Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade eslint from 7.32.0 to 9.10.0 #19

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

WontonSam
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade eslint from 7.32.0 to 9.10.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 86 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-3244450
63 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
63 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SCSSTOKENIZER-2339884
63 No Known Exploit
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577917
63 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LOADERUTILS-3043105
63 No Known Exploit
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577918
63 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-ENGINEIO-3136336
63 No Known Exploit
high severity Uncaught Exception
SNYK-JS-ENGINEIO-5496331
63 No Known Exploit
high severity Uncaught Exception
SNYK-JS-SOCKETIO-7278048
63 No Known Exploit
critical severity Improper Input Validation
SNYK-JS-SOCKETIOPARSER-3091012
63 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
63 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
63 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
63 Proof of Concept
high severity Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
63 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GETFUNCNAME-5923417
63 Proof of Concept
high severity Improper Verification of Cryptographic Signature
SNYK-JS-BROWSERIFYSIGN-6037026
63 No Known Exploit
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
63 Proof of Concept
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
63 Proof of Concept
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
63 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-5596892
63 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
63 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
63 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
63 Proof of Concept
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
63 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LOADERUTILS-3043105
63 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970
63 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
63 Proof of Concept
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
63 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943
63 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
63 No Known Exploit
medium severity Server-Side Request Forgery (SSRF)
SNYK-JS-IP-7148531
63 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856
63 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943
63 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856
63 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
63 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973
63 Proof of Concept
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577916
63 Proof of Concept
Release notes
Package name: eslint
  • 9.10.0 - 2024-09-06

    Features

    • 301b90d feat: Add types (#18854) (Nicholas C. Zakas)
    • bcf0df5 feat: limit namespace import identifier in id-length rule (#18849) (ChaedongIm)
    • 45c18e1 feat: add requireFlag option to require-unicode-regexp rule (#18836) (Brett Zamir)
    • 183b459 feat: add error message for duplicate flags in no-invalid-regexp (#18837) (Tanuj Kanti)
    • c69b406 feat: report duplicate allowed flags in no-invalid-regexp (#18754) (Tanuj Kanti)

    Documentation

    • bee0e7a docs: update README (#18865) (Milos Djermanovic)
    • 5d80b59 docs: specify that ruleId can be null in custom formatter docs (#18857) (Milos Djermanovic)
    • 156b1c3 docs: Update README (GitHub Actions Bot)
    • f6fdef9 docs: Update README (GitHub Actions Bot)
    • a20c870 docs: Update README (GitHub Actions Bot)
    • 90e699b docs: Update README (GitHub Actions Bot)

    Chores

    • 24c3ff7 chore: upgrade to @ eslint/js@9.10.0 (#18866) (Francesco Trotta)
    • 1ebdde1 chore: package.json update for @ eslint/js release (Jenkins)
    • e8fc5bd chore: update dependency @ eslint/core to ^0.5.0 (#18848) (renovate[bot])
    • 343f992 refactor: don't use node.value when removing unused directives (#18835) (Milos Djermanovic)
    • 3db18b0 refactor: Extract FileContext into class (#18831) (Nicholas C. Zakas)
    • 931d650 refactor: Use @ eslint/plugin-kit (#18822) (Nicholas C. Zakas)
    • ed5cf0c chore: update dependency @ eslint/json to ^0.4.0 (#18829) (Milos Djermanovic)
    • d1f0831 chore: added missing ids (#18817) (Strek)
    • ec92813 refactor: Config class (#18763) (Nicholas C. Zakas)
  • 9.9.1 - 2024-08-23

    Bug Fixes

    • 9bde90c fix: add logic to handle fixTypes in lintText() (#18736) (Amaresh S M)

    Documentation

    • 4840930 docs: Update README with version support and clean up content (#18804) (Nicholas C. Zakas)
    • f61f40d docs: Update globals examples (#18805) (Nicholas C. Zakas)
    • 241fcea docs: Use and define languages (#18795) (Nicholas C. Zakas)
    • 5dbdd63 docs: eslint-plugin-markdown -> @ eslint/markdown (#18797) (Nicholas C. Zakas)
    • c6c8ddd docs: update links to eslint-visitor-keys repo (#18796) (Francesco Trotta)
    • f981d05 docs: Update README (GitHub Actions Bot)
    • b516974 docs: update links to eslint/js repo (#18781) (Francesco Trotta)
    • fb7a3f5 docs: update note for package managers (#18779) (Jay)

    Chores

    • b0c34d0 chore: upgrade to @ eslint/js@9.9.1 (#18809) (Francesco Trotta)
    • cd5a0da chore: package.json update for @ eslint/js release (Jenkins)
    • e112642 refactor: Extract parsing logic from Linter (#18790) (Nicholas C. Zakas)
    • 0f68a85 chore: use eslint-plugin-yml on yaml files only (#18801) (Milos Djermanovic)
    • f8d1b3c chore: update dependencies for browser tests (#18794) (Christian Bromann)
    • aed2624 chore: update dependency @ eslint/config-array to ^0.18.0 (#18788) (renovate[bot])
    • 5c29128 chore: update dependency @ eslint/core to ^0.4.0 (#18789) (renovate[bot])
    • 5d66fb2 chore: migrate linting workflow to use trunk check meta-linter (#18643) (Chris Clearwater)
    • bf96855 chore: add ids to github issue templates (#18775) (Strek)
  • 9.9.0 - 2024-08-09

    Features

    • 41d0206 feat: Add support for TS config files (#18134) (Arya Emami)
    • 3a4eaf9 feat: add suggestion to require-await to remove async keyword (#18716) (Dave)

    Documentation

    • 9fe068c docs: how to author plugins with configs that extend other configs (#18753) (Alec Gibson)
    • 48117b2 docs: add version support page in the side navbar (#18738) (Amaresh S M)
    • fec2951 docs: add version support page to the dropdown (#18730) (Amaresh S M)
    • 38a0661 docs: Fix typo (#18735) (Zaina Al Habash)
    • 3c32a9e docs: Update yarn command for creating ESLint config (#18739) (Temitope Ogunleye)
    • f9ac978 docs: Update README (GitHub Actions Bot)

    Chores

    • 461b2c3 chore: upgrade to @ eslint/js@9.9.0 (#18765) (Francesco Trotta)
    • 59dba1b chore: package.json update for @ eslint/js release (Jenkins)
    • fea8563 chore: update dependency @ eslint/core to ^0.3.0 (#18724) (renovate[bot])
    • aac191e chore: update dependency @ eslint/json to ^0.3.0 (#18760) (renovate[bot])
    • b97fa05 chore: update wdio dependencies for more stable tests (#18759) (Christian Bromann)
  • 9.8.0 - 2024-07-26

    Features

    • 13d0bd3 feat: Add and use SourceCode#getLoc/getRange (#18703) (Nicholas C. Zakas)

    Bug Fixes

    • ab0ff27 fix: Throw error when invalid flags passed (#18705) (Nicholas C. Zakas)
    • 70dc803 fix: basePath directory can never be ignored (#18711) (Milos Djermanovic)

    Documentation

    Build Related

    • 4514424 build: Enable JSON linting (#18681) (Nicholas C. Zakas)

    Chores

    • deee448 chore: upgrade to @ eslint/js@9.8.0 (#18720) (Francesco Trotta)
    • 4aaf2b3 chore: package.json update for @ eslint/js release (Jenkins)
    • 8e1a627 chore: update dependency @ eslint/core to ^0.2.0 (#18700) (renovate[bot])
  • 9.7.0 - 2024-07-12

    Features

    • 7bd9839 feat: add support for es2025 duplicate named capturing groups (#18630) (Yosuke Ota)
    • 1381394 feat: add regex option in no-restricted-imports (#18622) (Nitin Kumar)

    Bug Fixes

    • 14e9f81 fix: destructuring in catch clause in no-unused-vars (#18636) (Francesco Trotta)

    Documentation

    • 9f416db docs: Add Powered by Algolia label to the search. (#18633) (Amaresh S M)
    • c8d26cb docs: Open JS Foundation -> OpenJS Foundation (#18649) (Milos Djermanovic)
    • 6e79ac7 docs: loadESLint does not support option cwd (#18641) (Francesco Trotta)

    Chores

    • 793b718 chore: upgrade @ eslint/js@9.7.0 (#18680) (Francesco Trotta)
    • 7ed6f9a chore: package.json update for @ eslint/js release (Jenkins)
    • 7bcda76 refactor: Add type references (#18652) (Nicholas C. Zakas)
    • 51bf57c chore: add tech sponsors through actions (#18624) (Strek)
    • 6320732 refactor: don't use parent property in NodeEventGenerator (#18653) (Milos Djermanovic)
    • 9e6d640 refactor: move "Parsing error" prefix adding to Linter (#18650) (Milos Djermanovic)
  • 9.6.0 - 2024-06-28

    Features

    • e2b16e2 feat: Implement feature flags (#18516) (Nicholas C. Zakas)
    • 8824aa1 feat: add ecmaVersion: 2025, parsing duplicate named capturing groups (#18596) (Milos Djermanovic)

    Bug Fixes

    • 1613e2e fix: Allow escaping characters in config patterns on Windows (#18628) (Milos Djermanovic)
    • 21d3766 fix: no-unused-vars include caught errors pattern in report message (#18609) (Kirk Waiblinger)
    • d7a7736 fix: improve no-unused-vars message on unused caught errors (#18608) (Kirk Waiblinger)
    • f9e95d2 fix: correct locations of invalid /* eslint */ comments (#18593) (Milos Djermanovic)

    Documentation

    • 13dbecd docs: Limit search to just docs (#18627) (Nicholas C. Zakas)
    • 375227f docs: Update getting-started.md - add pnpm to init eslint config (#18599) (Kostiantyn Ochenash)
    • 44915bb docs: Update README (GitHub Actions Bot)
    • d50db7b docs: Update vscode-eslint info (#18595) (Nicholas C. Zakas)

    Chores

    • b15ee30 chore: upgrade @ eslint/js@9.6.0 (#18632) (Milos Djermanovic)
    • d655503 chore: package.json update for @ eslint/js release (Jenkins)
    • 7c78ad9 refactor: Use language.visitorKeys and check for non-JS SourceCode (#18625) (Nicholas C. Zakas)
    • 69ff64e refactor: Return value of applyInlineConfig() (#18623) (Nicholas C. Zakas)
    • d2d06f7 refactor: use / separator when adjusting ignorePatterns on Windows (#18613) (Milos Djermanovic)
    • 6421973 refactor: fix disable directives for languages with 0-based lines (#18605) (Milos Djermanovic)
    • 0a13539 refactor: Allow optional methods for languages (#18604) (Nicholas C. Zakas)
    • c7ddee0 chore: make internal-rules not being a package (#18601) (Milos Djermanovic)
    • 3379164 chore: remove .eslintrc.js (#18011) (唯然)
    • d0c3a32 chore: update knip (with webdriver-io plugin) (#18594) (Lars Kappert)
  • 9.5.0 - 2024-06-14

    Features

    • b2d256c feat: no-sparse-arrays report on "comma" instead of the whole array (#18579) (fisker Cheung)

    Bug Fixes

    • 6880286 fix: treat * as a universal pattern (#18586) (Milos Djermanovic)
    • 7fbe211 fix: message template for all files ignored (#18564) (Milos Djermanovic)
    • 469cb36 fix: Don't lint the same file multiple times (#18552) (Milos Djermanovic)
    • 5cff638 fix: improve message for ignored files without a matching config (#18404) (Francesco Trotta)

    Documentation

    • 455f7fd docs: add section about including .gitignore files (#18590) (Milos Djermanovic)
    • 721eafe docs: update info about universal files patterns (#18587) (Francesco Trotta)
    • 8127127 docs: Update README (GitHub Actions Bot)
    • 55c2a66 docs: Update README (GitHub Actions Bot)
    • eb76282 docs: Update README (GitHub Actions Bot)
    • ff6e96e docs: baseConfig and overrideConfig can be arrays (#18571) (Milos Djermanovic)
    • d2d83e0 docs: Add mention of eslint-transforms to v9 migration guide (#18566) (Nicholas C. Zakas)
    • 9ce6832 docs: add callout box for unintuitive behavior (#18567) (Ben McCann)
    • b8db99c docs: Add VS Code info to config migration guide (#18555) (Nicholas C. Zakas)
    • 518a35c docs: Mention config migrator (#18561) (Nicholas C. Zakas)
    • eb440fc docs: specifying files with arbitrary or no extension (

Snyk has created this PR to upgrade eslint from 7.32.0 to 9.10.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/c4d47d6c-dcc6-4023-914d-eb139ccdeaac?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

google-cla bot commented Oct 2, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants