Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade eslint from 8.57.0 to 9.15.0 #21

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

nerdy-tech-com-gitub
Copy link
Owner

@nerdy-tech-com-gitub nerdy-tech-com-gitub commented Dec 7, 2024

snyk-top-banner

Snyk has created this PR to upgrade eslint from 8.57.0 to 9.15.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 27 versions ahead of your current version.

  • The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
169 Proof of Concept
high severity Prototype Pollution
SNYK-JS-INTLIFYSHARED-8442251
169 Proof of Concept
high severity Prototype Pollution
SNYK-JS-VUEI18N-8442254
169 Proof of Concept
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
169 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-INTLIFYCOREBASE-8442262
169 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097
169 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-VUEI18N-8442260
169 Proof of Concept
Release notes
Package name: eslint
  • 9.15.0 - 2024-11-15

    Features

    • 01557ce feat: Implement Language#normalizeLanguageOptions() (#19104) (Nicholas C. Zakas)
    • 2edc0e2 feat: add meta.defaultOptions (#17656) (Josh Goldberg ✨)
    • bdec50e feat: fix no-useless-computed-key false negative with __proto__ (#19123) (Milos Djermanovic)
    • 3087c9e feat: add meta object to @ eslint/js plugin (#19095) (Francesco Trotta)

    Bug Fixes

    • fd33f13 fix: update types for no-restricted-imports rule (#19060) (Nitin Kumar)
    • bd35098 fix: switch away from Node.js node:assert and AssertionError (#19082) (Josh Goldberg ✨)
    • 9db5b15 fix: unsafe report for no-lonely-if (#19087) (Abraham Guo)
    • 68fa497 fix: ignore files on a different drive on Windows (#19069) (Francesco Trotta)
    • 4ce625a fix: upgrade @ humanwhocodes/[email protected] to avoid debug logs (#19102) (Milos Djermanovic)

    Documentation

    • d927920 docs: fix styles in no-js mode (#18916) (Tanuj Kanti)
    • 09bc2a8 docs: Update README (GitHub Actions Bot)
    • 39089c8 docs: add no-useless-computed-key examples with object patterns (#19109) (Milos Djermanovic)
    • 895c60f docs: add missing messageId property and suggestion properties (#19122) (fnx)
    • 298625e docs: Change CLI -c to use flat config (#19103) (Nicholas C. Zakas)
    • 522d8a3 docs: add deprecation on indent, quotes and semi rule types (#19090) (Marco Pasqualetti)

    Chores

  • 9.14.0 - 2024-11-01

    Features

    • 3fa009f feat: add support for Import Attributes and RegExp Modifiers (#19076) (Milos Djermanovic)
    • b0faee3 feat: add types for the @ eslint/js package (#19010) (Nitin Kumar)

    Bug Fixes

    • 24d0172 fix: enable retry concurrency limit for readFile() (#19077) (Nicholas C. Zakas)
    • b442067 fix: Don't crash when directory is deleted during traversal. (#19067) (Nicholas C. Zakas)
    • d474443 fix: avoid call stack overflow while processing globs (#19035) (Livia Medeiros)

    Documentation

    • 151c965 docs: update context.languageOptions.parser description (#19084) (Nitin Kumar)
    • dc34f94 docs: Update README (GitHub Actions Bot)
    • f16e846 docs: Update README (GitHub Actions Bot)
    • ee0a77e docs: change link from @ types/eslint to lib/types (#19049) (Karl Horky)
    • 50f03a1 docs: Clarify global ignores in config migration guide (#19032) (Milos Djermanovic)

    Build Related

    • 37c9177 build: update @ wdio/* dependencies (#19068) (Francesco Trotta)
    • 35a8858 build: exclude flawed dendency versions (#19065) (Francesco Trotta)

    Chores

    • f36cb16 chore: upgrade @ eslint/[email protected] (#19086) (Milos Djermanovic)
    • 28be447 chore: package.json update for @ eslint/js release (Jenkins)
    • f48a2a0 test: add no-invalid-regexp tests with RegExp Modifiers (#19075) (Milos Djermanovic)
    • 425202e perf: Fix caching in config loaders (#19042) (Milos Djermanovic)
    • 3d44b3c ci: run tests in Node.js 23 (#19055) (Francesco Trotta)
    • 7259627 test: ensure tmp directory cleanup in check-emfile-handling.js (#19036) (Livia Medeiros)
  • 9.13.0 - 2024-10-18

    Features

    • 381c32b feat: Allow languages to provide defaultLanguageOptions (#19003) (Milos Djermanovic)
    • bf723bd feat: Improve eslintrc warning message (#19023) (Milos Djermanovic)
    • 1def4cd feat: drop support for jiti v1.21 (#18996) (Francesco Trotta)
    • f879be2 feat: export ESLint.defaultConfig (#18983) (Nitin Kumar)

    Bug Fixes

    Documentation

    • abdbfa8 docs: mark LintMessage#nodeType as deprecated (#19019) (Nitin Kumar)
    • 19e68d3 docs: update deprecated rules type definitions (#19018) (Nitin Kumar)
    • 7dd402d docs: Update examples of passing multiple values to a CLI option (#19006) (Milos Djermanovic)
    • 5dcbc51 docs: Add example with side-effect imports to no-restricted-imports (#18997) (Milos Djermanovic)
    • 1ee87ca docs: Update README (GitHub Actions Bot)
    • 2c3dbdc docs: Use prerendered sponsors for README (#18988) (Milos Djermanovic)

    Chores

  • 9.12.0 - 2024-10-04

    Features

    • 5a6a053 feat: update to jiti v2 (#18954) (Arya Emami)
    • 17a07fb feat: Hooks for test cases (RuleTester) (#18771) (Anna Bocharova)
    • 2ff0e51 feat: Implement alternate config lookup (#18742) (Nicholas C. Zakas)
    • 2d17453 feat: Implement modified cyclomatic complexity (#18896) (Dmitry Pashkevich)

    Bug Fixes

    • ea380ca fix: Upgrade retry to avoid EMFILE errors (#18986) (Nicholas C. Zakas)
    • fdd6319 fix: Issues with type definitions (#18940) (Arya Emami)

    Documentation

    • ecbd522 docs: Mention code explorer (#18978) (Nicholas C. Zakas)
    • 7ea4ecc docs: Clarifying the Use of Meta Objects (#18697) (Amaresh S M)
    • d3e4b2e docs: Clarify how to exclude .js files (#18976) (Milos Djermanovic)
    • 57232ff docs: Mention plugin-kit in language docs (#18973) (Nicholas C. Zakas)
    • b80ed00 docs: Update README (GitHub Actions Bot)
    • cb69ab3 docs: Update README (GitHub Actions Bot)
    • 7fb0d95 docs: Update README (GitHub Actions Bot)
    • 493348a docs: Update README (GitHub Actions Bot)
    • 87a582c docs: fix typo in id-match rule (#18944) (Jay)

    Chores

    • 555aafd chore: upgrade to @ eslint/[email protected] (#18987) (Francesco Trotta)
    • 873ae60 chore: package.json update for @ eslint/js release (Jenkins)
    • d0a5414 refactor: replace strip-ansi with native module (#18982) (Cristopher)
    • b827029 chore: Enable JSON5 linting (#18979) (Milos Djermanovic)
    • 8f55ca2 chore: Upgrade espree, eslint-visitor-keys, eslint-scope (#18962) (Nicholas C. Zakas)
    • c1a2725 chore: update dependency mocha to ^10.7.3 (#18945) (Milos Djermanovic)
  • 9.11.1 - 2024-09-23

    Bug Fixes

    • 20fd916 fix: add @ eslint/core, @ types/estree, & @ types/json-schema deps (#18938) (Nitin Kumar)
    • 2738322 fix: add missing types for require-atomic-updates rule (#18937) (Kristóf Poduszló)
    • d71ff30 fix: add missing types for object-shorthand rule (#18935) (Kristóf Poduszló)
    • 561cadc fix: add missing types for no-unsafe-negation rule (#18932) (Kristóf Poduszló)
    • 8843656 fix: add missing types for no-underscore-dangle rule (#18931) (Kristóf Poduszló)
    • 92cde5c fix: add missing types for no-shadow rule (#18930) (Kristóf Poduszló)
    • b3cbe11 fix: add missing types for no-sequences rule (#18929) (Kristóf Poduszló)
    • 976f77f fix: add missing types for no-unused-expressions rule (#18933) (Kristóf Poduszló)

    Documentation

    • 3eff709 docs: replace deprecated Linter.FlatConfig type with Linter.Config (#18941) (Carlos Meira)

    Chores

  • 9.11.0 - 2024-09-20

    Features

    • ec30c73 feat: add "eslint/universal" to export Linter (#18883) (唯然)
    • c591da6 feat: Add language to types (#18917) (Nicholas C. Zakas)
    • 492eb8f feat: limit the name given to ImportSpecifier in id-length (#18861) (Tanuj Kanti)
    • 19c6856 feat: Add no-useless-constructor suggestion (#18799) (Jordan Thomson)
    • a48f8c2 feat: add type FormatterFunction, update LoadedFormatter (#18872) (Francesco Trotta)

    Bug Fixes

    • 5e5f39b fix: add missing types for no-restricted-exports rule (#18914) (Kristóf Poduszló)
    • 8f630eb fix: add missing types for no-param-reassign options (#18906) (Kristóf Poduszló)
    • d715781 fix: add missing types for no-extra-boolean-cast options (#18902) (Kristóf Poduszló)
    • 2de5742 fix: add missing types for no-misleading-character-class options (#18905) (Kristóf Poduszló)
    • c153084 fix: add missing types for no-implicit-coercion options (#18903) (Kristóf Poduszló)
    • fa11b2e fix: add missing types for no-empty-function options (#18901) (Kristóf Poduszló)
    • a0deed1 fix: add missing types for camelcase options (#18897) (Kristóf Poduszló)

    Documentation

    • e4e5709 docs: correct prefer-object-has-own type definition comment (#18924) (Nitin Kumar)
    • 91cbd18 docs: add unicode abbreviations in no-irregular-whitespace rule (#18894) (Alix Royere)
    • 59cfc0f docs: clarify resultsMeta in LoadedFormatter type (#18881) (Milos Djermanovic)
    • adcc50d docs: Update README (GitHub Actions Bot)
    • 4edac1a docs: Update README (GitHub Actions Bot)

    Build Related

    • 959d360 build: Support updates to previous major versions (#18871) (Milos Djermanovic)

    Chores

Snyk has created this PR to upgrade eslint from 8.57.0 to 9.15.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/a6d95be2-6fa7-418d-8fd1-0cd3974eee23?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

sourcery-ai bot commented Dec 7, 2024

Reviewer's Guide by Sourcery

This PR upgrades the ESLint dependency from version 8.57.0 to 9.15.0. This is a major version upgrade that includes several new features, bug fixes, and improvements. The upgrade addresses multiple security vulnerabilities including high severity issues related to Regular Expression Denial of Service (ReDoS) and Prototype Pollution.

No diagrams generated as the changes look simple and do not need a visual representation.

File-Level Changes

Change Details Files
Update ESLint dependency to latest major version
  • Upgrade from version 8.57.0 to 9.15.0
  • Fix high severity ReDoS vulnerability (SNYK-JS-CROSSSPAWN-8303230)
  • Fix high severity Prototype Pollution vulnerabilities (SNYK-JS-INTLIFYSHARED-8442251, SNYK-JS-VUEI18N-8442254)
  • Fix multiple medium severity XSS vulnerabilities
frontend/package.json

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time. You can also use
    this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Copy link

github-actions bot commented Dec 7, 2024

Hey there and thank you for opening this pull request! 👋🏼

We require pull request titles to follow the Conventional Commits specification and it looks like your proposed title needs to be adjusted.

Details:

No release type found in pull request title "[Snyk] Upgrade eslint from 8.57.0 to 9.15.0". Add a prefix to indicate what kind of release this pull request corresponds to. For reference, see https://www.conventionalcommits.org/

Available types:
 - feat: A new feature
 - fix: A bug fix
 - docs: Documentation only changes
 - style: Changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc)
 - refactor: A code change that neither fixes a bug nor adds a feature
 - perf: A code change that improves performance
 - test: Adding missing tests or correcting existing tests
 - build: Changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)
 - ci: Changes to our CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs)
 - chore: Other changes that don't modify src or test files
 - revert: Reverts a previous commit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants