🐞 Bug report
After the automatic upgrade of Jest to the latest version (29.2.1 at the time), we realized that our CI fails (Example). The temporary fix was to set Jest to known working version 27.0.6 (#1415). This resolved the issue. However, the use of an older version of Jest
allowed the use of vulnerable packages, as seen here and from the Dependabot from the package minimatch@3.0.4.
Steps To Reproduce
Run any hooks unit tests with a "newer" version of jest. It is not clear at which version exactly the issue starts to appear.
Expected behaviour
Tests should run successfully with newer Jest versions. Refactoring of tests is needed
Additional context
🐞 Bug report
After the automatic upgrade of Jest to the latest version (
29.2.1at the time), we realized that our CI fails (Example). The temporary fix was to set Jest to known working version27.0.6(#1415). This resolved the issue. However, the use of an older version of Jestallowed the use of vulnerable packages, as seen here and from the Dependabot from the package
minimatch@3.0.4.Steps To Reproduce
Run any hooks unit tests with a "newer" version of jest. It is not clear at which version exactly the issue starts to appear.
Expected behaviour
Tests should run successfully with newer Jest versions. Refactoring of tests is needed
Additional context
27.0.6makes use ofminimatch@3.0.4.