Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade eslint from 5.6.1 to 9.1.1 #14

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

baby636
Copy link
Owner

@baby636 baby636 commented May 21, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade eslint from 5.6.1 to 9.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 151 versions ahead of your current version.

  • The recommended version was released a month ago, on 2024-04-22.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-LODASH-608086
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-6139239
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Command Injection
SNYK-JS-LODASHTEMPLATE-1088054
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Internal Property Tampering
SNYK-JS-BSON-6056525
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Prototype Pollution
SNYK-JS-AJV-584908
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Remote Memory Exposure
SNYK-JS-BL-608877
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Denial of Service (DoS)
SNYK-JS-MONGODB-473855
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Arbitrary Code Execution
SNYK-JS-ESLINTUTILS-460220
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Cryptographic Issues
SNYK-JS-ELLIPTIC-571484
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Internal Property Tampering
SNYK-JS-BSON-561052
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Information Exposure
SNYK-JS-SIMPLEGET-2361683
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-URLREGEX-569472
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-Y18N-1021887
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-INI-1048974
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Arbitrary Code Execution
SNYK-JS-JSYAML-174129
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Command Injection
SNYK-JS-LODASH-1040724
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-450202
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-567746
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Arbitrary File Write via Archive Extraction (Zip Slip)
SNYK-JS-DECOMPRESS-557358
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Arbitrary File Write via Archive Extraction (Zip Slip)
SNYK-JS-DECOMPRESS-557358
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-DOTPROP-543489
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Timing Attack
SNYK-JS-ELLIPTIC-511941
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-YARGSPARSER-560381
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Uninitialized Memory Exposure
npm:tunnel-agent:20170305
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-JSON5-3182856
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Denial of Service (DoS)
SNYK-JS-JSYAML-173999
372/1000
Why? Proof of Concept exploit, CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:braces:20180219
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Validation Bypass
SNYK-JS-KINDOF-537849
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: eslint
  • 9.1.1 - 2024-04-22

    Bug Fixes

    • a26b402 fix: use @ eslint/create-config latest (#18373) (唯然)
  • 9.1.0 - 2024-04-19

    Features

    • 03068f1 feat: Provide helpful error message for nullish configs (#18357) (Nicholas C. Zakas)
    • 751b518 feat: replace dependency graphemer with Intl.Segmenter (#18110) (Francesco Trotta)
    • 4d11e56 feat: add name to eslint configs (#18289) (唯然)
    • 1cbe1f6 feat: allow while(true) in no-constant-condition (#18286) (Tanuj Kanti)
    • 0db676f feat: add Intl in es6 globals (#18318) (唯然)

    Bug Fixes

    • 8d18958 fix: Remove name from eslint/js packages (#18368) (Nicholas C. Zakas)
    • 594eb0e fix: do not crash on error in fs.walk filter (#18295) (Francesco Trotta)
    • 0d8cf63 fix: EMFILE errors (#18313) (Nicholas C. Zakas)
    • e1ac0b5 fix: --inspect-config only for flat config and respect -c (#18306) (Nicholas C. Zakas)
    • 09675e1 fix: --no-ignore should not apply to non-global ignores (#18334) (Milos Djermanovic)

    Documentation

    • fb50077 docs: include notes about globals in migration-guide (#18356) (Gabriel Rohden)
    • 71c771f docs: Fix missing accessible name for scroll-to-top link (#18329) (Germán Freixinós)
    • 200fd4e docs: indicate eslintrc mode for .eslintignore (#18285) (Francesco Trotta)
    • 16b6a8b docs: Update README (GitHub Actions Bot)
    • df5f8a9 docs: paths and patterns difference in no-restricted-imports (#18273) (Tanuj Kanti)
    • c537d76 docs: update npm init @ eslint/config generated file names (#18298) (唯然)
    • e1e305d docs: fix linebreak-style examples (#18262) (Francesco Trotta)
    • 113f51e docs: Mention package.json config support dropped (#18305) (Nicholas C. Zakas)
    • 5c35321 docs: add eslintrc-only note to --rulesdir (#18281) (Adam Lui 刘展鹏)

    Build Related

    • 1fa6622 build: do not use --force flag to install dependencies (#18284) (Francesco Trotta)

