Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

⬆️ Updates eslint-plugin-unicorn to v54 #1828

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

⬆️ Updates eslint-plugin-unicorn to v54 #1828

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Jun 14, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
eslint-plugin-unicorn ^34.0.1 -> ^54.0.0 age adoption passing confidence

Release Notes

sindresorhus/eslint-plugin-unicorn (eslint-plugin-unicorn)

v54.0.0

Compare Source

New rules
Breaking
Improvements
Fixes

v53.0.0

Compare Source

New rules
Breaking
Meta
Improvements
  • Support ESLint 9 (#​2250) 598f57b
  • no-array-method-this-argument: Check Array.fromAsync() (#​2330) 99489b9
  • prefer-number-properties: Add checkNaN option (#​2315) d30de50
  • template-indent: Support member expression paths in tags and functions (#​2346) aabcf1d
  • prefer-number-properties: Don't require by default for Infinity/-Infinity to be written as Number.POSITIVE_INFINITY/Number.NEGATIVE_INFINITY (#​2312) e0dfed2
  • escape-case: Ignore String.raw (#​2342) 45bd444
  • no-hex-escape: Ignore String.raw (#​2343) cc02a7f
  • prefer-dom-node-dataset: Ignore awaited getAttribute call (#​2334) 45f23d5
  • prevent-abbreviations: Support non-ASCII filenames (#​2308) 28762c8
  • throw-new-error: Check all call expressions instead of just argument of ThrowStatement (#​2332) 1626852

v52.0.0

Compare Source

New rules
Improvements
  • filename-case: Add option for multiple file extensions (#​2186) 4594020
  • import-style: Support node: protocol (#​2297) c28a086
  • prefer-array-find: Check array.filter().at(0) (#​2284) e6074fe
  • prefer-prototype-methods: Check Object.prototype methods from globalThis (#​2286) 1792d33
  • no-array-callback-reference: Check logical expressions and check ternaries deeply (#​2289) 231529a
Fixes

v51.0.1

Compare Source

  • prefer-node-protocol: Fix false positive on bun:* modules (#​2272) 43fc638

v51.0.0

Compare Source

Breaking
  • consistent-destructuring: Remove from recommended preset (#​2260) 702d51b
Improvements
Fixes

v50.0.1

Compare Source

Fixes
  • no-unnecessary-polyfills: Fix missing dependency error (#​2242) 3df1606

v50.0.0

Compare Source

New rules
Improvements
Fixes

v49.0.0

Compare Source

Improvements
  • expiring-todo-comments: Support monorepos (#​2159) ac51d40
  • prefer-module: Allow module as TSIndexSignature names or TSTypeAliasDeclaration ids (#​2209) ea94b3b
  • Support RegExp v flag (#​2195) 28e7498
  • prefer-event-target: Ignore EventEmitter from @angular/core and eventemitter3 (#​2197) 1629ebe

v48.0.1

Compare Source

  • no-empty-file: Fix directive check for TypeScript parser (#​2180) 1bb9ce8

v48.0.0

Compare Source

Improvements
  • Deprecate no-unsafe-regex rule (#​2135) 7b473aa
  • prefer-top-level-await: Ignore promises inside Promise.{all,allSettled,any,race}() (#​2139) d3f6b60
  • no-process-exit: Ignore when using node:worker_threads module (#​2136) 2907805
  • prefer-array-some: Ignore filter calls with literal argument (#​2097) 7a32edb
  • prefer-modern-math-api: Check cases that Math.hypot() should be preferred (#​2080) 9bbc948
  • explicit-length-check: Ignore .length || number (#​1977) b9b8794
Fixes

v47.0.0

Compare Source

Breaking
New rules
Improvements
Fixes

v46.0.1

Compare Source

v46.0.0

Compare Source

Improvements
Fixes

v45.0.2

Compare Source

  • prefer-string-replace-all: Don't crash on invalid pattern (#​2011) 3bbe027
  • prevent-abbreviations: Skip fix for variables used in Vue template (#​2012) 8cd1ded

v45.0.1

Compare Source

v45.0.0

Compare Source

New rules
Improvements
  • prefer-at: Support private fields (#​1929) 60bb455
  • no-useless-undefined: Ignore Array#includes() and Set#has() (#​1951) 8dfd5a7
  • no-useless-spread: Check cloning inline arrays (#​1980) 5d90d73
  • prefer-top-level-await: Ignore expressions in class (#​1976) b90a3aa
  • prefer-string-replace-all: Improve RegExp to string fix (#​1971) b844dbc
  • prefer-string-replace-all: Check pattern even if it's already using .replaceAll (#​1981) e8c5156
  • prefer-string-replace-all: Report all String#replace() when the pattern has g flag (#​1965) 6316f05
  • prefer-string-replace-all: Ignore regex with pipe (#​1962) 76deaa3
  • prefer-regexp-test: Use suggestions if not sure regexp without g flag (#​1954) 505a203
  • no-array-for-each: Skip fix for some edge cases (#​1979) 48efc7a
  • prefer-add-event-listener: Only fix ExpressionStatement, check operator (#​1955) aca21f2
  • prevent-abbreviations: Improve fix for retVal (#​1953) 25cd810
Fixes

v44.0.2

Compare Source

  • no-array-method-this-argument: Ignore lodash.findLast and lodash.findLastIndex (#​1927) 86e8add

v44.0.1

Compare Source

v44.0.0

Compare Source

New rules
Improvements
Fixes
  • no-await-expression-member: Fix crash on TypeScript parser (#​1910) b002e75
  • prevent-abbreviations: Skip fix when variable is JSX component (#​1907) 9ed08ab
  • better-regexp: Don't fix if .source or .toString() is used (#​1903) 8ad592b

v43.0.2

Compare Source

  • prefer-spread: Ignore Array#join().concat() and (a + b).concat() (#​1859) ab71971

v43.0.1

Compare Source

  • Remove prefer-event-target from the recommended preset 4d2faac
    • EventTarget requires Node.js 16 and we target Node.js 14. We'll enable it again in a year when we can target Node.js 16.

v43.0.0

Compare Source

New rules
Breaking
  • Require Node.js 14
Improvements
Fixes

v42.0.0

Compare Source

The project has passed 100 lint rules 🎉

Thanks to everyone that has contributed so far.

And special thanks to our team member @​fisker for doing most of the work on this project. We could not have gotten this far without him.

New rules
Improvements
Fixes

v41.0.1

Compare Source

v41.0.0

Compare Source

New rules
Breaking
Fixes

v40.1.0

Compare Source

v40.0.0

Compare Source

New rules
Improvements
Fixes

v39.0.0

Compare Source

New rules
Improvements
Fixes
  • no-empty-file: Fix false positive with triple-slash directives (#​1605) 6354bb8
  • require-number-to-fixed-digits-argument: Ignore .toFixed from new expression (#​1601) 20d61e7
  • prefer-export-from: Fix bug on fixing export namespace as default (#​1583) b564ff1
  • Add missing additionalProperties to schema (#​1589) 579d05d

v38.0.1

Compare Source

v38.0.0

Compare Source

New rules
Improvements

v37.0.1

Compare Source

v37.0.0

Compare Source

New rules
Improvements

v36.0.0

Compare Source

New rules
Improvements

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Moscow, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate
⬆️ Updates eslint-plugin-unicorn to v54
e4fe253 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@auto-assign auto-assign bot requested a review from AlexRogalskiy June 14, 2024 19:33
@github-actions GitHub Actions
Copy link

Thanks for the PR!

This section of the codebase is owner by https://github.com/AlexRogalskiy/ - if they write a comment saying "LGTM" then it will be merged.

@github-actions GitHub Actions
Copy link

Thanks for opening an issue! Make sure you've followed CONTRIBUTING.md.

@github-actions GitHub Actions
Copy link

Hello from PR Helper

Is your PR ready for review and processing? Mark the PR ready by including #pr-ready in a comment.

If you still have work to do, even after marking this ready. Put the PR on hold by including #pr-onhold in a comment.

@socket-security Socket Security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/eslint-plugin-unicorn@53.0.0 Transitive: environment, filesystem, shell, unsafe +28 7.67 MB sindresorhus

🚮 Removed packages: npm/eslint-plugin-unicorn@34.0.1, npm/git-cz@4.9.0, npm/gradient-string@1.2.0, npm/hero-patterns@2.1.0, npm/husky@7.0.4, npm/if-env@1.0.4, npm/isomorphic-unfetch@3.1.0, npm/jest-circus@27.5.1, npm/jest@27.5.1, npm/jsonlint@1.6.3, npm/license-checker@25.0.1, npm/lunr@2.3.9, npm/markdown-link-check@3.12.2, npm/node-cron@3.0.3, npm/nodemon@2.0.22, npm/onchange@7.1.0, npm/opener@1.5.2, npm/prettier@2.8.8, npm/pretty-quick@3.3.1, npm/randomcolor@0.5.4, npm/remark-cli@9.0.0, npm/remark-lint-code-block-style@2.0.1, npm/remark-lint-ordered-list-marker-value@2.0.1, npm/remark-preset-davidtheclark@0.12.0, npm/remark-validate-links@10.0.4, npm/semantic-release@17.4.7, npm/ts-jest@27.1.5, npm/ts-node@10.9.2, npm/typedoc@0.21.10, npm/typescript@4.9.5, npm/validate-commit-msg@2.14.0

View full report↗︎

@socket-security Socket Security
Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Install scripts npm/core-js@2.6.12
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
  • orphan: npm/core-js@2.6.12

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/core-js@2.6.12

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@AlexRogalskiy AlexRogalskiy Awaiting requested review from AlexRogalskiy

Assignees
No one assigned
Labels
npm dependencies review-required
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants