ts-jest version 23.10.5 is a refinement over its predecessor, 23.10.4, both serving as invaluable tools for developers integrating TypeScript with the Jest testing framework. Both versions provide seamless support for source maps, simplifying debugging TypeScript code within the Jest environment. Key dependencies like json5, mkdirp, and semver remain consistent, ensuring compatibility and stability for core functionalities. The developer tooling, encapsulated in devDependencies, also largely mirrors that found in the previous release, maintaining a familiar development experience.
The noticeable distinctions lie primarily in the specifics of package distribution. Version 23.10.5 sees a slight increase in file count within the distributed tarball (79 files compared to 76) and a corresponding increase in unpacked size (225527 bytes compared to 223668 bytes). This suggests that 23.10.5 might include minor tweaks, potentially bug fixes, enhanced documentation, or even slight performance improvements, although the precise nature remains obscured without deeper analysis. Additionally, the release date indicates that v23.10.5 was released on November 22, 2018, after v23.10.4 which was released on October 6, 2018. For developers, this iterative update signals a commitment to ongoing maintenance and refinement. While the core experience is consistent, upgrading to 23.10.5 offers the assurance of benefiting from the latest quality and stability enhancements available. Remember to align jest peer dependency which should be ">=22 <24".
All the vulnerabilities related to the version 23.10.5 of the package
yargs-parser Vulnerable to Prototype Pollution
Affected versions of yargs-parser are vulnerable to prototype pollution. Arguments are not properly sanitized, allowing an attacker to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects.
Parsing the argument --foo.__proto__.bar baz' adds a bar property with value baz to all objects. This is only exploitable if attackers have control over the arguments being passed to yargs-parser.
Upgrade to versions 13.1.2, 15.0.1, 18.1.1 or later.
