ts-jest 29.4.0 → 29.4.1

package/.ts-jest-digest

@@ -1 +1 @@
-f80537ea4534af72d55ea38f700d980529562be2
+ff42db26b185ac7e4ad144c52d191736fe9dffdd

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## [29.4.1](https://github.com/kulshekhar/ts-jest/compare/v29.4.0...v29.4.1) (2025-08-03)
+
+
+## Bug Fixes
+
+* fix: replace `ejs` with `handlebars` due to security issues ([899c9b7](https://github.com/kulshekhar/ts-jest/commit/899c9b7)), closes [#4969](https://github.com/kulshekhar/ts-jest/issues/4969)
+
+
+
 ## [29.4.0](https://github.com/kulshekhar/ts-jest/compare/v29.3.4...v29.4.0) (2025-06-11)
 
 

package/dist/cli/config/init.js

@@ -11,16 +11,16 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.help = exports.run = void 0;
 const fs_1 = require("fs");
 const path_1 = require("path");
-const ejs_1 = __importDefault(require("ejs"));
+const handlebars_1 = __importDefault(require("handlebars"));
 const json5_1 = require("json5");
 const create_jest_preset_1 = require("../../presets/create-jest-preset");
-const JEST_CONFIG_EJS_TEMPLATE = `const { <%= presetCreatorFn %> } = require("ts-jest");
+const JEST_CONFIG_TEMPLATE = `const { {{ presetCreatorFn }} } = require("ts-jest");
 
-const tsJestTransformCfg = <%= presetCreatorFn %>(<%- transformOpts %>).transform;
+const tsJestTransformCfg = {{ presetCreatorFn }}({{{ transformOpts }}}).transform;
 
 /** @type {import("jest").Config} **/
-<%= exportKind %> {
-  testEnvironment: "<%= testEnvironment %>",
+{{{ exportKind }}} {
+  testEnvironment: "{{ testEnvironment }}",
   transform: {
     ...tsJestTransformCfg,
   },
@@ -98,7 +98,8 @@ const run = async (args /* , logger: Logger */) => {
         else {
             presetCreatorFn = 'createDefaultPreset';
         }
-        body = ejs_1.default.render(JEST_CONFIG_EJS_TEMPLATE, {
+        const template = handlebars_1.default.compile(JEST_CONFIG_TEMPLATE);
+        body = template({
             exportKind: pkgJsonContent.type === 'module' ? 'export default' : 'module.exports =',
             testEnvironment: jsdom ? 'jsdom' : 'node',
             presetCreatorFn,

package/dist/cli/config/migrate.js

@@ -95,8 +95,11 @@ const run = async (args /* , logger: Logger*/) => {
         delete migratedConfig.testMatch;
     }
     // check the testMatch
-    else if (migratedConfig.testMatch?.length && preset) {
-        const presetValue = dedupSort(preset.value.testMatch ?? []).join('::');
+    else if (migratedConfig.testMatch?.length &&
+        preset &&
+        Array.isArray(preset.value.testMatch) &&
+        Array.isArray(migratedConfig.testMatch)) {
+        const presetValue = dedupSort(preset.value.testMatch).join('::');
         const migratedValue = dedupSort(migratedConfig.testMatch).join('::');
         if (presetValue === migratedValue) {
             delete migratedConfig.testMatch;
@@ -139,7 +142,7 @@ function cleanupConfig(config) {
         if (!config.moduleFileExtensions.length)
             delete config.moduleFileExtensions;
     }
-    if (config.testMatch) {
+    if (config.testMatch && Array.isArray(config.testMatch)) {
         config.testMatch = dedupSort(config.testMatch);
         if (!config.testMatch.length)
             delete config.testMatch;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ts-jest",
-  "version": "29.4.0",
+  "version": "29.4.1",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "commonjs",
@@ -52,8 +52,8 @@
   "homepage": "https://kulshekhar.github.io/ts-jest",
   "dependencies": {
     "bs-logger": "^0.2.6",
-    "ejs": "^3.1.10",
     "fast-json-stable-stringify": "^2.1.0",
+    "handlebars": "^4.7.8",
     "json5": "^2.2.3",
     "lodash.memoize": "^4.1.2",
     "make-error": "^1.3.6",
@@ -93,51 +93,50 @@
   "devDependencies": {
     "@commitlint/cli": "^19.8.1",
     "@commitlint/config-angular": "^19.8.1",
-    "@eslint/compat": "^1.2.9",
+    "@eslint/compat": "^1.3.1",
     "@eslint/eslintrc": "^3.3.1",
-    "@eslint/js": "^9.28.0",
-    "@jest/globals": "^30.0.0",
-    "@jest/transform": "^30.0.0",
-    "@jest/types": "^30.0.0",
+    "@eslint/js": "^9.32.0",
+    "@jest/globals": "^30.0.5",
+    "@jest/transform": "^30.0.5",
+    "@jest/types": "^30.0.5",
     "@types/babel__core": "^7.20.5",
-    "@types/ejs": "^3.1.5",
     "@types/fs-extra": "^11.0.4",
+    "@types/handlebars": "^4.1.0",
     "@types/jest": "^29.5.14",
     "@types/js-yaml": "^4.0.9",
     "@types/lodash.camelcase": "^4.3.9",
     "@types/lodash.memoize": "^4.1.9",
     "@types/lodash.set": "^4.3.9",
     "@types/micromatch": "^4.0.9",
-    "@types/node": "20.19.0",
+    "@types/node": "20.19.9",
     "@types/semver": "^7.7.0",
     "@types/yargs": "^17.0.33",
     "@types/yargs-parser": "21.0.3",
-    "@typescript-eslint/eslint-plugin": "^8.34.0",
-    "@typescript-eslint/parser": "^8.34.0",
-    "babel-jest": "^30.0.0",
+    "@typescript-eslint/eslint-plugin": "^8.38.0",
+    "@typescript-eslint/parser": "^8.38.0",
+    "babel-jest": "^30.0.5",
     "conventional-changelog-cli": "^5.0.0",
-    "esbuild": "~0.25.5",
-    "eslint": "^9.28.0",
-    "eslint-config-prettier": "^10.1.5",
-    "eslint-plugin-import": "^2.31.0",
-    "eslint-plugin-jest": "^28.13.3",
+    "esbuild": "~0.25.8",
+    "eslint": "^9.32.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-import": "^2.32.0",
+    "eslint-plugin-jest": "^28.14.0",
     "eslint-plugin-jsdoc": "^50.8.0",
-    "eslint-plugin-prettier": "^4.2.1",
+    "eslint-plugin-prettier": "^4.2.5",
     "execa": "5.1.1",
+    "fast-glob": "^3.3.3",
     "fs-extra": "^11.3.0",
-    "glob": "^11.0.2",
-    "glob-gitignore": "^1.0.15",
-    "globals": "^16.2.0",
+    "globals": "^16.3.0",
     "husky": "^9.1.7",
-    "jest": "^30.0.0",
+    "jest": "^30.0.5",
     "js-yaml": "^4.1.0",
     "lint-staged": "^15.5.2",
-    "memfs": "^4.17.2",
+    "memfs": "^4.36.0",
     "prettier": "^2.8.8",
     "rimraf": "^5.0.10",
     "ts-node": "^10.9.2",
     "typescript": "~5.8.3",
-    "typescript-eslint": "^8.34.0"
+    "typescript-eslint": "^8.38.0"
   },
   "engines": {
     "node": "^14.15.0 || ^16.10.0 || ^18.0.0 || >=20.0.0"