chore(deps): update dependency mocha to v11

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
mocha (source)	^6.2.0 → ^11.0.0

---

Release Notes

mochajs/mocha (mocha)

v11.7.6

Compare Source

🩹 Fixes

• make describe().timeout() work (aafe6fd)
• test: replace wmic usage with native Windows API (#​5694) (73ebdfa)

🧹 Chores

• format all code (#​5629) (0696784)
• remove Netlify (#​5630) (8d01d33)

v11.7.5

Compare Source

🩹 Fixes

• swallow more require errors from *ts files (#​5498) (d89dbaf)

🧹 Chores

• run tests on PRs for and pushes to v11.x (#​5525) (8b21b38)
• setup release-please for v11 (#​5522) (663fff4)

v11.7.4

Compare Source

🩹 Fixes

• watch mode using chokidar v4 (#​5379) (c2667c3)

📚 Documentation

• migrate remaining legacy wiki pages to main documentation (#​5465) (bff9166)

🧹 Chores

• remove trailing spaces (#​5475) (7f68e5c)

v11.7.3

Compare Source

🩹 Fixes

• use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#​5408) (ebdbc48)

📚 Documentation

• add security escalation policy (#​5466) (4122c7d)
• fix duplicate global leak documentation (#​5461) (1164b9d)
• migrate third party UIs wiki page to docs (#​5434) (6654704)
• update maintainer release notes for release-please (#​5453) (185ae1e)

🤖 Automation

• deps: bump actions/setup-node in the github-actions group (#​5459) (48c6f40)

v11.7.2

Compare Source

🩹 Fixes

• fail with an informative error message on a file with a broken default import (#​5413) (b0e6135)
• load mjs files correctly (#​5429) (a947b9b)

📚 Documentation

• add banner from old site to new site, link from new to old (#​5414) (dedef11)
• add info on spies to legacy docs (#​5421) (21f5544)
• explain node import swallowing error (#​5401) (09f5b2c)
• fix links in new site (#​5416) (b2bc769)
• migrate assertion libraries wiki link to main docs (#​5442) (95f3ca8)
• migrate count assertions wiki page to docs (#​5438) (02a306c)
• migrate shared behaviours to docs-next (#​5432) (1dc4aa9)
• migrate Spies wiki page to explainers (#​5420) (cbcf007)
• Migrate tagging wiki page to docs (#​5435) (876247a)
• migrate third party reporters wiki page to docs (#​5433) (f70764c)
• migrate to global leak wiki page to docs (#​5437) (8a6fdca)
• update /next bug report link to be docs issue template (#​5424) (668cb66)

🧹 Chores

• add issue form for ⚡️ Performance (#​5406) (a908b3b)
• add test for -R import-only-loader (#​5391) (6ee5b48)
• also test Node.js 24 in CI (#​5405) (15f5980)
• bump CI to use 20.19.4, 22.18.0, 24.6.0 (#​5430) (ace5eb4)
• bump Knip to 5.61.2 (#​5394) (f3d7430)
• cleanup references of --opts (#​5402) (1096b37)
• enabled ESLint's no-unused-vars (#​5399) (d4168ae)
• move callback and object typedefs to a new types.d.ts (#​5351) (3300d21)
• rewrite base path instead of copy-pasting (#​5431) (c6c6740)
• unify caught errors as err (#​5439) (d4912e7)
• Update experimental module detection test and pin exact Node versions (#​5417) (2489090)

🤖 Automation

• deps: bump actions/checkout in the github-actions group (#​5419) (03ac2d0)

v11.7.1

Compare Source

🩹 Fixes

• always fallback to import() if require() fails (#​5384) (295c168)

🧹 Chores

• add esm loader test (#​5383) (f58e49f)

v11.7.0

Compare Source

🌟 Features

• use require to load esm (#​5366) (41e24a2)

v11.6.0

Compare Source

🌟 Features

• bump workerpool from ^6.5.1 to ^9.2.0 (#​5350) (581a3c5)

v11.5.0

Compare Source

🌟 Features

• bump mimimatch from ^5.1.6 to ^9.0.5 (#​5349) (a3dea85)

v11.4.0

Compare Source

🌟 Features

• bump diff from ^5.2.0 to ^7.0.0 (#​5348) (554d6bb)

📚 Documentation

• added CHANGELOG.md note around 11.1 yargs-parser update (#​5362) (618415d)

v11.3.0

Compare Source

🌟 Features

• add option to use posix exit code upon fatal signal (#​4989) (91bbf85)

📚 Documentation

• Deploy new site alongside old one (#​5360) (6c96545)
• mention explicit browser support range (#​5354) (c514c0b)
• update Node.js version requirements for 11.x (#​5329) (abf3dd9)

🧹 Chores

• remove prerelease setting in release-please config (#​5363) (8878f22)

v11.2.2

Compare Source

🩹 Fixes

• deps: update chokidar to v4 (#​5256) (8af0f1a)

📚 Documentation

• add ClientRedirects.astro (#​5324) (b88d441)
• add example/tests.html to docs-next (#​5325) (6ec5762)

v11.2.1

Compare Source

🩹 Fixes

• switch from ansi-colors to picocolors (#​5323) (7c08d09)

📚 Documentation

• fix new website typos, improve readability (#​5312) (fbceb19)

🧹 Chores

• "force" Netlify to use npm to build new site (#​5319) (3a46855)
• Fix tests (#​5320) (18699a0)

v11.2.0

Compare Source

🌟 Features

• enable reporters to show relative paths of tests (#​5292) (81ea666)

📚 Documentation

• add instructions for API docs (#​5287) (b720ec1)
• add new website using Astro Starlight (#​5246) (b1f1cb7)
• improve third-party reporter docs (#​5285) (c5a0ef5)

🧹 Chores

• enabled eslint-plugin-n (#​5280) (945d6e3)
• pin node-lts tests to 22.11.0 (#​5279) (664e1f4)
• replace fs-extra with newer fs built-ins (#​5284) (75dcf8c)

v11.1.0

Compare Source

🌟 Features

• bump yargs to 17 (#​5165) (8f1c8d8)
  • Note that this also included a version bump of yargs-parser from ^20.2.9 to ^21.1., which fixed a bug that caused extra quotes in file paths to be removed.
    See #​5341 for more information.
• replace strip-ansi with util.stripVTControlCharacters (#​5267) (3c191c0), closes #​5265

v11.0.2

Compare Source

🩹 Fixes

• catch exceptions setting Error.stackTraceLimit (#​5254) (259f8f8)
• error handling for unexpected numeric arguments passed to cli (#​5263) (210d658)

📚 Documentation

• correct outdated status: accepting prs link (#​5268) (f729cd0)
• replace "New in" with "Since" in version annotations (#​5262) (6f10d12)

v11.0.1

Compare Source

🌟 Features

• bumped glob dependency from 8 to 10 (#​5250) (43c3157)

📚 Documentation

• fix examples for linkPartialObjects methods (#​5255) (34e0e52)

v11.0.0

Compare Source

⚠ BREAKING CHANGES

• adapt new engine range for Mocha 11 (#​5216)

🌟 Features

• allow calling hook methods (#​5231) (e3da641)

🩹 Fixes

• adapt new engine range for Mocha 11 (#​5216) (80da25a)

📚 Documentation

• downgrade example/tests chai to 4.5.0 (#​5245) (eac87e1)

v10.8.2

Compare Source

🩹 Fixes

• support errors with circular dependencies in object values with --parallel (#​5212) (ba0fefe)
• test link in html reporter (#​5224) (f054acc)

📚 Documentation

• indicate 'exports' interface does not work in browsers (#​5181) (14e640e)

🧹 Chores

• fix docs builds by re-adding eleventy and ignoring gitignore again (#​5240) (881e3b0)

🤖 Automation

• deps: bump the github-actions group with 1 update (#​5132) (e536ab2)

v10.8.1

Compare Source

🩹 Fixes

• handle case of invalid package.json with no explicit config (#​5198) (f72bc17)
• Typos on mochajs.org (#​5237) (d8ca270)
• use accurate test links in HTML reporter (#​5228) (68803b6)

v10.8.0

Compare Source

🌟 Features

• highlight browser failures (#​5222) (8ff4845)

🩹 Fixes

• remove :is() from mocha.css to support older browsers (#​5225) (#​5227) (0a24b58)

📚 Documentation

• add SECURITY.md pointing to Tidelift (#​5210) (bd7e63a)
• adopt Collective Funds Guidelines 0.1 (#​5199) (2b03d86)
• update README, LICENSE and fix outdated (#​5197) (1203e0e)

🧹 Chores

• fix npm scripts on windows (#​5219) (1173da0)
• remove trailing whitespace in SECURITY.md (7563e59)

v10.7.3

Compare Source

🩹 Fixes

• make release-please build work (#​5194) (afd66ef)

v10.7.0

Compare Source

🎉 Enhancements

• #​4771 feat: add option to not fail on failing test suite (@​ilgonmic)

v10.6.1

Compare Source

🐛 Fixes

• #​3825 fix: do not exit when only unref'd timer is present in test code (@​boneskull)
• #​5040 fix: support canonical module (@​JacobLey)

v10.6.0

Compare Source

🎉 Enhancements

• #​5150 feat: allow ^ versions for character encoding packages (@​JoshuaKGoldberg)
• #​5151 feat: allow ^ versions for file matching packages (@​JoshuaKGoldberg)
• #​5152 feat: allow ^ versions for yargs packages (@​JoshuaKGoldberg)
• #​5153 feat: allow ^ versions for data serialization packages (@​JoshuaKGoldberg)
• #​5154 feat: allow ^ versions for miscellaneous packages (@​JoshuaKGoldberg)

v10.5.2

Compare Source

🐛 Fixes

• #​5032 fix: better tracking of seen objects in error serialization (@​sam-super)

v10.5.1

Compare Source

🐛 Fixes

• #​5086 fix: Add error handling for nonexistent file case with --file option (@​khoaHyh)

v10.5.0

Compare Source

🎉 Enhancements

• #​5015 feat: use <progress> and <svg> for browser progress indicator instead of <canvas> (@​yourWaifu)
• #​5143 feat: allow using any 3.x chokidar dependencies (@​simhnna)
• #​4835 feat: add MOCHA_OPTIONS env variable (@​icholy)

🐛 Fixes

• #​5107 fix: include stack in browser uncaught error reporting (@​JoshuaKGoldberg)

🔩 Other

• #​5110 chore: switch two-column list styles to be opt-in (@​marjys)
• #​5135 chore: fix some typos in comments (@​StevenMia)
• #​5130 chore: rename 'master' to 'main' in docs and tooling (@​JoshuaKGoldberg)

v10.4.0

Compare Source

⚠ BREAKING CHANGES

• remove bin/_mocha and convert bin/ and entry points to ESM (#​6017)

🌟 Features

• remove bin/_mocha and convert bin/ and entry points to ESM (#​6017) (930972a)

🩹 Fixes

• lookupFiles() now returns string[] for direct file paths (#​5941) (4718476), closes #​5940
• prevent diff hang on large/complex objects (#​5898) (6695fba)

🧹 Chores

• convert lib/nodejs/ utility files to ESM (#​6011) (a8ffaa9)
• convert lib/reporters/base to ESM (#​6012) (d12dd90)
• deps: update dependency eslint to v10.4.0 (#​5996) (f2dd26b)
• deps: update dependency knip to v6.14.2 (#​5982) (b40e85b)
• deps: update dependency npm-run-all2 to v9 (#​6019) (70bea83)
• deps: update dependency webpack to v5.107.2 (#​6022) (5eca67d)

🤖 Automation

• deps: bump joelwmale/webhook-action in the github-actions group (#​6032) (75c618d)

v10.3.0

Compare Source

⚠ BREAKING CHANGES

• remove unused legacy errors.js functions (#​5835)

🩹 Fixes

• deps: update dependency @​astrojs/starlight to ^0.39.0 (#​5952) (eed10ac)

📚 Documentation

• add TypeScript setup guide (#​5863) (af63dcf)
• fix correctness issues in error codes, CLI defaults, and config docs (#​5860) (bd54205)
• modernize DEVELOPMENT.md for new contributors (#​5865) (5122ad7)

🧹 Chores

• convert lib/cli/cli.mjs to ESM (#​5909) (6e91a89)
• convert dot, min, and list reporters to esm (#​5907) (b19b696)
• convert run-option-metadata and exports interface to ESM (#​5910) (27b0814)
• deps: update dependency @​types/node to v24 (#​5958) (ef113d7)
• deps: update dependency eslint to v10.3.0 (#​5945) (18cf178)
• deps: update dependency eslint-plugin-n to v18 (#​5948) (99f0e4a)
• deps: update dependency globals to v17.6.0 (#​5946) (412070c)
• deps: update dependency knip to v6.12.1 (#​5942) (e29003d)
• deps: update dependency knip to v6.6.1 (#​5927) (7c48496)
• deps: update dependency knip to v6.7.0 (#​5933) (441c32a)
• deps: update dependency nyc to v18 (#​5846) (1fea247)
• deps: update dependency semver to v7.8.0 (#​5957) (0cbb43c)
• deps: update dependency sinon to v22 (#​5949) (54dcfda)
• deps: update dependency webpack-cli to v7 (#​5871) (9d367e1)
• deps: update googleapis/release-please-action action to v5 (#​5929) (f32085f)
• dev-deps: upgrade webpack from v6 to v7 + remove obsolete fail-on-errors-webpack-plugin (#​5908) (103ad41)
• document CJS and MJS config file priority (#​5923) (09a1106)
• fix Knip issues (#​5919) (1b3d604)
• migrate core interfaces and utilities to ESM (#​5930) (1ad23ab)
• migrate reporters to ESM (#​5928) (f6a62ca)
• remove unused legacy errors.js functions (#​5835) (4116368)
• tag alpha releases as alpha, not next (#​5951) (8e29413), closes #​5947

v10.2.0

Compare Source

🩹 Fixes

• begin running tests immediately instead of waiting for watcher, reload required files in watch mode (#​5409) (7d9ade6)
• deps: update dependency diff to v9 (#​5917) (fbd831e)
• support file: URLs in loadFilesAsync (#​5833) (f9f9436), closes #​4993
• support modern RegExp flags in Mocha#grep (#​5825) (35413b6)

📚 Documentation

• agent instructions to help review agents (#​5839) (badac5b)
• clarify --delay option behavior (#​5862) (0b88137)
• clarify that parallel mode does not provide test isolation (#​5864) (274c3d2)
• document parent directory lookup for config files (#​5861) (e7a98ef)
• fix various typos in source and documentation (#​5834) (e15bbda)
• modernize code examples (#​5687) (9c4966a)

🧹 Chores

• add transient error note to Release Please workflow (#​5847) (7288278)
• convert commands, init, and lookup-files to ESM (#​5891) (46d09d1)
• convert context, hook, and stats-collector to ESM (#​5853) (5ac4070)
• convert highlight-tags and parse-query to ESM (#​5855) (aad7997)
• convert node-flags and options to ESM, fix ESLint issue (#​5900) (cd2e461)
• deps: update dependency @​eslint/markdown to v8 (#​5845) (bd05089)
• deps: update dependency eslint to v10.2.0 (#​5884) (2829fe3)
• deps: update dependency globals to v17.5.0 (#​5914) (96eaa7c)
• deps: update dependency knip to v6.3.1 (#​5892) (a2675f1)
• deps: update dependency knip to v6.4.0 (#​5901) (17ce208)
• deps: update dependency knip to v6.5.0 (#​5916) (34465f6)
• deps: update dependency unexpected-sinon to v11 (#​5737) (e652121)
• deps: update dependency webpack to v5.106.1 (#​5893) (db85960)
• fix format workflow permissions for npm-script.yml (#​5903) (88a9806)
• fix formatting in lib/cli/lookup-files.mjs (#​5912) (a3c3a1c)
• fix line numbers in stack traces (#​5664) (f49aca5)
• format AGENTS.md (#​5852) (16497f2)
• inline escape-string-regexp (single-regex utility) (#​5883) (25e6538)
• migrate 5 unit test files from unexpected to chai (#​5896) (fa06dde)
• migrate lib/pending and lib/error-constants to ESM (#​5767) (5aacbce)
• upgrade site to Astro 6 (#​5913) (1afd6c7)

v10.1.0

Compare Source

🩹 Fixes

• deps: update dependency workerpool to v10 (#​5751) (96a4768)
• use semver dot separator for beta pre-release versions (beta-X → beta.X) (#​5764) (5574738)

📚 Documentation

• add "failing workaround" and new dash to sec-vuln-reports.mdx (#​5783) (f9e553e)
• add FAQ explainer for dependency security vulnerability reports (#​5691) (2517693)
• add FAQ section to CONTRIBUTING.md for "can I work on this?" (#​5689) (682c307)
• add major release strategy, fix typos (#​5551) (ec0fe0d)
• cleanup third party UI code examples for issue 5570 (#​5784) (8d86811)
• document AI-generated code policies (#​5693) (3533316)
• document many "external" services (#​5685) (30f8fe6)
• fix typo in configuring.mdx (#​5699) (fdf1a11)
• Updates COC Policy To Match OpenJS Guidelines (#​5802) (9029f66)

🧹 Chores

• add Knip to docs-next, remove unused deps, and cleanup links (#​5726) (a3908e9)
• add link from bug template to security explainer (#​5782) (ab8fc25)
• add workflow to handle stale items (#​5831) (dd08f6f)
• add workflow_dispatch to all workflows (#​5793) (cca0a2c)
• deps: update actions/stale action to v10 (#​5842) (e75b14f)
• deps: update dependency astro to v5.18.1 (#​5786) (bf99e30)
• deps: update dependency chai to v6 (#​5720) (2e07be1)
• deps: update dependency eslint to v10.1.0 (#​5827) (2c8eeb0)
• deps: update dependency eslint-plugin-n to v17.24.0 (#​5798) (bb66555)
• deps: update dependency globals to v17 (#​5722) (acf9357)
• deps: update dependency installed-check to v10 (#​5738) (5905ed9)
• deps: update dependency knip to v5.88.0 (#​5799) (40ec9b8)
• deps: update dependency knip to v6 (#​5828) (661f349)
• deps: update dependency rollup to v4.59.0 (#​5813) (1ef2020)
• deps: update dependency rollup to v4.60.0 (#​5829) (4ab5813)
• deps: update eslint monorepo to v10 (major) (#​5742) (fe9dc01)
• deps: update joelwmale/webhook-action digest to 6cebc9d (#​5702) (e61c8d5)
• docs: rename docs-next to docs (#​5770) (39c15a8)
• fix supporters file extension in knip config (#​5796) (53ca72f)
• have Tests workflow ignore more relevant paths (#​5762) (8e2cebe)
• remove global.setImmediate fallback (#​5836) (5e69d16)
• remove repeat() polyfill (#​5837) (f988a80)
• remove now-unused utils.inherits (#​5766) (d0a636b)
• remove unused libc props from package-lock.json (#​5817) (b0a89ce)
• remove unused fossaignore (#​5769) (8a0eaf7)
• run tests when PR is retargeted (#​5761) (3481b1e)
• switch reporters from util.inherits to ES2015 classes (#​5180) (c3f32ce)
• switch Runnable, Hook, and Test from util.inherits to ES2015 classes (#​5178) (1378fd8)
• use beta-9.1 instead of beta.10 (#​5821) (bc1eff2)

?

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	mocha@​6.2.2 ⏵ 11.7.6			-5	-1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm yargs is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/mocha@11.7.6 → npm/yargs@17.7.3 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/yargs@17.7.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report