[Snyk] Upgrade chai from 4.3.4 to 6.2.2

[nerdy-tech-com-gitub]

Snyk has created this PR to upgrade chai from 4.3.4 to 6.2.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 32 versions ahead of your current version.

• The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	177	No Known Exploit
	Improper Link Resolution Before File Access ('Link Following') SNYK-JS-TARFS-10293725	177	No Known Exploit
	Symlink Attack SNYK-JS-TARFS-9535930	177	Mature
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	177	Proof of Concept
	Denial of Service (DoS) SNYK-JS-WS-7266574	177	Proof of Concept
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	177	No Known Exploit
	Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	177	Proof of Concept
	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	177	Proof of Concept
	Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GETFUNCNAME-5923417	177	Proof of Concept
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	177	No Known Exploit
	Prototype Poisoning SNYK-JS-QS-3153490	177	Proof of Concept
	Prototype Poisoning SNYK-JS-QS-3153490	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	177	Proof of Concept
	Symlink Following SNYK-JS-TARFS-13045213	177	No Known Exploit
	Symlink Attack SNYK-JS-TMP-11501554	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-3244450	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELHELPERS-9397697	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELRUNTIME-10044504	177	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	177	No Known Exploit
	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	177	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	177	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	177	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	177	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-15053838	177	No Known Exploit
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	177	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	177	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITENDPOINT-8730856	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITPLUGINPAGINATEREST-8730855	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITREQUEST-8730853	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-OCTOKITREQUESTERROR-8730854	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	177	Proof of Concept
	Improper Input Validation SNYK-JS-POSTCSS-5926692	177	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-ROLLUP-8073097	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	177	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	177	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	177	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-2429795	177	Proof of Concept

Release notes

Package name: chai

• 6.2.2 - 2025-12-22
  

  What's Changed

  • build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @ dependabot[bot] in #1745
  • chore(deps): update dependency eslint-plugin-jsdoc to v61.2.1 by @ renovate[bot] in #1746
  • build(deps): bump glob from 10.4.5 to 10.5.0 by @ dependabot[bot] in #1747
  • chore(deps): update actions/checkout action to v6 by @ renovate[bot] in #1749
  • fix: avoid BigInt literal in closeTo for runtime compat by @ bheemreddy-samsara in #1748
  • chore(deps): update dependency eslint-plugin-jsdoc to v61.4.1 by @ renovate[bot] in #1751
  • chore(deps): update dependency prettier to v3.7.3 by @ renovate[bot] in #1754
  • chore(deps): update dependencies by @ renovate[bot] in #1755
  • chore(deps): update dependencies to v9.39.2 by @ renovate[bot] in #1757
  • chore: add --legal-comments=none option by @ hyperz111 in #1756
  • chore(deps): update dependency esbuild to v0.27.2 by @ renovate[bot] in #1759

  New Contributors

  • @ bheemreddy-samsara made their first contribution in #1748
  • @ hyperz111 made their first contribution in #1756

  Full Changelog: v6.2.1...v6.2.2

• 6.2.1 - 2025-11-11
  

  What's Changed

  • chore: add renovate config by @ 43081j in #1709
  • chore: use new renovate schema by @ 43081j in #1713
  • chore(deps): update actions/setup-node action to v5 (main) by @ renovate[bot] in #1711
  • chore(deps): update actions/checkout action to v5 (main) by @ renovate[bot] in #1710
  • chore(deps): update dependency eslint to v9 (main) by @ renovate[bot] in #1715
  • chore(deps): update dependency @ rollup/plugin-commonjs to v28 (main) by @ renovate[bot] in #1714
  • chore(deps): update dependency mocha to v11 (main) by @ renovate[bot] in #1717
  • chore(deps): update dependency eslint-plugin-jsdoc to v60 (main) by @ renovate[bot] in #1716
  • chore: disable renovate for 4.x.x by @ 43081j in #1722
  • chore(deps): update dependency eslint-plugin-jsdoc to v61 by @ renovate[bot] in #1727
  • chore(deps): update actions/setup-node action to v6 by @ renovate[bot] in #1729
  • chore(deps): update dependencies by @ renovate[bot] in #1726
  • chore(deps): update dependencies by @ renovate[bot] in #1730
  • chore(deps): update dependency node to v24 by @ renovate[bot] in #1731
  • chore(deps): update dependency @ rollup/plugin-commonjs to v29 by @ renovate[bot] in #1732
  • chore(deps): update dependencies by @ renovate[bot] in #1734
  • build(deps): bump koa from 2.14.2 to 2.16.1 by @ dependabot[bot] in #1683
  • docs: update browser usage by @ 43081j in #1736
  • chore(deps): update dependencies by @ renovate[bot] in #1740
  • docs: add comprehensive documentation for containSubset assertion by @ Aashish-Jha-11 in #1739
  • Set esbuild target to es2021 to support Safari < 16.4 by @ larabr in #1737

  New Contributors

  • @ renovate[bot] made their first contribution in #1711
  • @ Aashish-Jha-11 made their first contribution in #1739
  • @ larabr made their first contribution in #1737

  Full Changelog: v6.2.0...v6.2.1

• 6.2.0 - 2025-09-27
  

  What's Changed

  • feat(events): add addChainableMethod event by @ perrin4869 in #1707

  Full Changelog: v6.1.0...v6.2.0

• 6.1.0 - 2025-09-27
  

  What's Changed

  • build(deps-dev): bump tar-fs from 3.0.9 to 3.1.1 by @ dependabot[bot] in #1706
  • feat: add eventEmitter (#1693)
    Adds an event emitter for hooking into method/property creation in #1693

  Full Changelog: v6.0.2...v6.1.0

• 6.0.1 - 2025-08-22
  

  What's Changed

  • fix: keep function/class names in bundle by @ 43081j in #1701

  Full Changelog: v6.0.0...v6.0.1

• 6.0.0 - 2025-08-22
  

  BREAKING CHANGES

  Chai is now bundled into a single file. The lib/*.js files are no longer present, and so any code that imports those files directly will need to change. The only file that can be imported now is ./index.js.

  What's Changed

  • feat: remove unbundled sources by @ 43081j in #1700

  Full Changelog: v5.3.2...v6.0.0

• 5.3.3 - 2025-08-22
  

  What's Changed

  • fix: keep names in bundle by @ 43081j in #1702
  • chore: support publishing v5 by @ 43081j in #1703
  • chore: update npm tag name by @ 43081j in #1704

  Full Changelog: v5.3.2...v5.3.3

• 5.3.2 - 2025-08-22
  

  Reverts the removal of the bundled version of chai in 5.3.1

  What's Changed

  • Update core contributors by @ keithamus in #1697
  • feat: reintroduce bundle by @ 43081j in #1699

  Full Changelog: v5.3.1...v5.3.2

• 5.3.1 - 2025-08-18
  

  What's Changed

  • chore: remove bundled chai by @ 43081j in #1694

  Full Changelog: v5.3.0...v5.3.1

• 5.3.0 - 2025-08-18
• 5.2.2 - 2025-08-18
• 5.2.1 - 2025-07-08
• 5.2.0 - 2025-02-14
• 5.1.2 - 2024-10-23
• 5.1.1 - 2024-05-09
• 5.1.0 - 2024-02-12
• 5.0.3 - 2024-01-25
• 5.0.2 - 2024-01-25
• 5.0.0 - 2023-12-28
• 5.0.0-rc.0 - 2023-12-06
• 5.0.0-alpha.2 - 2023-10-30
• 5.0.0-alpha.1 - 2023-07-26
• 5.0.0-alpha.0 - 2023-02-07
• 4.5.0 - 2024-07-25
• 4.4.1 - 2024-01-12
• 4.4.0 - 2024-01-05
• 4.3.10 - 2023-09-28
• 4.3.9 - 2023-09-27
• 4.3.8 - 2023-08-24
• 4.3.7 - 2022-11-07
• 4.3.6 - 2022-01-26
• 4.3.5 - 2022-01-25
• 4.3.4 - 2021-03-12

from chai GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs