Update dependency mocha to v11

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Confidence
mocha (source)	10.7.3 -> 11.7.2

---

Release Notes

mochajs/mocha (mocha)

v11.7.2

Compare Source

🩹 Fixes

• fail with an informative error message on a file with a broken default import (#​5413) (b0e6135)
• load mjs files correctly (#​5429) (a947b9b)

📚 Documentation

• add banner from old site to new site, link from new to old (#​5414) (dedef11)
• add info on spies to legacy docs (#​5421) (21f5544)
• explain node import swallowing error (#​5401) (09f5b2c)
• fix links in new site (#​5416) (b2bc769)
• migrate assertion libraries wiki link to main docs (#​5442) (95f3ca8)
• migrate count assertions wiki page to docs (#​5438) (02a306c)
• migrate shared behaviours to docs-next (#​5432) (1dc4aa9)
• migrate Spies wiki page to explainers (#​5420) (cbcf007)
• Migrate tagging wiki page to docs (#​5435) (876247a)
• migrate third party reporters wiki page to docs (#​5433) (f70764c)
• migrate to global leak wiki page to docs (#​5437) (8a6fdca)
• update /next bug report link to be docs issue template (#​5424) (668cb66)

🧹 Chores

• add issue form for ⚡️ Performance (#​5406) (a908b3b)
• add test for -R import-only-loader (#​5391) (6ee5b48)
• also test Node.js 24 in CI (#​5405) (15f5980)
• bump CI to use 20.19.4, 22.18.0, 24.6.0 (#​5430) (ace5eb4)
• bump Knip to 5.61.2 (#​5394) (f3d7430)
• cleanup references of --opts (#​5402) (1096b37)
• enabled ESLint's no-unused-vars (#​5399) (d4168ae)
• move callback and object typedefs to a new types.d.ts (#​5351) (3300d21)
• rewrite base path instead of copy-pasting (#​5431) (c6c6740)
• unify caught errors as err (#​5439) (d4912e7)
• Update experimental module detection test and pin exact Node versions (#​5417) (2489090)

🤖 Automation

• deps: bump actions/checkout in the github-actions group (#​5419) (03ac2d0)

v11.7.1

Compare Source

🩹 Fixes

• always fallback to import() if require() fails (#​5384) (295c168)

🧹 Chores

• add esm loader test (#​5383) (f58e49f)

v11.7.0

Compare Source

🌟 Features

• use require to load esm (#​5366) (41e24a2)

v11.6.0

Compare Source

🌟 Features

• bump workerpool from ^6.5.1 to ^9.2.0 (#​5350) (581a3c5)

v11.5.0

Compare Source

🌟 Features

• bump mimimatch from ^5.1.6 to ^9.0.5 (#​5349) (a3dea85)

v11.4.0

Compare Source

🌟 Features

• bump diff from ^5.2.0 to ^7.0.0 (#​5348) (554d6bb)

📚 Documentation

• added CHANGELOG.md note around 11.1 yargs-parser update (#​5362) (618415d)

v11.3.0

Compare Source

🌟 Features

• add option to use posix exit code upon fatal signal (#​4989) (91bbf85)

📚 Documentation

• Deploy new site alongside old one (#​5360) (6c96545)
• mention explicit browser support range (#​5354) (c514c0b)
• update Node.js version requirements for 11.x (#​5329) (abf3dd9)

🧹 Chores

• remove prerelease setting in release-please config (#​5363) (8878f22)

v11.2.2

Compare Source

🩹 Fixes

• deps: update chokidar to v4 (#​5256) (8af0f1a)

📚 Documentation

• add ClientRedirects.astro (#​5324) (b88d441)
• add example/tests.html to docs-next (#​5325) (6ec5762)

v11.2.1

Compare Source

🩹 Fixes

• switch from ansi-colors to picocolors (#​5323) (7c08d09)

📚 Documentation

• fix new website typos, improve readability (#​5312) (fbceb19)

🧹 Chores

• "force" Netlify to use npm to build new site (#​5319) (3a46855)
• Fix tests (#​5320) (18699a0)

v11.2.0

Compare Source

🌟 Features

• enable reporters to show relative paths of tests (#​5292) (81ea666)

📚 Documentation

• add instructions for API docs (#​5287) (b720ec1)
• add new website using Astro Starlight (#​5246) (b1f1cb7)
• improve third-party reporter docs (#​5285) (c5a0ef5)

🧹 Chores

• enabled eslint-plugin-n (#​5280) (945d6e3)
• pin node-lts tests to 22.11.0 (#​5279) (664e1f4)
• replace fs-extra with newer fs built-ins (#​5284) (75dcf8c)

v11.1.0

Compare Source

🌟 Features

• bump yargs to 17 (#​5165) (8f1c8d8)
  • Note that this also included a version bump of yargs-parser from ^20.2.9 to ^21.1., which fixed a bug that caused extra quotes in file paths to be removed.
    See #​5341 for more information.
• replace strip-ansi with util.stripVTControlCharacters (#​5267) (3c191c0), closes #​5265

v11.0.2

Compare Source

🩹 Fixes

• catch exceptions setting Error.stackTraceLimit (#​5254) (259f8f8)
• error handling for unexpected numeric arguments passed to cli (#​5263) (210d658)

📚 Documentation

• correct outdated status: accepting prs link (#​5268) (f729cd0)
• replace "New in" with "Since" in version annotations (#​5262) (6f10d12)

v11.0.1

Compare Source

🌟 Features

• bumped glob dependency from 8 to 10 (#​5250) (43c3157)

📚 Documentation

• fix examples for linkPartialObjects methods (#​5255) (34e0e52)

v11.0.0

Compare Source

⚠ BREAKING CHANGES

• adapt new engine range for Mocha 11 (#​5216)

🌟 Features

• allow calling hook methods (#​5231) (e3da641)

🩹 Fixes

• adapt new engine range for Mocha 11 (#​5216) (80da25a)

📚 Documentation

• downgrade example/tests chai to 4.5.0 (#​5245) (eac87e1)

v10.8.2

Compare Source

🩹 Fixes

• support errors with circular dependencies in object values with --parallel (#​5212) (ba0fefe)
• test link in html reporter (#​5224) (f054acc)

📚 Documentation

• indicate 'exports' interface does not work in browsers (#​5181) (14e640e)

🧹 Chores

• fix docs builds by re-adding eleventy and ignoring gitignore again (#​5240) (881e3b0)

🤖 Automation

• deps: bump the github-actions group with 1 update (#​5132) (e536ab2)

v10.8.1

Compare Source

🩹 Fixes

• handle case of invalid package.json with no explicit config (#​5198) (f72bc17)
• Typos on mochajs.org (#​5237) (d8ca270)
• use accurate test links in HTML reporter (#​5228) (68803b6)

v10.8.0

Compare Source

🌟 Features

• highlight browser failures (#​5222) (8ff4845)

🩹 Fixes

• remove :is() from mocha.css to support older browsers (#​5225) (#​5227) (0a24b58)

📚 Documentation

• add SECURITY.md pointing to Tidelift (#​5210) (bd7e63a)
• adopt Collective Funds Guidelines 0.1 (#​5199) (2b03d86)
• update README, LICENSE and fix outdated (#​5197) (1203e0e)

🧹 Chores

• fix npm scripts on windows (#​5219) (1173da0)
• remove trailing whitespace in SECURITY.md (7563e59)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pedroCollogno]

This is a good update that would fix one of the indirect dependencies for the CVE-2025-5889

❯ npm ls brace-expansion
archiver-utils@5.0.2
├─┬ glob@10.4.5
│ └─┬ minimatch@9.0.5
│   └── brace-expansion@2.0.1
└─┬ mocha@10.7.3
  └─┬ minimatch@5.1.6
    └── brace-expansion@2.0.1