[Snyk] Security upgrade jest-puppeteer from 5.0.3 to 7.0.0

[Abuchtela]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-AXIOS-15252993	170

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[Copilot]

Pull request overview

This PR upgrades jest-puppeteer from version 5.0.3 to 7.0.0 to address a high-severity Prototype Pollution vulnerability (SNYK-JS-AXIOS-15252993) in the axios dependency. This is a major version upgrade that includes significant changes to the dependency tree, including upgrades to jest-environment-node (26.6.2 → 29.7.0), jest-dev-server (5.0.3 → 7.0.1), expect-puppeteer (5.0.3 → 7.0.1), and critically, axios (0.21.4 → 1.13.5 in jest-dev-server).

Changes:

• Upgraded jest-puppeteer from ^5.0.3 to ^7.0.0 in package.json
• Updated package-lock.json with new dependency tree including jest-environment-node 29.7.0, jest-dev-server 7.0.1, expect-puppeteer 7.0.1
• Resolved axios Prototype Pollution vulnerability by upgrading axios to 1.13.5 (transitive dependency)

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updated jest-puppeteer version from ^5.0.3 to ^7.0.0 in optionalDependencies
package-lock.json	Updated dependency tree with jest-puppeteer 7.0.0 and all transitive dependencies including security-patched axios 1.13.5

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The upgraded jest-puppeteer version 7.0.0 has a peer dependency requirement of "puppeteer": ">=19", but this project currently uses puppeteer version ^9.1.1. This peer dependency mismatch will cause compatibility issues. The puppeteer package also needs to be upgraded to version 19 or higher to be compatible with jest-puppeteer 7.0.0.

Suggested change

	"puppeteer": "^9.1.1",
	"puppeteer": "^19.0.0",