Skip to content

[Snyk] Security upgrade mocha from 6.2.3 to 10.6.0#131

Open
jhamot wants to merge 1 commit intomasterfrom
snyk-fix-c8901550d429faa742a0ad755f847470
Open

[Snyk] Security upgrade mocha from 6.2.3 to 10.6.0#131
jhamot wants to merge 1 commit intomasterfrom
snyk-fix-c8901550d429faa742a0ad755f847470

Conversation

@jhamot
Copy link
Copy Markdown
Owner

@jhamot jhamot commented Jan 26, 2026

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
⚠️ Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-DIFF-14917201
  62  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DIFF-14917201
@jhamot
Copy link
Copy Markdown
Owner Author

jhamot commented Jan 26, 2026

Merge Risk: High

This major version upgrade from v6 to v10 drops support for old environments and modernizes the framework, introducing multiple breaking changes.

Highlights:

  • Node.js & Browser Support: Support for Node.js v12 and Internet Explorer 11 has been dropped.
  • Configuration & Execution: The --compilers and --opts flags have been removed. Mocha is now ESM-first, loading test files with import() instead of require(). The main executable was renamed from bin/mocha to bin/mocha.js.

Source: Mocha documentation and changelogs
Recommendation: Verify your Node.js version is v14 or newer. Update test scripts to remove deprecated flags and ensure compatibility with ESM file loading. If tests hang, you may need to add the --exit flag as a temporary fix.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants