[grootjans]

Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

• packages/pluggable-widgets-tools/package.json

⚠️ Warning

Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PICOMATCH-21248802	721

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[grootjans]

This upgrade includes major version bumps for both @types/testing-library__jest-dom and babel-jest (as part of Jest 30), introducing significant breaking changes that require developer action.

1. @types/testing-library__jest-dom (5.14.9 → 6.0.0)

Risk: High

This package is now deprecated and should be uninstalled. The main testing-library/jest-dom v6 library now bundles its own TypeScript definitions.

Breaking Changes:

• Package Removal: The @types/testing-library__jest-dom package is no longer needed and must be removed from your package.json.
• Import Path: The method for extending Jest's expect has changed. The extend-expect script was removed. You must now update your test setup files to import from a new path.
• Node Version: Support for Node.js versions below 14 has been dropped.

Recommendation:

1. Uninstall this package: npm uninstall @types/testing-library__jest-dom.
2. Update your Jest setup to use one of the new import paths, for example: import '@testing-library/jest-dom/jest-globals';

2. babel-jest (29.7.0 → 30.3.0)

Risk: High

This upgrade corresponds to a major upgrade of the entire Jest framework from v29 to v30. It contains multiple breaking changes.

Breaking Changes:

• Environment Support: Support for Node.js versions 14, 16, 19, and 21 has been dropped. The minimum required TypeScript version is now 5.4.
• Removed API Aliases: Deprecated expect matcher aliases have been removed. For example, toBeCalled() must be replaced with toHaveBeenCalled().
• JSDOM Environment: The bundled jsdom was upgraded, which introduces significant changes. Notably, mocking window.location is much more difficult and may break navigation-related tests.
• Module Handling: Changes to module export resolution may affect how mocks and imports are handled.

Recommendation:

• Update Node.js and TypeScript versions to meet the new requirements.
• Perform a codebase search-and-replace for removed expect aliases.
• Thoroughly test any code that relies on mocking window.location or other complex JSDOM interactions, as workarounds may be required.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.