Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @vue/cli-plugin-eslint from 4.5.13 to 5.0.8 #391

Closed
wants to merge 1 commit into from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade @vue/cli-plugin-eslint from 4.5.13 to 5.0.8.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 36 versions ahead of your current version.
  • The recommended version was released a month ago, on 2022-07-07.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-CSSWHAT-1298035
479/1000
Why? Has a fix available, CVSS 5.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @vue/cli-plugin-eslint
  • 5.0.8 - 2022-07-07

    🐛 Bug Fix

    • @ vue/cli-service
      • 0260e4d fix: add devServer.server.type to useHttps judgement (#7222)
    • @ vue/cli-ui
      • 07052c4 fix: Vue CLI UI graphql subscription server error, fixes #7221
  • 5.0.7 - 2022-07-05
    • @ vue/cli-service
    • @ vue/cli-ui
      • #7210 chore: upgrade to apollo-server-express 3.x

    Committers: 2

  • 5.0.6 - 2022-06-16

    Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue Loader 15.10 (currently in beta).

    In Vue 2.7, vue-template-compiler is no longer a required peer dependency. Rather, there's a new export under the main package as vue/compiler-sfc.

  • 5.0.5 - 2022-06-16

    🐛 Bug Fix

    • @ vue/cli
      • #7167 fix(upgrade): prevent changing the structure of package.json file during upgrade (@ blzsaa)
    • @ vue/cli-service
    • @ vue/cli-plugin-e2e-cypress
      • [697bb44] fix: should correctly resolve cypress bin path for Cypress 10 (Note that the project is still created with Cypress 9 by default, but you can upgrade to Cypress 10 on your own now)

    Committers: 3

  • 5.0.4 - 2022-03-22

    🐛 Bug Fix

    • @ vue/cli-service
    • @ vue/cli-shared-utils, @ vue/cli-ui
      • 75826d6 fix: replace node-ipc with @ achrinza/node-ipc to further secure the dependency chain

    Committers: 1

  • 5.0.3 - 2022-03-15

    5.0.3 (2022-03-15)

    🐛 Bug Fix

    • @ vue/cli-shared-utils, @ vue/cli-ui
      • Lock node-ipc to v9.2.1
  • 5.0.2 - 2022-03-15

    🐛 Bug Fix

    • @ vue/cli-service

    Committers: 2

  • 5.0.1 - 2022-02-17
  • 5.0.0 - 2022-02-17
  • 5.0.0-rc.3 - 2022-02-10
  • 5.0.0-rc.2 - 2022-01-15
  • 5.0.0-rc.1 - 2021-11-17
  • 5.0.0-rc.0 - 2021-11-06
  • 5.0.0-beta.7 - 2021-10-26
  • 5.0.0-beta.6 - 2021-10-14
  • 5.0.0-beta.5 - 2021-10-10
  • 5.0.0-beta.4 - 2021-09-15
  • 5.0.0-beta.3 - 2021-08-10
  • 5.0.0-beta.2 - 2021-06-09
  • 5.0.0-beta.1 - 2021-05-14
  • 5.0.0-beta.0 - 2021-04-25
  • 5.0.0-alpha.8 - 2021-03-24
  • 5.0.0-alpha.7 - 2021-03-11
  • 5.0.0-alpha.6 - 2021-03-10
  • 5.0.0-alpha.5 - 2021-02-23
  • 5.0.0-alpha.4 - 2021-02-18
  • 5.0.0-alpha.3 - 2021-01-22
  • 5.0.0-alpha.2 - 2021-01-06
  • 5.0.0-alpha.1 - 2021-01-06
  • 5.0.0-alpha.0 - 2020-12-14
  • 4.5.19 - 2022-06-28

    IMPORTANT NOTE: IE 11 has reached End-of-Life. The default browserslist query no longer includes IE 11 as a target.
    If your project still has to support IE 11, you MUST manually add IE 11 to the last line of the .browserslistrc file in the project (or browserslist field in package.json)

    🐛 Bug Fix

    • @ vue/babel-preset-app
      • [c7fa1cf] fix: always transpile syntaxes introduced in ES2020 or later, so that optional chaining and nullish coalescing syntaxes won't cause errors in webpack 4 and ESLint 6.
    • @ vue/cli-plugin-typescript
  • 4.5.18 - 2022-06-16

    Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue Loader 15.10 (currently in beta).

    In Vue 2.7, vue-template-compiler is no longer a required peer dependency. Rather, there's a new export under the main package as vue/compiler-sfc.

  • 4.5.17 - 2022-03-23

    🐛 Bug Fix

    • @ vue/cli-shared-utils, @ vue/cli-ui
      • d7a9881 fix: replace node-ipc with @ achrinza/node-ipc to further secure the dependency chain

    Committers: 1

  • 4.5.16 - 2022-03-15
  • 4.5.15 - 2021-10-28
  • 4.5.14 - 2021-10-14
  • 4.5.13 - 2021-05-08
from @vue/cli-plugin-eslint GitHub release notes
Commit messages
Package name: @vue/cli-plugin-eslint
  • b154dbd v5.0.8
  • 4e024b7 ci: bump appveyor node version
  • 0260e4d fix: add devServer.server.type to useHttps judgement (#7222)
  • 07052c4 fix: Vue CLI UI graphql subscription server error
  • a5a893e chore: update changelog
  • 4a0655f v5.0.7
  • 6f9b6ec chore: update fallback chromedriver version
  • 23fa20f chore: upgrade to apollo-server-express 3.x (#7210)
  • beffe8a fix: allow disabling progress plugin via `devServer.client.progress`
  • 558dea2 fix: support `devServer.server` option, avoid deprecation warning
  • bddd64d fix: optimize the judgment on whether HTTPS has been set in options (#7202)
  • ef08a08 v5.0.6
  • 6b163f2 chore: fix lint errors
  • fcf27e3 fixup! fix: compatibility with Vue 2.7
  • a648958 fix: compatibility with Vue 2.7
  • 98c66c9 v5.0.5
  • 64446e0 feat(upgrade): prevent changing the structure of package.json file during upgrade (#7167)
  • 27dba1a fix: eliminate calling deprecated function in cli-plugin-e2e-cypress and cli-plugin-e2e-nightwatch (#7158)
  • 619965b docs: fix 404 links
  • 697bb44 fix: should correctly resolve cypress bin path for Cypress 10
  • b2b07a5 chore: run yarn-audit-fix
  • d5bb358 chore: update lockfile
  • 1452cd3 feat: update cypress to 9.x
  • 00fd2b6 chore: update the @ achrinza/node-ipc to support Node.js 18

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants