Skip to content

build(deps-dev): pin supertest to 7.3.0 - #774

Closed
UlisesGascon wants to merge 1 commit into
masterfrom
pin-supertest-7.3.0
Closed

UlisesGascon wants to merge 1 commit into
masterfrom
pin-supertest-7.3.0

Conversation

@UlisesGascon

Copy link
Copy Markdown
Member

supertest@7.3.1 breaks the test suite. Its #907 change resolves the ephemeral server URL too late, but superagent builds streaming requests (.write()/.pipe()) eagerly, so they fire against 127.0.0.1 with no port and get ECONNREFUSED. Our chunked / inflate / limit tests use the streaming API, so they fail on 7.3.1; non-streaming tests pass. 7.3.0 is clean.

Pin supertest to 7.3.0 until the upstream regression is fixed.

Upstream issue: forwardemail/supertest#911

supertest 7.3.1 regresses streaming requests (.write()/.pipe()) built from
an app factory: the ephemeral server URL is resolved too late, so the
request fires against 127.0.0.1 with no port and gets ECONNREFUSED. The
chunked/inflate/limit tests use streaming, so they fail on 7.3.1 while
non-streaming tests pass. Pin to 7.3.0 until it is fixed upstream.

Ref: forwardemail/supertest#911
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​supertest@​7.3.1 ⏵ 7.3.09910010091 -3100

View full report

@UlisesGascon

Copy link
Copy Markdown
Member Author

Duplicated. see #773. @saadkhantareen was faster!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant