Skip to content

Conversation

@snyk-io
Copy link

@snyk-io snyk-io bot commented Oct 21, 2025

snyk-top-banner

Snyk has created this PR to upgrade jest from 25.5.4 to 30.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 136 versions ahead of your current version.

  • The recommended version was released 23 days ago.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443
159 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-Y18N-1021887
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
159 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
159 Proof of Concept
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922
159 No Known Exploit
high severity Code Injection
SNYK-JS-LODASH-1040724
159 Proof of Concept
high severity Prototype Poisoning
SNYK-JS-QS-3153490
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELHELPERS-9397697
159 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873
159 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
159 Proof of Concept
medium severity Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088
159 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
159 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PROMPTS-1729737
159 Proof of Concept
medium severity Server-side Request Forgery (SSRF)
SNYK-JS-REQUEST-3361831
159 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973
159 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
159 Proof of Concept
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
159 Proof of Concept
critical severity Predictable Value Range from Previous Values
SNYK-JS-FORMDATA-10841150
159 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856
159 Proof of Concept
medium severity Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516
159 No Known Exploit
Release notes
Package name: jest
  • 30.2.0 - 2025-09-28

    Chore & Maintenance

    • [*] Update example repo for testing React Native projects (#15832)
    • [*] Update jest-watch-typeahead to v3 (#15830)

    Features

    • [jest-environment-jsdom-abstract] Add support for JSDOM v27 (#15834)

    Fixes

    • [babel-jest] Export the TransformerConfig interface (#15820)
    • [jest-config] Fix jest.config.ts with TS loader specified in docblock pragma (#15839)
  • 30.1.3 - 2025-09-02

    Fixes

    • Fix unstable_mockModule with node: prefixed core modules.
  • 30.1.2 - 2025-09-01

    Fixes

    • [jest-snapshot-utils] Correct snapshot header regexp to work with newline across OSes (#15803)
  • 30.1.1 - 2025-08-27

    Fixes

    • [jest-snapshot-utils] Fix deprecated goo.gl snapshot warning not handling Windows end-of-line sequences (#15800)
  • 30.1.0 - 2025-08-27

    Features

    • [jest-leak-detector] Configurable GC aggressiveness regarding to V8 heap snapshot generation (#15793)
    • [jest-runtime] Reduce redundant ReferenceError messages
    • [jest-core] Include test modules that failed to load when --onlyFailures is active

    Fixes

    • `[jest-snapshot-utils] Fix deprecated goo.gl snapshot guide link not getting replaced with fully canonical URL (#15787)
    • [jest-circus] Fix it.concurrent not working with describe.skip (#15765)
    • [jest-snapshot] Fix mangled inline snapshot updates when used with Prettier 3 and CRLF line endings
    • [jest-runtime] Importing from @ jest/globals in more than one file no longer breaks relative paths (#15772)

    Chore

    • [expect] Update docblock for toContain() to display info on substring check (#15789)
  • 30.0.5 - 2025-07-22

    v30.0.5

  • 30.0.4 - 2025-07-02

    v30.0.4

  • 30.0.3 - 2025-06-25

    v30.0.3

  • 30.0.2 - 2025-06-19

    What's Changed

    Fixes

    • [jest-matcher-utils] Make 'deepCyclicCopyObject' safer by setting descriptors to a null-prototype object (#15689)
    • [jest-util] Make garbage collection protection property writable (#15689)

    Full Changelog: https://github.com/jestjs/jest/blob/main/CHANGELOG.md

  • 30.0.1 - 2025-06-18

    What's Changed

    Features

    • [jest-resolver] Implement the defaultAsyncResolver (#15679)

    Fixes

    • [jest-resolver] Resolve builtin modules correctly (#15683)
    • [jest-environment-node, jest-util] Avoid setting globals cleanup protection symbol when feature is off (#15684)

    Chore & Maintenance

    • [*] Remove and deprecate jest-repl package (#15673)
    • [jest-resolver] Replace custom isBuiltinModule with node's isBuiltin (#15685)

    New Contributors

    Full Changelog: https://github.com/jestjs/jest/blob/main/CHANGELOG.md

  • 30.0.0 - 2025-06-10
  • 30.0.0-rc.1 - 2025-06-09
  • 30.0.0-beta.9 - 2025-06-05
  • 30.0.0-beta.8 - 2025-06-04
  • 30.0.0-beta.7 - 2025-06-04
  • 30.0.0-beta.6 - 2025-06-03
  • 30.0.0-beta.5 - 2025-05-29
  • 30.0.0-beta.4 - 2025-05-27
  • 30.0.0-beta.3 - 2025-05-27
  • 30.0.0-beta.2 - 2025-05-27
  • 30.0.0-alpha.7 - 2025-01-30
  • 30.0.0-alpha.6 - 2024-08-08
  • 30.0.0-alpha.5 - 2024-05-30
  • 30.0.0-alpha.4 - 2024-05-12
  • 30.0.0-alpha.3 - 2024-02-20
  • 30.0.0-alpha.2 - 2023-11-16
  • 30.0.0-alpha.1 - 2023-10-30
  • 29.7.0 - 2023-09-12
  • 29.6.4 - 2023-08-24
  • 29.6.3 - 2023-08-21
  • 29.6.2 - 2023-07-27
  • 29.6.1 - 2023-07-06
  • 29.6.0 - 2023-07-04
  • 29.5.0 - 2023-03-06
  • 29.4.3 - 2023-02-15
  • 29.4.2 - 2023-02-07
  • 29.4.1 - 2023-01-26
  • 29.4.0 - 2023-01-24
  • 29.3.1 - 2022-11-08
  • 29.3.0 - 2022-11-07
  • 29.2.2 - 2022-10-24
  • 29.2.1 - 2022-10-18
  • 29.2.0 - 2022-10-14
  • 29.1.2 - 2022-09-30
  • 29.1.1 - 2022-09-28
  • 29.1.0 - 2022-09-28
  • 29.0.3 - 2022-09-10
  • 29.0.2 - 2022-09-03
  • 29.0.1 - 2022-08-26
  • 29.0.0 - 2022-08-25
  • 29.0.0-alpha.6 - 2022-08-19
  • 29.0.0-alpha.5 - 2022-08-11
  • 29.0.0-alpha.4 - 2022-08-08
  • 29.0.0-alpha.3 - 2022-08-07
  • 29.0.0-alpha.1 - 2022-08-04
  • 29.0.0-alpha.0 - 2022-07-17
  • 28.1.3 - 2022-07-13
  • 28.1.2 - 2022-06-29
  • 28.1.1 - 2022-06-07
  • 28.1.0 - 2022-05-06
  • 28.0.3 - 2022-04-29
  • 28.0.2 - 2022-04-27
  • 28.0.1 - 2022-04-26
  • 28.0.0 - 2022-04-25
  • 28.0.0-alpha.11 - 2022-04-20
  • 28.0.0-alpha.10 - 2022-04-20
  • 28.0.0-alpha.9 - 2022-04-19
  • 28.0.0-alpha.8 - 2022-04-05
  • 28.0.0-alpha.7 - 2022-03-06
  • 28.0.0-alpha.6 - 2022-03-01
  • 28.0.0-alpha.5 - 2022-02-24
  • 28.0.0-alpha.4 - 2022-02-22
  • 28.0.0-alpha.3 - 2022-02-17
  • 28.0.0-alpha.2 - 2022-02-16
  • 28.0.0-alpha.1 - 2022-02-15
  • 28.0.0-alpha.0 - 2022-02-10
  • 27.5.1 - 2022-02-08
  • 27.5.0 - 2022-02-05
  • 27.4.7 - 2022-01-05
  • 27.4.6 - 2022-01-04
  • 27.4.5 - 2021-12-13
  • 27.4.4 - 2021-12-10
  • 27.4.3 - 2021-12-01
  • 27.4.2 - 2021-11-30
  • 27.4.1 - 2021-11-30
  • 27.4.0 - 2021-11-29
  • 27.3.1 - 2021-10-19
  • 27.3.0 - 2021-10-17
  • 27.2.5 - 2021-10-08
  • 27.2.4 - 2021-09-29
  • 27.2.3 - 2021-09-28
  • 27.2.2 - 2021-09-25
  • 27.2.1 - 2021-09-20
  • 27.2.0 - 2021-09-13
  • 27.1.1 - 2021-09-08
  • 27.1.0 - 2021-08-27
  • 27.0.6 - 2021-06-28
  • 27.0.5 - 2021-06-22
  • 27.0.4 - 2021-06-03
  • 27.0.3 - 2021-05-29
  • 27.0.2 - 2021-05-29
  • 27.0.1 - 2021-05-25
  • 27.0.0 - 2021-05-25
  • 27.0.0-next.11 - 2021-05-20
  • 27.0.0-next.10 - 2021-05-20
  • 27.0.0-next.9 - 2021-05-04
  • 27.0.0-next.8 - 2021-04-12
  • 27.0.0-next.7 - 2021-04-02
  • 27.0.0-next.6 - 2021-03-25
  • 27.0.0-next.5 - 2021-03-15
  • 27.0.0-next.4 - 2021-03-08
  • 27.0.0-next.3 - 2021-02-18
  • 27.0.0-next.2 - 2020-12-07
  • 27.0.0-next.1 - 2020-12-07
  • 27.0.0-next.0 - 2020-12-05
  • 26.6.3 - 2020-11-04
  • 26.6.2 - 2020-11-02
  • 26.6.1 - 2020-10-23
  • 26.6.0 - 2020-10-19
  • 26.5.3 - 2020-10-11
  • 26.5.2 - 2020-10-06
  • 26.5.0 - 2020-10-05
  • 26.4.2 - 2020-08-22
  • 26.4.1 - 2020-08-20
  • 26.4.0 - 2020-08-12
  • 26.3.0 - 2020-08-10
  • 26.2.2 - 2020-07-31
  • 26.2.1 - 2020-07-30
  • 26.2.0 - 2020-07-30
  • 26.1.0 - 2020-06-23
  • 26.0.1 - 2020-05-05
  • 26.0.1-alpha.0 - 2020-05-04
  • 26.0.0 - 2020-05-04
  • 26.0.0-alpha.2 - 2020-05-04
  • 26.0.0-alpha.1 - 2020-05-03
  • 26.0.0-alpha.0 - 2020-05-02
  • 25.5.4 - 2020-05-02
from jest GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-io
Copy link
Author

snyk-io bot commented Oct 21, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

0 participants