AVA 3.12.0 is a minor feature release and bug fix on top of version 3.11.1 of this popular Node.js test runner. Both versions maintain the same core promise: to empower developers to write tests with confidence. Under the hood, a few dependencies were updated. Most notably, acorn advances from 7.3.1 to 8.0.1, resolving potential parsing bug and enabling support for latest Javascript syntax. ora, a fancy terminal spinner, increases from 4.0.5 to 5.0.0, which might introduce visual changes or performance improvements during test execution. concordance, the value diffing library, goes from 5.0.0 to 5.0.1 fixing some comparisson errors. chokidar, which is the file watching library, is updated from 3.4.1 to 3.4.2 that may resolve some file watch issues in edge cases. Also update-notifier progresses from 4.1.0 to 4.1.1. On the tooling side, c8 and xo also received updates from 7.2.1 to 7.3.0 and from 0.32.1 to 0.33.0 respectively. get-stream goes from 5.1.0 to 6.0.0 which maybe have performance implications. For developers, this means a smoother testing experience, potentially with better error reporting and improved compatibility with newer JavaScript features. While AVA's primary purpose remains consistent, developers should be aware of these subtle changes, especially if they rely on specific behaviors or configurations of these dependencies.
All the vulnerabilities related to the version 3.12.0 of the package
Got allows a redirect to a UNIX socket
The got package before 11.8.5 and 12.1.0 for Node.js allows a redirect to a UNIX socket.