Ts-jest version 24.2.0 introduces subtle refinements over its predecessor, version 24.1.0, primarily focusing on internal maintenance and potential minor bug fixes rather than groundbreaking new features. Examining the package manifests reveals identical dependency structures under both dependencies and devDependencies, suggesting no significant changes to core functionalities or development tooling. This consistency implies that the update from 24.1.0 to 24.2.0 is likely a patch release addressing specific issues or improving existing functionalities without altering the fundamental API or core workings of the preprocessor.
The dist sections highlight a slight increase in unpacked size from 163635 to 164536, indicating potential additions in code, documentation, or test cases. While the file count remains constant, this suggests minimal structural change. Developers upgrading from 24.1.0 to 24.2.0 can anticipate a seamless transition with minimal to no code adjustments required. The upgrade primarily focuses on ensuring stability and reliability within the existing feature set.
For developers leveraging ts-jest, this version promises the same robust TypeScript-Jest integration, source map support, and compatibility with Jest 24.x, ensuring confidence in utilizing TypeScript within their testing workflows. The consistent dependency list ensures that familiar libraries like json5, mkdirp, semver, resolve, and others remain integral, offering a stable and predictable development environment. The minor version bump signifies that the update is non-breaking and aims to fortify the existing features rather than introduce disruptive alterations.
All the vulnerabilities related to the version 24.2.0 of the package
yargs-parser Vulnerable to Prototype Pollution
Affected versions of yargs-parser are vulnerable to prototype pollution. Arguments are not properly sanitized, allowing an attacker to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects.
Parsing the argument --foo.__proto__.bar baz' adds a bar property with value baz to all objects. This is only exploitable if attackers have control over the arguments being passed to yargs-parser.
Upgrade to versions 13.1.2, 15.0.1, 18.1.1 or later.
