[Snyk] Upgrade chai from 4.2.0 to 4.3.8

[tiff-es]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade chai from 4.2.0 to 4.3.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-08-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GETFUNCNAME-5923417	609/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 8.6	Proof of Concept
	Prototype Pollution SNYK-JS-PATHVAL-596926	609/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 8.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: chai

• 4.3.8 - 2023-08-24
  

  What's Changed

  • 4.x.x: Fix link to commit logs on GitHub by @ bugwelle in #1487
  • build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @ dependabot in #1488
  • Small typo in test.js by @ mavaddat in #1459
  • docs: specify return type of objDisplay by @ scarf005 in #1490
  • Update CONTRIBUTING.md by @ matheus-rodrigues00 in #1521
  • Fix: update exports.version to current version by @ peanutenthusiast in #1534

  New Contributors

  • @ bugwelle made their first contribution in #1487
  • @ mavaddat made their first contribution in #1459
  • @ scarf005 made their first contribution in #1490
  • @ matheus-rodrigues00 made their first contribution in #1521
  • @ peanutenthusiast made their first contribution in #1534

  Full Changelog: v4.3.7...v4.3.8

• 4.3.7 - 2022-11-07
  

  What's Changed

  • fix: deep-eql bump package to support symbols comparison by @ snewcomer in #1483

  Full Changelog: v4.3.6...v4.3.7

• 4.3.6 - 2022-01-26
  

  Update loupe to 2.3.1

• 4.3.5 - 2022-01-25
  
  • build chaijs fca5bb1
  • build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446) 747eb4e
  • fix package.json exports 022c2fa
  • fix: package.json - deprecation warning on exports field (#1400) 5276af6
  • feat: use chaijs/loupe for inspection (#1401) (#1407) c8a4e00

  v4.3.4...v4.3.5

• 4.3.4 - 2021-03-12
  

  This fixes broken inspect behavior with bigints (#1321) (#1383) thanks @ vapier

• 4.3.3 - 2021-03-03
  

  This reintroduces Assertion as an export in the mjs file. See #1378 & #1375

• 4.3.2 - 2021-03-03
  

  This fixes a regression in IE11. See #1380 & #1379

• 4.3.1 - 2021-03-02
  

  This releases fixed an engine incompatibility with 4.3.0

  The 4.x.x series of releases will be compatible with Node 4.0. Please report any errors found in Node 4 as bugs, and they will be fixed.

  The 5.x.x series, when released, will drop support for Node 4.0

  This fix also ensures pathval is updated to 1.1.1 to fix CVE-2020-7751

• 4.3.0 - 2021-02-04
• 4.2.0 - 2018-09-26

from chai GitHub release notes

Commit messages

Package name: chai

• d9ff2c6 4.3.8
• 8d3205b build
• b351dc0 Fix: update exports.version to current version (#1534)
• 1a8247f Update CONTRIBUTING.md (#1521)
• 3a8c49a docs: specify return type of objDisplay (#1490)
• b455124 test: fix typo in test.js (#1459)
• 98f4233 build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 (#1488)
• acd16e0 chore: 4.x.x: Fix link to commit logs on GitHub (#1487)
• 3c947a7 build
• 775f509 4.3.7
• 8e780b4 fix: deep-eql bump package to support symbols comparison (#1483)
• 529b8b5 4.3.6
• e4d7f2e build chaijs
• d88684e fix: use loupe@^2.3.1
• 99e36a8 4.3.5
• fca5bb1 build chaijs
• 747eb4e build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446)
• 022c2fa fix package.json exports
• 5276af6 fix: package.json - deprecation warning on exports field (#1400)
• c8a4e00 feat: use chaijs/loupe for inspection (#1401) (#1407)
• ab41ed8 4.3.4
• 5b607a1 fix: support inspecting bigints (#1321) (#1383)
• dc858a0 chai@4.3.3
• b0f50f6 export chai.Assertion (#1378)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs