chore(deps): update jest monorepo

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/jest (source)	29.5.1 -> 29.5.14
jest (source)	29.5.0 -> 29.7.0

---

Release Notes

jestjs/jest (jest)

v29.7.0

Compare Source

Features

• [create-jest] Add npm init / yarn create initialiser for Jest projects (#​14465)
• [jest-validate] Allow deprecation warnings for unknown options (#​14499)

Fixes

• [jest-resolver] Replace unmatched capture groups in moduleNameMapper with empty string instead of undefined (#​14507)
• [jest-snapshot] Allow for strings as well as template literals in inline snapshots (#​14465)
• [@jest/test-sequencer] Calculate test runtime if perStats.duration is missing (#​14473)

Performance

• [@jest/create-cache-key-function] Cache access of NODE_ENV and BABEL_ENV (#​14455)

Chore & Maintenance

• [jest-cli] Move internal config initialisation logic to the create-jest package (#​14465)

v29.6.4

Compare Source

Fixes

• [jest-core] Fix typo in scheduleAndRun performance marker (#​14434)
• [jest-environment-node] Make sure atob and btoa are writeable in Node 20 (#​14446)
• [jest-worker] Additional error wrapper for parentPort.postMessage to fix unhandled DataCloneError. (#​14437)

New Contributors

• @​stanleyume made their first contribution in https://github.com/jestjs/jest/pull/14424
• @​dj-stormtrooper made their first contribution in https://github.com/jestjs/jest/pull/14437
• @​thw0rted made their first contribution in https://github.com/jestjs/jest/pull/14444

Full Changelog: jestjs/jest@v29.6.3...v29.6.4

v29.6.3

Compare Source

Fixes

• [expect, @​jest/expect-utils] ObjectContaining support sumbol as key (#​14414)
• [expect] Remove @types/node from dependencies (#​14385)
• [jest-core] Use workers in watch mode by default to avoid crashes (#​14059 & #​14085).
• [jest-reporters] Update istanbul-lib-instrument dependency to v6. (#​14401)
• [jest-mock] Revert #​13692 as it was a breaking change (#​14429)
• [jest-mock] Revert #​13866 as it was a breaking change (#​14429)
• [jest-mock] Revert #​13867 as it was a breaking change (#​14429)
• [@jest/reporters] Marks Reporter's hooks as optional (#​14433)
• [jest-runtime] Fix dynamic ESM import module bug when loaded module through jest.isolateModulesAsync (#​14397)

Chore & Maintenance

• [jest-changed-files, jest-circus, jest-console, @​jest/core, @​jest/runtime, @​jest/transform] Use invariant and notEmpty from jest-util rather than own internal (#​14366)

v29.6.2

Compare Source

Fixes

• [jest-circus] Fix snapshot matchers in concurrent tests when nr of tests exceeds maxConcurrency (#​14335)
• [@jest/core] When running global setup and teardown, do not try to change the message property of the thrown error object when the message property is unwritable (#​14113)
• [jest-snapshot] Move @types/prettier from dependencies to devDependencies (#​14328)
• [jest-snapshot] Throw an explicit error if Prettier v3 is used (#​14367)
• [jest-reporters] Add "skipped" and "todo" symbols to Github Actions Reporter (#​14309)

Chore & Maintenance

• [@jest/core] Use pluralize from jest-util rather than own internal (#​14322)

New Contributors

• @​Kloen made their first contribution in https://github.com/jestjs/jest/pull/14328
• @​eryue0220 made their first contribution in https://github.com/jestjs/jest/pull/14322
• @​david-szabo97 made their first contribution in https://github.com/jestjs/jest/pull/14113

Full Changelog: jestjs/jest@v29.6.1...v29.6.2

v29.6.1

Compare Source

Fixes

• [jest-circus] Revert #​14110 as it was a breaking change (#​14304)

Full Changelog: jestjs/jest@v29.6.0...v29.6.1

v29.6.0

Compare Source

Features

• [jest-circus, jest-snapshot] Add support for snapshot matchers in concurrent tests (#​14139)
• [jest-cli] Include type definitions to generated config files (#​14078)
• [jest-snapshot] Support arrays as property matchers (#​14025)
• [jest-core, jest-circus, jest-reporter, jest-runner] Added support for reporting about start individual test cases using jest-circus (#​14174)

