[Snyk] Upgrade eslint-plugin-promise from 4.3.1 to 6.1.1

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade eslint-plugin-promise from 4.3.1 to 6.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 10 months ago, on 2022-10-19.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Poisoning SNYK-JS-QS-3153490	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-Y18N-1021887	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Denial of Service (DoS) npm:mem:20180117	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Open Redirect SNYK-JS-GOT-2932019	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Open Redirect SNYK-JS-GOT-2932019	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Authentication Bypass SNYK-JS-HTTPAUTH-471683	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: eslint-plugin-promise

• 6.1.1 - 2022-10-19
  

  6.1.1 (2022-10-19)

  Bug Fixes

  • no-multiple-resolved: false positives when the last expression in a try block is a call to resolve (#384) (dc51b1c)
• 6.1.0 - 2022-10-13
  

  6.1.0 (2022-10-13)

  Bug Fixes

  • always-return: false positives for logical expr (#363) (a60d1cb)
  • CI: fix release script (#380) (71e53a0)
  • minor typos (#359) (b431e46)
  • no-nesting: nested references vars in closure (#361) (08052e8)
  • update repo link (#349) (3906810)

  Features

  • add no-multiple-resolved rule (#369) (3a6fdbe)
  • always-return: add ignoreLastCallback option (#365) (01def31)
  • catch-or-return,no-new-statics,no-promise-in-callback,valid-params: add support for Promise.allSettled() & Promise.any() (#370) (e080f82)
  • param-names: add resolvePattern & rejectPattern option (#368) (df25e3c)
• 6.0.1 - 2022-08-25
  No content.
• 6.0.0 - 2021-12-18
  

  6.0.0

• 5.2.0 - 2021-12-01
  

  5.2.0

• 5.1.1 - 2021-10-21
  

  5.1.1

• 5.1.0 - 2021-04-09
  

  v5.1.0

• 5.0.0 - 2021-04-09
  

  v5.0.0

• 4.3.1 - 2021-02-10
  

  4.3.1

from eslint-plugin-promise GitHub release notes

Commit messages

Package name: eslint-plugin-promise

• dc51b1c fix(no-multiple-resolved): false positives when the last expression in a try block is a call to resolve (Fix PausableToken documentation OpenZeppelin/openzeppelin-contracts#384)
• 70f0012 chore: fix branch of rule docs link URL to `main` (Eternal storage OpenZeppelin/openzeppelin-contracts#381)
• 72cfdc8 chore: sort `package.json` (NPM is not updating with the master branch OpenZeppelin/openzeppelin-contracts#385)
• 71e53a0 fix(CI): fix release script (Fixed typos in documentation OpenZeppelin/openzeppelin-contracts#380)
• 04fa169 chore(CI): add automatic release (Fixed typo in documentation OpenZeppelin/openzeppelin-contracts#379)
• c970565 chore(CI): simplify testing strategy (Feature - Token wallet OpenZeppelin/openzeppelin-contracts#378)
• e8eabf4 chore(deps-dev): bump @ typescript-eslint/parser from 5.39.0 to 5.40.0 (fix for issue 375: transferFrom allows sending to self more than self balance OpenZeppelin/openzeppelin-contracts#377)
• b2136c3 chore(deps-dev): bump eslint from 8.24.0 to 8.25.0 ([bugfix] windows incompatibilty OpenZeppelin/openzeppelin-contracts#376)
• 7cfa19e chore(deps-dev): bump @ typescript-eslint/parser from 5.38.1 to 5.39.0 (Remove beta tag from truffle OpenZeppelin/openzeppelin-contracts#374)
• 8875343 chore(deps): bump styfle/cancel-workflow-action from 0.10.0 to 0.10.1 (Incorrect comment in PausableToken example OpenZeppelin/openzeppelin-contracts#372)
• 55a304c docs(README): add no-multiple-resolved rule link (Typos in StandardToken OpenZeppelin/openzeppelin-contracts#371)
• e080f82 feat(catch-or-return,no-new-statics,no-promise-in-callback,valid-params): add support for `Promise.allSettled()` & `Promise.any()` (Transfer and Approve events are slightly different from ERC20 standard wiki (missing _) OpenZeppelin/openzeppelin-contracts#370)
• 3a6fdbe feat: add `no-multiple-resolved` rule (Make Travis run tests and coverage in parallel OpenZeppelin/openzeppelin-contracts#369)
• df25e3c feat(param-names): add `resolvePattern` & `rejectPattern` option (Remove moment.js dependencies OpenZeppelin/openzeppelin-contracts#368)
• 01def31 feat(always-return): add `ignoreLastCallback` option (Safemath add function integer overflow check OpenZeppelin/openzeppelin-contracts#365)
• a60d1cb fix(always-return): false positives for logical expr (Sync yarn.lock file with package-lock.json OpenZeppelin/openzeppelin-contracts#363)
• 9b3ef57 fix(prefer-await-to-then):member access without call (Upgrade solidity coverage to ^0.2.1 OpenZeppelin/openzeppelin-contracts#362)
• 08052e8 fix(no-nesting): nested references vars in closure (Upgrade Truffle to 3.4.8 OpenZeppelin/openzeppelin-contracts#361)
• ac98c63 chore: also test ESLint v7 on Node v18 (Remove token.finishMinting() from default finalization OpenZeppelin/openzeppelin-contracts#364)
• b431e46 fix: minor typos (Errors in npm dependencies OpenZeppelin/openzeppelin-contracts#359)
• 5fa8a9e ci: Add Node 18 for ESlint 8 only (Make sure yarn.lock is in sync with package-lock.json OpenZeppelin/openzeppelin-contracts#360)
• 91345d9 chore: remove old Travis CI badge and update `.npmignore` (Upgrade to Truffle version 3.2.2 and Solidity version 0.4.11 OpenZeppelin/openzeppelin-contracts#242)
• 81d0f94 chore: lint all files by default and add `--report-unused-disable-directives` flag (Allow Destructible to receive an optional address to which to send funds OpenZeppelin/openzeppelin-contracts#198)
• 5d77f93 chore(deps-dev): bump @ typescript-eslint/parser from 5.38.0 to 5.38.1 (Revisit gas costs of having Crowdsale deploy the token itself OpenZeppelin/openzeppelin-contracts#358)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5c7e119

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR