[grootjans]

Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

• packages/pluggable-widgets-tools/package.json

⚠️ Warning

Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PICOMATCH-21248802	721

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[grootjans]

This upgrade includes major version bumps for both @types/testing-library__jest-dom and babel-jest (as part of Jest 30), introducing significant breaking changes that require developer action.

1. @types/testing-library__jest-dom (5.14.9 → 6.0.0)

Risk: High

This package is now deprecated and should be uninstalled. The main testing-library/jest-dom v6 library now bundles its own TypeScript definitions.

Breaking Changes:

• Package Removal: The @types/testing-library__jest-dom package is no longer needed and must be removed from your package.json.
• Import Path: The method for extending Jest's expect has changed. The extend-expect script was removed. You must now update your test setup files to import from a new path.
• Node Version: Support for Node.js versions below 14 has been dropped.

Recommendation:

1. Uninstall this package: npm uninstall @types/testing-library__jest-dom.
2. Update your Jest setup to use one of the new import paths, for example: import '@testing-library/jest-dom/jest-globals';

2. babel-jest (29.7.0 → 30.3.0)

Risk: High

This upgrade corresponds to a major upgrade of the entire Jest framework from v29 to v30. It contains multiple breaking changes.

Breaking Changes:

• Environment Support: Support for Node.js versions 14, 16, 19, and 21 has been dropped. The minimum required TypeScript version is now 5.4.
• Removed API Aliases: Deprecated expect matcher aliases have been removed. For example, toBeCalled() must be replaced with toHaveBeenCalled().
• JSDOM Environment: The bundled jsdom was upgraded, which introduces significant changes. Notably, mocking window.location is much more difficult and may break navigation-related tests.
• Module Handling: Changes to module export resolution may affect how mocks and imports are handled.

Recommendation:

• Update Node.js and TypeScript versions to meet the new requirements.
• Perform a codebase search-and-replace for removed expect aliases.
• Thoroughly test any code that relies on mocking window.location or other complex JSDOM interactions, as workarounds may be required.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[KevinVlaanderen]

✅ This PR has been automatically closed

The security issues addressed by this pull request are no longer present in the latest project scan. All vulnerabilities this PR was created to fix have been resolved through other means (e.g., dependency updates, direct fixes, or changes in vulnerability data).

Resolved Issues

• SNYK-JS-PICOMATCH-21248802

What should I do?

No action is required. If you believe this PR was closed in error, you can reopen it and contact Snyk support.

---

This action was performed automatically by Snyk.