Fixes

• [jest-circus] Prevent false test failures caused by promise rejections handled asynchronously (#​14110)
• [jest-config] Handle frozen config object (#​14054)
• [jest-config] Allow coverageDirectory and collectCoverageFrom in project config (#​14180)
• [jest-core] Always use workers in watch mode to avoid crashes (#​14059).
• [jest-environment-jsdom, jest-environment-node] Fix assignment of customExportConditions via testEnvironmentOptions when custom env subclass defines a default value (#​13989)
• [jest-matcher-utils] Fix copying value of inherited getters (#​14007)
• [jest-mock] Tweak typings to allow jest.replaceProperty() replace methods (#​14008)
• [jest-mock] Improve user input validation and error messages of spyOn and replaceProperty methods (#​14087)
• [jest-runtime] Bind jest.isolateModulesAsync to this (#​14083)
• [jest-runtime] Forward wrapperLength to the Script constructor as columnOffset for accurate debugging (#​14148)
• [jest-runtime] Guard _isMockFunction access with in (#​14188)
• [jest-snapshot] Fix a potential bug when not using prettier and improve performance (#​14036)
• [@jest/transform] Do not instrument .json modules (#​14048)
• [jest-worker] Restart a shut down worker before sending it a task (#​14015)

Chore & Maintenance

• [*] Update semver dependency to get vulnerability fix (#​14262)
• [docs] Updated documentation for the --runTestsByPath CLI command (#​14004)
• [docs] Updated documentation regarding the synchronous fallback when asynchronous code transforms are unavailable (#​14056)
• [docs] Update jest statistics of use and downloads in website Index.

New Contributors

• @​huntie made their first contribution in #​13989
• @​liammulh made their first contribution in #​14001
• @​BenceSzalai made their first contribution in #​14007
• @​Mike-Dax made their first contribution in #​14056
• @​bakasmarius made their first contribution in #​14025
• @​PeteTheHeat made their first contribution in #​14015
• @​tjenkinson made their first contribution in #​14083
• @​soyjuanmacias made their first contribution in #​14101
• @​bharathkalyans made their first contribution in #​14154
• @​itzjacki made their first contribution in #​14165
• @​DmitryMakhnev made their first contribution in #​14174
• @​BobdenOs made their first contribution in #​14148
• @​william-lai-927 made their first contribution in #​14179
• @​bakamitai456 made their first contribution in #​14045
• @​rbuckton made their first contribution in #​14188
• @​barbados-clemens made their first contribution in #​14180
• @​rburdet made their first contribution in #​14197
• @​cw1997 made their first contribution in #​14184
• @​renovate made their first contribution in #​14209
• @​stekycz made their first contribution in #​14110
• @​ziyad-elabid-nw made their first contribution in #​14262

Full Changelog: jestjs/jest@v29.5.0...v29.6.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	form-data@​4.0.0
	@​babel/​traverse@​7.21.5
	@​nrwl/​nx-darwin-arm64@​15.9.4
	@​nrwl/​nx-darwin-x64@​15.9.4
	@​nrwl/​nx-linux-arm-gnueabihf@​15.9.4
	@​nrwl/​nx-linux-arm64-gnu@​15.9.4
	@​nrwl/​nx-linux-arm64-musl@​15.9.4
	@​nrwl/​nx-linux-x64-gnu@​15.9.4
	@​nrwl/​nx-linux-x64-musl@​15.9.4
	@​nrwl/​nx-win32-arm64-msvc@​15.9.4
	@​nrwl/​nx-win32-x64-msvc@​15.9.4
	fs-constants@​1.0.0
	@​types/​parse-json@​4.0.0
	jest-regex-util@​29.4.3 ⏵ 29.6.3
	@​babel/​plugin-syntax-async-generators@​7.8.4
	@​babel/​plugin-syntax-bigint@​7.8.3
	@​babel/​plugin-syntax-import-meta@​7.10.4
	@​babel/​plugin-syntax-json-strings@​7.8.3
	@​babel/​plugin-syntax-logical-assignment-operators@​7.10.4
	@​babel/​plugin-syntax-nullish-coalescing-operator@​7.8.3
	@​babel/​plugin-syntax-numeric-separator@​7.10.4
	@​babel/​plugin-syntax-object-rest-spread@​7.8.3
	@​babel/​plugin-syntax-optional-catch-binding@​7.8.3
	@​babel/​plugin-syntax-optional-chaining@​7.8.3
	@​jest/​globals@​29.7.0
	@​babel/​plugin-syntax-class-properties@​7.12.13
	@​babel/​plugin-syntax-top-level-await@​7.14.5
	@​jest/​source-map@​29.6.3
	@​babel/​plugin-syntax-jsx@​7.21.4
	collect-v8-coverage@​1.0.1
	jest-resolve-dependencies@​29.7.0
	jest-environment-node@​29.7.0
	@​jest/​expect@​29.7.0
See 130 more rows in the dashboard

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		@babel/[email protected] has a Critical CVE. CVE: GHSA-67hx-6x53-jw92 Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code (CRITICAL) Affected versions: < 7.23.2; >= 8.0.0-alpha.0 < 8.0.0-alpha.4 Patched version: 7.23.2 From: yarn.lock → npm/@babel/[email protected] ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected]. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@babel/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		[email protected] has a Critical CVE. CVE: GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary (CRITICAL) Affected versions: < 2.5.4; >= 3.0.0 < 3.0.4; >= 4.0.0 < 4.0.4 Patched version: 4.0.4 From: yarn.lock → npm/[email protected] ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected]. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report