Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Jest Release | Dependency updates

See original GitHub issue

🐛 Bug Report

I am getting an error across a lot of my repositories about an outdated handelbars vulnerability. To fix this dependabot is telling me to update to 4.3.0

However, I don’t use handlebars. istanbul-reports is using handlebars. As of this PR handlebars is no longer included in istanbul-reports. Jest’s outdated dependency tree around this was raised and addressed in this issue.

Unfortunately, this was commited on November 21st. The latest Jest available is for 24.9.0 which was released in August. Is there anything I have missed or can assist in to get this into master ASAP for both myself and others

Thanks Jest Team

To Reproduce

Install Jest 2.4.9 and push to a github repo

Expected behavior

No dependabot issues were expected.

Issue Analytics

State:
Created 4 years ago
Reactions:33
Comments:21

Top GitHub Comments

13reactions

SimenBcommented, Jan 6, 2020

I heard back on Friday, and the current plan is this week 🤞

12reactions

SimenBcommented, Jan 14, 2020

Tentative release day is Thursday this week

Top Results From Across the Web

jest - npm

Latest version: 29.3.1, last published: 2 months ago. Start using jest in your project by running `npm i jest`.

Jest 27: New Defaults for Jest, 2021 edition

We will explain those changes of defaults and other notable breaking changes in this post, but first, let's get into some exciting new...

Upgrade jest and related dependencies (!25597) - GitLab.org

This upgrades jest to version ^24 . Also updates all related dependencies, which removes a lot of old stuff as jest now depends...

How to update Jest testing framework in create-react-app?

Create React App updates its dependencies once they are stable enough. This usually means waiting a week or two after the new release....

yarn upgrade

This command updates dependencies to their latest version based on the version range specified in the package.json file. The yarn.lock file will be ......