AVA 4.0.0 represents a significant update to the popular Node.js test runner, building upon the solid foundation of version 3.15.0. Developers will find several notable changes influencing their testing workflows. A primary focus appears to be dependency updates, bringing in newer versions of crucial tools like chalk (v5.0.0 from v4.1.0) for enhanced terminal styling and yargs (v17.3.1 from v16.2.0) for improved command-line argument parsing. Core dependencies received updates too, like mem upgrading to v9.0.1 from 8.0.0 and globby going to v12.0.2 from v11.0.1, potentially enhancing performance and feature sets related to memoization and file system globbing.
The update includes newer tooling for development, indicated by the devDependencies, with c8 for code coverage moving to v7.11.0, xo for linting moving to v0.47.0, and execa for process execution receiving an update to v6.0.0. These modernizations often translate to better compatibility with recent JavaScript features and security enhancements. Notably, some dependencies like ora, lodash, md5-hex, cli-cursor, equal-length, import-local, @concordance/react,convert-source-map, source-map-support,@ava/babel and react have been removed, likely signaling refactoring or integration of functionality into other components or simply removing unused libraries. Importantly, the '@ava/typescript' package is now listed as a peer dependency, signifying a recommended (but not strictly required) companion for TypeScript projects, promoting greater flexibility in how users configure their testing environment. The smaller unpackedSize signals potential optimizations or a shift in architecture.
The are not vulnerabilities for the version 4.0.0 of the package ava
