[Snyk] Security upgrade mocha-junit-reporter from 2.0.0 to 2.1.1

[jhamot]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mocha-junit-reporter

The new version differs by 25 commits.

• c8b0b35 2.1.1
• 2fba24b Update dependencies (The currently highlighted tab shows more tab atom/atom#177)
• 67a9764 2.1.0
• 4c2bc93 Fix bug when truncating testcase.attr.time ([Snyk] Security upgrade babel-eslint from 10.0.1 to 10.1.0 #172)
• 5c240ae Bump ansi-regex from 3.0.0 to 3.0.1 ([Snyk] Upgrade express from 4.16.3 to 4.22.1 #175)
• 5169b0f Bump minimist from 1.2.5 to 1.2.6 ([Snyk] Security upgrade mocha from 6.2.3 to 8.1.0 #166)
• e77a5d8 feature | allow to add jenkinsClassnamePrefix ([Snyk] Security upgrade express from 4.16.3 to 4.22.0 #138)
• 3b65764 Merge pull request [Snyk] Security upgrade babel-eslint from 10.0.1 to 10.1.0 #159 from gabegorelick/fix-build
• 07888b3 MINOR: update dependencies, remove travis file
• 0d42905 Fix test failures when running on older versions of mocha
• e062836 Test against all supported versions of mocha
• fc3a735 Ensure that test time attribute is capped at 3 digits after the decimal
• e406663 Add diff printing support
• 8e0b9e4 Merge branch 'master' of https://github.com/michaelleeallen/mocha-junit-reporter
• 4a7cca4 Bump glob-parent from 5.1.1 to 5.1.2
• 2a321e3 Merge pull request [Snyk] Security upgrade glob from 7.0.3 to 12.0.0 #152 from michaelleeallen/dependabot/npm_and_yarn/glob-parent-5.1.2
• 5403f63 Merge pull request [Snyk] Fix for 8 vulnerabilities #155 from pkuczynski/upgrade-strip-ansi
• 2222692 Upgrade strip-ansi@6.0.1
• 1c3eb62 Bump glob-parent from 5.1.1 to 5.1.2
• 88388ee Merge pull request [Snyk] Security upgrade babel-eslint from 10.0.1 to 10.1.0 #104 from michaelleeallen/add-actions
• 2cd514a Merge pull request [Snyk] Fix for 8 vulnerabilities #133 from michaelleeallen/dependabot/npm_and_yarn/lodash-4.17.19
• 18ff0f4 Merge pull request [Snyk] Fix for 7 vulnerabilities #115 from gabegorelick/setup-teardown-time
• a3ec7b5 Bump lodash from 4.17.15 to 4.17.19
• d2770c2 Testsuite time should include setup and teardown

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[jhamot]

✅ This PR has been automatically closed

The security issues addressed by this pull request are no longer present in the latest project scan. All vulnerabilities this PR was created to fix have been resolved through other means (e.g., dependency updates, direct fixes, or changes in vulnerability data).

Resolved Issues

• SNYK-JS-DEBUG-3227433

What should I do?

No action is required. If you believe this PR was closed in error, you can reopen it and contact Snyk support.

---

This action was performed automatically by Snyk.