Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade eslint from 7.25.0 to 9.3.0 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

WontonSam
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade eslint from 7.25.0 to 9.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 84 versions ahead of your current version.

  • The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
169 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
169 Proof of Concept
high severity Improper Privilege Management
SNYK-JS-SHELLJS-2332187
169 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973
169 Proof of Concept
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
169 Proof of Concept
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
169 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GETFUNCNAME-5923417
169 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
169 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
169 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
169 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
169 Proof of Concept
medium severity Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088
169 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856
169 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
169 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795
169 Proof of Concept
Release notes
Package name: eslint
  • 9.3.0 - 2024-05-17

    Features

    • b32153c feat: add overrides.namedExports to func-style rule (#18444) (Percy Ma)
    • b67eba4 feat: add restrictedNamedExportsPattern to no-restricted-exports (#18431) (Akul Srivastava)
    • 069aa68 feat: add option allowEscape to no-misleading-character-class rule (#18208) (Francesco Trotta)
    • 05ef92d feat: deprecate multiline-comment-style & line-comment-position (#18435) (唯然)
    • db0b174 feat: add enforceForInnerExpressions option to no-extra-boolean-cast (#18222) (Kirk Waiblinger)

    Bug Fixes

    • 8db0eff fix: Improve config error messages (#18457) (Nicholas C. Zakas)
    • 5c28d9a fix: don't remove comments between key and value in object-shorthand (#18442) (Kuba Jastrzębski)
    • 39fb0ee fix: object-shorthand loses type parameters when auto-fixing (#18438) (dalaoshu)
    • 37eba48 fix: don't crash when fs.readFile returns promise from another realm (#18416) (Milos Djermanovic)

    Documentation

    • ceada8c docs: explain how to use "tsc waiting" label (#18466) (Francesco Trotta)
    • 62e686c docs: Add troubleshooting info for plugin compatibility (#18451) (Nicholas C. Zakas)
    • e17e1c0 docs: Update README (GitHub Actions Bot)
    • 2465a1e docs: Update README (GitHub Actions Bot)
    • d23574c docs: Clarify usage of no-unreachable with TypeScript (#18445) (benj-dobs)
    • 1db9bae docs: Fix typos (#18443) (Frieder Bluemle)
    • 7065196 docs: Update README (GitHub Actions Bot)
    • 04e7c6e docs: update deprecation notice of no-return-await (#18433) (Tanuj Kanti)
    • e763512 docs: Link global ignores section in config object property list (#18430) (MaoShizhong)
    • ac7f718 docs: reflect release of v9 in config migration guide (#18412) (Peter Briggs)
    • 0de0909 docs: fix grammar in configuration file resolution (#18419) (Mike McCready)

    Chores

    • 58e2719 chore: update dependencies for v9.3.0 release (#18469) (Francesco Trotta)
    • b681ecb chore: package.json update for @ eslint/js release (Jenkins)
    • 06f1d1c chore: update dependency @ humanwhocodes/retry to ^0.3.0 (#18463) (renovate[bot])
    • a63ed72 refactor: Use node: protocol for built-in Node.js modules (#18434) (Milos Djermanovic)
    • 040700a chore: update dependency markdownlint-cli to ^0.40.0 (#18425) (renovate[bot])
    • f47847c chore: update actions/stale action to v9 (#18426) (renovate[bot])
    • c18ad25 chore: update actions/upload-artifact action to v4 (#18427) (renovate[bot])
    • 27e3060 chore: Disable documentation label (#18423) (Nicholas C. Zakas)
  • 9.2.0 - 2024-05-03

    Features

    • 8485d76 feat: no-case-declarations add suggestions (#18388) (Josh Goldberg ✨)
    • a498f35 feat: update Unicode letter detection in capitalized-comments rule (#18375) (Francesco Trotta)

    Bug Fixes

    • eeec413 fix: do not throw when defining a global named defineSetter (#18364) (唯然)

    Documentation

    • 0f5df50 docs: Update README (GitHub Actions Bot)
    • 1579ce0 docs: update wording regarding indirect eval (#18394) (Kirk Waiblinger)
    • f12a02c docs: update to eslint v9 in custom-rule-tutorial (#18383) (唯然)

    Chores

    • b346605 chore: upgrade @ eslint/js@9.2.0 (#18413) (Milos Djermanovic)
    • c4c18e0 chore: package.json update for @ eslint/js release (Jenkins)
    • 284722c chore: package.json update for eslint-config-eslint release (Jenkins)
    • 347d44f chore: remove eslintrc export from eslint-config-eslint (#18400) (Milos Djermanovic)
    • f316e20 ci: run tests in Node.js 22 (#18393) (Francesco Trotta)
  • 9.1.1 - 2024-04-22

    Bug Fixes

    • a26b402 fix: use @ eslint/create-config latest (#18373) (唯然)
  • 9.1.0 - 2024-04-19

    Features

    • 03068f1 feat: Provide helpful error message for nullish configs (#18357) (Nicholas C. Zakas)
    • 751b518 feat: replace dependency graphemer with Intl.Segmenter (#18110) (Francesco Trotta)
    • 4d11e56 feat: add name to eslint configs (#18289) (唯然)
    • 1cbe1f6 feat: allow while(true) in no-constant-condition (#18286) (Tanuj Kanti)
    • 0db676f feat: add Intl in es6 globals (#18318) (唯然)

    Bug Fixes

    • 8d18958 fix: Remove name from eslint/js packages (#18368) (Nicholas C. Zakas)
    • 594eb0e fix: do not crash on error in fs.walk filter (#18295) (Francesco Trotta)
    • 0d8cf63 fix: EMFILE errors (#18313) (Nicholas C. Zakas)
    • e1ac0b5 fix: --inspect-config only for flat config and respect -c (#18306) (Nicholas C. Zakas)
    • 09675e1 fix: --no-ignore should not apply to non-global ignores (#18334) (Milos Djermanovic)

    Documentation

    • fb50077 docs: include notes about globals in migration-guide (#18356) (Gabriel Rohden)
    • 71c771f docs: Fix missing accessible name for scroll-to-top link (#18329) (Germán Freixinós)
    • 200fd4e docs: indicate eslintrc mode for .eslintignore (#18285) (Francesco Trotta)
    • 16b6a8b docs: Update README (GitHub Actions Bot)
    • df5f8a9 docs: paths and patterns difference in no-restricted-imports (#18273) (Tanuj Kanti)
    • c537d76 docs: update npm init @ eslint/config generated file names (#18298) (唯然)
    • e1e305d docs: fix linebreak-style examples (#18262) (Francesco Trotta)
    • 113f51e docs: Mention package.json config support dropped (#18305) (Nicholas C. Zakas)
    • 5c35321 docs: add eslintrc-only note to --rulesdir (#18281) (Adam Lui 刘展鹏)

    Build Related

    • 1fa6622 build: do not use --force flag to install dependencies (#18284) (Francesco Trotta)

    Chores

    • d9a2983 chore: upgrade @ eslint/js to v9.1.1 (#18367) (Francesco Trotta)
    • 50d406d chore: package.json update for @ eslint/js release (Jenkins)
    • 155c71c chore: package.json update for @ eslint/js release (Jenkins)
    • 0588fc5 refactor: Move directive gathering to SourceCode (#18328) (Nicholas C. Zakas)
    • 9048e21 chore: lint docs/src/_data js files (#18335) (Milos Djermanovic)
    • 4820790 chore: upgrade globals@15.0.0 dev dependency (#18332) (Milos Djermanovic)
    • 698d9ff chore: upgrade jsdoc & unicorn plugins in eslint-config-eslint (#18333) (Milos Djermanovic)
    • 32c08cf chore: drop Node < 18 and use @ eslint/js v9 in eslint-config-eslint (#18323) (Milos Djermanovic)
    • a76fb55 chore: @ eslint-community/eslint-plugin-eslint-comments v4.3.0 (#18319) (Milos Djermanovic)
    • 78e45b1 chore: eslint-plugin-eslint-plugin v6.0.0 (#18316) (唯然)
    • 36103a5 chore: eslint-plugin-n v17.0.0 (#18315) (唯然)
  • 9.0.0 - 2024-04-05

    Breaking Changes

    • b7cf3bd fix!: correct camelcase rule schema for allow option (#18232) (eMerzh)
    • 09bd7fe feat!: move AST traversal into SourceCode (#18167) (Nicholas C. Zakas)
    • 79a95eb feat!: disallow multiple configuration comments for same rule (#18157) (Milos Djermanovic)
    • 9163646 feat!: Rule Tester checks for missing placeholder data in the message (#18073) (fnx)
    • 3c4d51d feat!: default for enforceForClassMembers in no-useless-computed-key (#18054) (Francesco Trotta)
    • 47e60f8 feat!: Stricter rule test validations (#17654) (fnx)
    • 1a94589 feat!: no-unused-vars default caughtErrors to 'all' (#18043) (Josh Goldberg ✨)
    • 57089cb feat!: no-restricted-imports allow multiple config entries for same path (#18021) (Milos Djermanovic)
    • 2e1d549 feat!: detect duplicate test cases (#17955) (Bryan Mishkin)
    • 701f1af feat!: no-inner-declaration new default behaviour and option (#17885) (Tanuj Kanti)
    • bde5105 fix!: handle --output-file for empty output when saving to disk (#17957) (Nitin Kumar)
    • 07107a5 fix!: upgrade eslint-scope@8.0.0 (#17942) (Milos Djermanovic)
    • 3ee0f6c fix!: no-unused-vars varsIgnorePattern behavior with catch arguments (#17932) (Tanuj Kanti)
    • 51f8bc8 fix!: configuration comments with just severity should retain options (#17945) (Milos Djermanovic)
    • d191bdd feat!: Remove CodePath#currentSegments (#17936) (Milos Djermanovic)
    • 946ae00 feat!: FlatRuleTester -> RuleTester (#17922) (Nicholas C. Zakas)
    • baff28c feat!: remove no-inner-declarations from eslint:recommended (#17920) (Milos Djermanovic)
    • cadfbcd feat!: Rename FlatESLint to ESLint (#17914) (Nicholas C. Zakas)
    • d1018fc feat!: skip running warnings in --quiet mode (#17274) (Maddy Miller)
    • fb81b1c feat!: Set default schema: [], drop support for function-style rules (#17792) (Milos Djermanovic)
    • 0b21e1f feat!: add two more cases to no-implicit-coercion (#17832) (Gürgün Dayıoğlu)
    • 2916c63 feat!: Switch Linter to flat config by default (#17851) (Nicholas C. Zakas)
    • 200518e fix!: Parsing 'exported' comment using parseListConfig (#17675) (amondev)
    • bdd6ba1 feat!: Remove valid-jsdoc and require-jsdoc (#17694) (Nicholas C. Zakas)
    • 12be307 fix!: Behavior of CLI when no arguments are passed (#17644) (Nicholas C. Zakas)
    • 8fe8c56 feat!: Update shouldUseFlatConfig and CLI so flat config is default (#17748) (Nicholas C. Zakas)
    • 60dea3e feat!: deprecate no-new-symbol, recommend no-new-native-nonconstructor (#17710) (Francesco Trotta)
    • 5aa9c49 feat!: check for parsing errors in suggestion fixes (#16639) (Bryan Mishkin)
    • b3e0bb0 feat!: assert suggestion messages are unique in rule testers (#17532) (Josh Goldberg ✨)
    • e563c52 feat!: no-invalid-regexp make allowConstructorFlags case-sensitive (#17533) (Josh Goldberg ✨)
    • e5f02c7 fix!: no-sequences rule schema correction (#17878) (MHO)
    • 6ee3e9e feat!: Update eslint:recommended configuration (#17716) (Milos Djermanovic)
    • c2cf85a feat!: drop support for string configurations in flat config array (#17717) (Milos Djermanovic)
    • c314fd6 feat!: Remove SourceCode#getComments() (#17715) (Milos Djermanovic)
    • ae78ff1 feat!: Remove deprecated context methods (#17698) (Nicholas C. Zakas)
    • f71c328 feat!: Swap FlatESLint-ESLint, FlatRuleTester-RuleTester in API (#17823) (Nicholas C. Zakas)
    • 5304da0 feat!: remove formatters except html, json(-with-metadata), and stylish (#17531) (Josh Goldberg ✨)
    • e1e827f feat!: Require Node.js ^18.18.0 || ^20.9.0 || >=21.1.0 (#17725) (Milos Djermanovic)

    Features

    • d54a412 feat: Add --inspect-config CLI flag (#18270) (Nicholas C. Zakas)
    • 97ce45b feat: Add reportUsedIgnorePattern option to no-unused-vars rule (#17662) (Pearce Ropion)
    • 3e9fcea feat: Show config names in error messages (#18256) (Nicholas C. Zakas)
    • de40874 feat: Rule Performance Statistics for flat ESLint (#17850) (Mara Kiefer)
    • d85c436 feat: use-isnan report NaN in indexOf and lastIndexOf with fromIndex (#18225) (Tanuj Kanti)
    • b8fb572 feat: add reportUnusedFallthroughComment option to no-fallthrough rule (#18188) (Kirk Waiblinger)

Snyk has created this PR to upgrade eslint from 7.25.0 to 9.3.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/917bae72-b081-4f2a-9ec1-c4345bf314d1?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants