Skip to content

Bump karma from ~1.2.0 to ~6.4 in /redpen-server#10

Merged
karronoli merged 1 commit intomasterfrom
upgrade-karma-for-security-patch
Aug 17, 2022
Merged

Bump karma from ~1.2.0 to ~6.4 in /redpen-server#10
karronoli merged 1 commit intomasterfrom
upgrade-karma-for-security-patch

Conversation

@karronoli
Copy link
Copy Markdown
Owner

Bump karma from ~1.2.0 to ~6.4

Release notes

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

  • deps: update colors to maintained version (#3763) (fca1884)

6.3.16 (2022-02-10)

Bug Fixes

  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes

  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

  • deps: bump log4js to resolve security issue (5bf2df3), closes #3751

6.3.12 (2022-01-24)

Bug Fixes

  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes

  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes

  • logger: create parent folders if they are missing (0d24bd9), closes #3734

6.3.9 (2021-11-16)

Bug Fixes

  • restartOnFileChange option not restarting the test run (92ffe60), closes #27 #3724

6.3.8 (2021-11-07)

Bug Fixes

  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes

  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #3711

6.3.6 (2021-10-25)

Bug Fixes

  • bump vulnerable ua-parser-js version (6f2b2ec), closes #3713

6.3.5 (2021-10-20)

Bug Fixes

  • client: prevent socket.io from hanging due to mocked clocks (#3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

6.3.3 (2021-06-01)

Bug Fixes

6.3.2 (2021-03-29)

Bug Fixes

6.3.1 (2021-03-24)

Bug Fixes

  • client: clearContext after complete sent (#3657) (c0962e3)

6.3.0 (2021-03-23)

Features

  • support asynchronous config.set() call in karma.conf.js (#3660) (4c9097a)

6.2.0 (2021-03-10)

Features

  • plugins: add support wildcard config for scoped package plugin (#3659) (39831b1)

6.1.2 (2021-03-09)

Bug Fixes

6.1.1 (2021-02-12)

Bug Fixes

  • config: check extension before ts-node register (#3651) (474f4e1), closes #3329
  • report launcher process error when exit event is not emitted (#3647) (7ab86be)

6.1.0 (2021-02-03)

Features

  • config: improve karma.config.parseConfig error handling (#3635) (9dba1e2)

6.0.4 (2021-02-01)

Bug Fixes

  • cli: temporarily disable strict parameters validation (#3641) (9c755e0), closes #3625
  • client: fix a false positive page reload error in Safari (#3643) (2a57b23)
  • ensure that Karma supports running tests on IE 11 (#3642) (dbd1943)

6.0.3 (2021-01-27)

Bug Fixes

  • plugins: refactor instantiatePlugin from preproprocessor (#3628) (e02858a)

6.0.2 (2021-01-25)

Bug Fixes

6.0.1 (2021-01-20)

Bug Fixes

  • server: set maxHttpBufferSize to the socket.io v2 default (#3626) (69baddc), closes #3621
  • restore customFileHandlers provider (#3624) (25d9abb)

6.0.0 (2021-01-13)

Bug Fixes

Features

  • cli: error out on unexpected options or parameters (#3589) (603bbc0)
  • client: update banner with connection, test status, ping times (#3611) (4bf90f7)
  • server: print stack of unhandledrejections (#3593) (35a5842)
  • server: remove deprecated static methods (#3595) (1a65bf1)
  • remove support for running dart code in the browser (#3592) (7a3bd55)

BREAKING CHANGES

  • server: Deprecated require('karma').server.start() and require('karma').Server.start() variants were removed from the public API. Instead use canonical form:
const { Server } = require('karma');
const server = new Server();
server.start();
  • cli: Karma is more strict and will error out if unknown option or argument is passed to CLI.
  • Using Karma to run Dart code in the browser is no longer supported. Use your favorite Dart-to-JS compiler instead.

dart file type has been removed without a replacement.

customFileHandlers DI token has been removed. Use middleware to achieve similar functionality.

customScriptTypes DI token has been removed. It had no effect, so no replacement is provided.

  • deps: Some projects have socket.io tests that are version sensitive.

5.2.3 (2020-09-25)

Bug Fixes

5.2.2 (2020-09-08)

Bug Fixes

5.2.1 (2020-09-02)

Bug Fixes

  • remove broken link from docs - 06-angularjs.md (#3555) (da2f307)
  • remove unused JSON utilities and flatted dependency (#3550) (beed255)

5.2.0 (2020-08-31)

Bug Fixes

Features

  • server: allow 'exit' listeners to set exit code (#3541) (7a94d33)

5.1.1 (2020-07-28)

Bug Fixes

  • server: echo the hostname rather than listenAddress (#3532) (ebe7ce4)

5.1.0 (2020-06-11)

Features

5.0.9 (2020-05-19)

Bug Fixes

5.0.8 (2020-05-18)

Bug Fixes

  • dependencies: update and unlock socket.io dependency (#3513) (b60391f)
  • dependencies: update to latest log4js major (#3514) (47f1cb2)

5.0.7 (2020-05-16)

Bug Fixes

  • detect type for URLs with query parameter or fragment identifier (#3509) (f399063), closes #3497

5.0.6 (2020-05-16)

Bug Fixes

  • dependencies: update production dependencies (#3512) (0cd696f)

5.0.5 (2020-05-07)

Bug Fixes

5.0.4 (2020-04-30)

Bug Fixes

  • browser: make sure that empty results array is still recognized (#3486) (fa95fa3)

5.0.3 (2020-04-29)

Bug Fixes

5.0.2 (2020-04-16)

Bug Fixes

  • ci: stop the proxy before killing the child, handle errors (#3472) (abe9af6), closes #3464

5.0.1 (2020-04-10)

Bug Fixes

5.0.0 (2020-04-09)

Bug Fixes

Code Refactoring

Continuous Integration

Features

  • docs: document DEFAULT_LISTEN_ADDR constant (#3443) (057d527), closes #2479
  • karma-server: added log to the server.js for uncaught exception (#3399) (adc6a66)
  • preprocessor: obey Pattern.isBinary when set (#3422) (708ae13), closes #3405

BREAKING CHANGES

  • Karma plugins which rely on the fact that Karma uses Bluebird promises may break as Bluebird-specific API is no longer available on Promises returned by the Karma core
  • server: Deprecated createPreprocessor removed, karma-browserify < 7 version doesn't work
  • no more testing on node 8.

4.4.1 (2019-10-18)

Bug Fixes

  • deps: back to karma-browserstack-launcher 1.4 (#3361) (1cd87ad)
  • server: Add test coverage for config.singleRun true branch. (#3384) (259be0d)
  • if preprocessor is async function and doesn't return a content then await donePromise (#3387) (f91be24)

4.4.0 (2019-10-17)

Bug Fixes

Features

4.3.0 (2019-08-27)

Bug Fixes

Features

4.2.0 (2019-07-12)

Bug Fixes

  • logging: Util inspect for logging the config. (#3332) (70b72a9)
  • reporter: format stack with 1-based column (#3325) (182c04d), closes #3324
  • server: Add error handler for webserver socket. (#3300) (fe9a1dd)

4.1.0 (2019-04-15)

Bug Fixes

  • client: Enable loading different file types when running in parent mode without iframe (#3289) (7968db6)
  • client: Only create the funky object if message is not a string (#3298) (ce6825f), closes #3296
  • launcher: Log state transitions in debug (#3294) (6556ab4), closes #3290
  • middleware: log invalid filetype (#3292) (7eb48c5), closes #3291

4.0.1 (2019-02-28)

Bug Fixes

4.0.0 (2019-01-23)

Bug Fixes

Chores

BREAKING CHANGES

  • Drop Support for Node 6, to make it possible to use async/await in karma codebase.

3.1.4 (2018-12-17)

Bug Fixes

3.1.3 (2018-12-01)

Bug Fixes

3.1.2 (2018-12-01)

Bug Fixes

Features

3.1.1 (2018-10-23)

Bug Fixes

  • config: move puppeteer from dependency to dev-dependency (#3193) (f0d52ad), closes #3191

3.1.0 (2018-10-22)

Bug Fixes

Features

  • config: Add config option for browser socket timeout (#3102) (11e3a9d), closes #2927
  • config: add support for ES modules (e811adb)
  • frameworks: report start() errors back to server. (#3126) (8257375)
  • server: .dom files include HTML tags in page. (#3178) (4651524)
  • server: Add public API to force a file refresh (dab8a82)
  • server: Add stop method (#3153) (6d96d8e), closes #3149
  • server: Add support for encoded source files (#3123) (68b37d3)

3.0.0 (2018-08-09)

Bug Fixes

  • config: wait 20s for browser activity. (#3087) (88b977f)
  • config: Wait 30s for browser activity per Travis. (#3091) (f6d2f0e)
  • init: add "ChromeHeadless" to the browsers' options (#3096) (56fda53)
  • server: Exit clean on unhandledRejections. (#3092) (02f54c6), closes #3064
  • travis: Up the socket timeout 2->20s. (#3103) (732396a), closes #3102
  • travis: use the value not the key name. (#3097) (90f5546)
  • travis: validate TRAVIS_COMMIT if TRAVIS_PULL_REQUEST_SHA is not set. (#3094) (fba5d36)
  • travis: Validate TRAVIS_PULL_REQUEST_SHA rather than TRAVIS_COMMIT. (#3093) (a58fa45)

BREAKING CHANGES

  • Drop Support for Nodejs4 (#3082)

2.0.5 (2018-07-24)

Bug Fixes

  • remove circular reference in Browser (518cb11), closes #3075
  • browser: ensure browser state is EXECUTING when tests start (#3074) (dc7265b), closes #1640
  • doc: Document release steps for admins (#3063) (a701732)
  • middleware: Obey the Promise API. (93ba05a)
  • server: pass bound port to preventEADDRINUSE issue. (#3065) (850a90b)

Features

  • preprocessor: Allow preprocessor to handle binary files (#3054) (7b66e18)

2.0.4 (2018-06-21)

Bug Fixes

  • deps: remove babel-core and babel call in wallaby. (#3044) (7da8ca0)
  • events: bind emitters with for..in. (#3059) (b99f03f), closes #3057
  • launcher: Only markCaptured browsers that are launched. (#3047) (f8f3ebc)
  • server: actually call stert(). (#3062) (40d836a)
  • server: Resurrect static function Server.start() lost in 2.0.3 (#3055) (c88ebc6)

2.0.3 (2018-06-15)

The 2.03. change log was incorrectly created due to an extra pending tag in the repo.

2.0.2 (2018-04-19)

Bug Fixes

  • package.json: sinon-chai 2.13 is not compatible with sinon 4.x (#2977) (e095b05)

2.0.1 (2018-04-19)

Bug Fixes

  • browser: nicer "disconnect" - no more "Disconnectedundefined" (a987d63)
  • common: fix AppVeyor build (6c5e7d0)
  • common: more detailed info about error (424aacc)
  • config: Call debug log methods after setting the loglevel based upon config/cli-options. (a340dae)
  • config: Call debug log methods after setting the loglevel based upon config/cli-options. (99fd3f0)
  • config: Retry install with appveyor-retry. (17d5791)
  • config: Workaround npm 5.4 windows bug (ec47d81)
  • deps: update socket.io to version 2.0.3. (3b7b019), closes #2777
  • logging: Upgrade to log4js 2.x API. (#2868) (f6f8707), closes #2858
  • middleware: add file type to absolute urls (bd1f799)
  • ignore jsVersion configuration property in Firefox 59+ (2694d54), closes #2957
  • middleware: avoid using deprecated Buffer API (018e6be)
  • reporter: Fix issue causing error stack not to be parsed correctly (ac4e1a9), closes #2930
  • reporter: show file path correctly when urlRoot specified (34dc7d3), closes #2897
  • server: switch to sync write (6ec74ee)

Features

  • cli: Warn on commands with underscores. (0801a7f)
  • config: allow to use newer versions of CoffeeScript (c1fcf42)
  • launcher: trim whitespace in browser name (871d46f)
  • launcher: trim whitespace in browser name (334f9fb)
  • middleware: added manual file type option (0330cd1), closes #2824
  • better string representation of errors (c9e1ca9)
  • drop core-js and babel where possible (60dfc5c)
  • update of supported node versions (e79463b)

1.7.1 (2017-08-25)

Bug Fixes

  • debug-runner: support asynchronous tests in the debug runner (a36f3eb), closes #2811
  • file-list: Stop polluting global environment with core-js (0988022)
  • preprocessor: renamed handeFile to readFileCallback (92a8c81)
  • preprocessor: retry if fs.readFile fails (4b60513)
  • preprocessor: throw if retry fails (2789bf5)

Features

  • ci: disable testing of node versions below 4 (ec92ea9)
  • client: log global error stack trace (523d608), closes #2812
  • config: remove polling usage (b0f41c7), closes #2669
  • deps: add support for node@8 (7feaee3), closes #2754
  • deps: update socket.io to 1.7.4 to avoid issue with ws[@1](https://github.com/1).1.2 (264442b), closes #2593
  • watcher: Debounce autoWatchBatchDelay (2f8c049), closes #2331

2.0.0 (2017-12-21)

Bug Fixes

  • config: Call debug log methods after setting the loglevel based upon config/cli-options. (99fd3f0)
  • config: Call debug log methods after setting the loglevel based upon config/cli-options. (a340dae)
  • config: Retry install with appveyor-retry. (17d5791)
  • config: Workaround npm 5.4 windows bug (ec47d81)
  • deps: update socket.io to version 2.0.3. (3b7b019), closes #2821 #2777
  • logging: Upgrade to log4js 2.x API. (#2868) (f6f8707), closes #2858
  • reporter: show file path correctly when urlRoot specified (34dc7d3), closes #2897
  • debug-runner: support asynchronous tests in the debug runner (a36f3eb), closes #2811
  • file-list: Stop polluting global environment with core-js (0988022)
  • preprocessor: renamed handeFile to readFileCallback (92a8c81)
  • preprocessor: retry if fs.readFile fails (4b60513)
  • preprocessor: throw if retry fails (2789bf5)

Features

  • cli: Warn on commands with underscores. (0801a7f)
  • config: allow to use newer versions of CoffeeScript (c1fcf42)
  • launcher: trim whitespace in browser name (871d46f)
  • launcher: trim whitespace in browser name (334f9fb)
  • middleware: added manual file type option (0330cd1), closes #2824
  • better string representation of errors (c9e1ca9)
    n* drop core-js and babel where possible (60dfc5c)
  • update of supported node versions (e79463b)
  • ci: disable testing of node versions below 4 (ec92ea9)
  • client: log global error stack trace (523d608), closes #2812
  • config: remove polling usage (b0f41c7), closes #2669
  • deps: add support for node@8 (7feaee3), closes #2754
  • deps: update socket.io to 1.7.4 to avoid issue with [email protected] (264442b), closes #2593
  • watcher: Debounce autoWatchBatchDelay (2f8c049), closes #2331

1.7.1 (2017-08-30)

Features

1.7.0 (2017-05-06)

Bug Fixes

  • middleware: change to use vanilla for loop (ac62cc0), closes #2671
  • reporters: Revert the backwards-incompatible log priority order changes (316b944), closes #2582

Features

  • runner: Buffer stdout and stderr for output when errors occur (460d423)

1.6.0 (2017-04-05)

Bug Fixes

  • client: add proxy support to stringify (be10116)
  • file-list: always use file from first matcher (74bfdf3)
  • middleware: does not work with mootools (#2591) (2685e13)
  • reporter: keep users exact formatError result (17c2c43)

Features

  • browser: add browser_info event (09ac7d7), closes #2192
  • launcher: output stderr for failing launchers (7d33398)
  • proxy: add proxy events to config (f5d99fb)

1.5.0 (2017-02-20)

Bug Fixes

  • filter browser logging by level of LOG (89a7a1c), closes #2228
  • make window.parent.karma available in debugged context (3e7eaeb)
  • client: don't crash if receive array-like results (e095411), closes #2061

Features

  • add an option to run the tests by dynamically loading test scripts without iframe (aa42c41)
  • add support for node@7 (eb407ab), closes #2559

1.4.1 (2017-01-29)

Bug Fixes

  • runner: Make process kill timeout configurable (ffaa054), closes #2447
  • runner: Make process kill timeout configurable - Fix Build (a128e5c), closes #2447
  • runner: Test process kill timeout config (99a1d48), closes #2447

Features

  • config: allow config to be a default export (9976dce)

1.4.0 (2017-01-14)

Bug Fixes

  • browser: filter browser logging by level (35965d9), closes #2228
  • cli: restore shell completion in the npm package (f56b5a5), closes #2351
  • config: add crossOriginAttribute config option (1e465b1)
  • middleware: update Buffer usage (3d94b8c)
  • reporter: do not allow URL domains to span new lines (2c13404)
  • reporter: strip only hostname/port (fbbeccf), closes #2209
  • reporters: cannot read property map of undefined (305df2c), closes #1662
  • server: exit with code 1 when failing due to missing browser (86e2ef2), closes #2403

Features

  • api: add constants to the public api (ee10977), closes #2361
  • api: expose config.parseConfig on the public api (7d2c1ae)
  • client: capture confirm & prompt (3a618b3), closes #694
  • server: add listen address option so that IPv6 and loopback interfaces can be used (8e5bee6), closes #2477
  • web-server: allow overriding of default http module (1e7514d), closes #2424

1.3.0 (2016-09-09)

Bug Fixes

  • launcher: exclude concurrent browser on launcher restart (96f8f14), closes #2280
  • middleware: ensure Range headers adhere more closely to RFC 2616 (8b1b4b1), closes #2310

Features

  • reporter: add config formatError function (98a4fbf), closes #2119
  • upstreamProxy config option to deal with proxies that adjust the base path, etc (55755e4)

@karronoli karronoli merged commit 53d6928 into master Aug 17, 2022
@karronoli karronoli deleted the upgrade-karma-for-security-patch branch August 17, 2022 01:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment