5.7.3

* chore(firebase-rules-coverage): upgrade to Jest 30

- jest: ^29.7.0 -> ^30.2.0
- @jest/globals: ^29.7.0 -> ^30.2.0
- @types/jest: ^29.5.14 -> ^30.0.0

BREAKING CHANGES:
- Updated test assertions from toBeCalledTimes/toBeCalledWith to
  toHaveBeenCalledTimes/toHaveBeenCalledWith (Jest 30 deprecation)

* chore(firebase-rules-coverage): upgrade meow to v14

- meow: ~13.2.0 -> ^14.0.0

* chore(firebase-rules-coverage): refresh yarn.lock with latest transitive deps

Fixes js-yaml vulnerabilities:
- js-yaml@4.1.0 -> 4.1.1 (CVE fix for >= 4.0.0, < 4.1.1)
- js-yaml@3.14.1 -> 3.14.2 (CVE fix for < 3.14.2)

* chore(firebase-rules-coverage): add resolution for tmp vulnerability

Add resolution to force tmp@^0.2.5 to fix CVE in tmp <= 0.2.3
(transitive dependency via gts#inquirer#external-editor)

* chore(firebase-rules-generator): upgrade minor/patch dependencies

- source-map: ^0.7.4 -> ^0.7.6
- ts-jest: ^29.2.5 -> ^29.4.6
- @types/node: ^22.10.2 -> ^22.19.1
- typescript: ~5.7.2 -> ~5.7.3

* chore(firebase-rules-generator): upgrade to Jest 30

- jest: ^29.7.0 -> ^30.2.0
- @jest/globals: ^29.7.0 -> ^30.2.0
- @types/jest: ^29.5.14 -> ^30.0.0

BREAKING CHANGES:
- Updated test assertions from toBeCalledTimes/toBeCalledWith to
  toHaveBeenCalledTimes/toHaveBeenCalledWith (Jest 30 deprecation)
- Added 'node' to tsconfig types array for Jest 30 compatibility

* chore(firebase-rules-generator): upgrade meow to v14

- meow: ~13.2.0 -> ^14.0.0

* chore(firebase-rules-generator): refresh yarn.lock with latest transitive deps

Fixes js-yaml vulnerabilities:
- js-yaml@4.1.0 -> 4.1.1 (CVE fix for >= 4.0.0, < 4.1.1)
- js-yaml@3.14.1 -> 3.14.2 (CVE fix for < 3.14.2)

* chore(firebase-rules-generator): add resolutio... (continued)

32 of 42 branches covered (76.19%)

Branch coverage included in aggregate %.

130 of 140 relevant lines covered (92.86%)

92.34 hits per line