    Chores

    • d9a2983 chore: upgrade @ eslint/js to v9.1.1 (#18367) (Francesco Trotta)
    • 50d406d chore: package.json update for @ eslint/js release (Jenkins)
    • 155c71c chore: package.json update for @ eslint/js release (Jenkins)
    • 0588fc5 refactor: Move directive gathering to SourceCode (#18328) (Nicholas C. Zakas)
    • 9048e21 chore: lint docs/src/_data js files (#18335) (Milos Djermanovic)
    • 4820790 chore: upgrade globals@15.0.0 dev dependency (#18332) (Milos Djermanovic)
    • 698d9ff chore: upgrade jsdoc & unicorn plugins in eslint-config-eslint (#18333) (Milos Djermanovic)
    • 32c08cf chore: drop Node < 18 and use @ eslint/js v9 in eslint-config-eslint (#18323) (Milos Djermanovic)
    • a76fb55 chore: @ eslint-community/eslint-plugin-eslint-comments v4.3.0 (#18319) (Milos Djermanovic)
    • 78e45b1 chore: eslint-plugin-eslint-plugin v6.0.0 (#18316) (唯然)
    • 36103a5 chore: eslint-plugin-n v17.0.0 (#18315) (唯然)
  • 9.0.0 - 2024-04-05

    Breaking Changes

    • b7cf3bd fix!: correct camelcase rule schema for allow option (#18232) (eMerzh)
    • 09bd7fe feat!: move AST traversal into SourceCode (#18167) (Nicholas C. Zakas)
    • 79a95eb feat!: disallow multiple configuration comments for same rule (#18157) (Milos Djermanovic)
    • 9163646 feat!: Rule Tester checks for missing placeholder data in the message (#18073) (fnx)
    • 3c4d51d feat!: default for enforceForClassMembers in no-useless-computed-key (#18054) (Francesco Trotta)
    • 47e60f8 feat!: Stricter rule test validations (#17654) (fnx)
    • 1a94589 feat!: no-unused-vars default caughtErrors to 'all' (#18043) (Josh Goldberg ✨)
    • 57089cb feat!: no-restricted-imports allow multiple config entries for same path (#18021) (Milos Djermanovic)
    • 2e1d549 feat!: detect duplicate test cases (#17955) (Bryan Mishkin)
    • 701f1af feat!: no-inner-declaration new default behaviour and option (#17885) (Tanuj Kanti)
    • bde5105 fix!: handle --output-file for empty output when saving to disk (#17957) (Nitin Kumar)
    • 07107a5 fix!: upgrade eslint-scope@8.0.0 (#17942) (Milos Djermanovic)
    • 3ee0f6c fix!: no-unused-vars varsIgnorePattern behavior with catch arguments (#17932) (Tanuj Kanti)
    • 51f8bc8 fix!: configuration comments with just severity should retain options (#17945) (Milos Djermanovic)
    • d191bdd feat!: Remove CodePath#currentSegments (#17936) (Milos Djermanovic)
    • 946ae00 feat!: FlatRuleTester -> RuleTester (#17922) (Nicholas C. Zakas)
    • baff28c feat!: remove no-inner-declarations from eslint:recommended (#17920) (Milos Djermanovic)
    • cadfbcd feat!: Rename FlatESLint to ESLint (#17914) (Nicholas C. Zakas)
    • d1018fc feat!: skip running warnings in --quiet mode (#17274) (Maddy Miller)
    • fb81b1c feat!: Set default schema: [], drop support for function-style rules (#17792) (Milos Djermanovic)
    • 0b21e1f feat!: add two more cases to no-implicit-coercion (#17832) (Gürgün Dayıoğlu)
    • 2916c63 feat!: Switch Linter to flat config by default (#17851) (Nicholas C. Zakas)
    • 200518e fix!: Parsing 'exported' comment using parseListConfig (#17675) (amondev)
    • bdd6ba1 feat!: Remove valid-jsdoc and require-jsdoc (#17694) (Nicholas C. Zakas)
    • 12be307 fix!: Behavior of CLI when no arguments are passed (#17644) (Nicholas C. Zakas)
    • 8fe8c56 feat!: Update shouldUseFlatConfig and CLI so flat config is default (#17748) (Nicholas C. Zakas)
    • 60dea3e feat!: deprecate no-new-symbol, recommend no-new-native-nonconstructor (#17710) (Francesco Trotta)
    • 5aa9c49 feat!: check for parsing errors in suggestion fixes (#16639) (Bryan Mishkin)
    • b3e0bb0 feat!: assert suggestion messages are unique in rule testers (#17532) (Josh Goldberg ✨)
    • e563c52 feat!: no-invalid-regexp make allowConstructorFlags case-sensitive (#17533) (Josh Goldberg ✨)
    • e5f02c7 fix!: no-sequences rule schema correction (#17878) (MHO)
    • 6ee3e9e feat!: Update eslint:recommended configuration (#17716) (Milos Djermanovic)
    • c2cf85a feat!: drop support for string configurations in flat config array (#17717) (Milos Djermanovic)
    • c314fd6 feat!: Remove SourceCode#getComments() (#17715) (Milos Djermanovic)
    • ae78ff1 feat!: Remove deprecated context methods (#17698) (Nicholas C. Zakas)
    • f71c328 feat!: Swap FlatESLint-ESLint, FlatRuleTester-RuleTester in API (#17823) (Nicholas C. Zakas)
    • 5304da0 feat!: remove formatters except html, json(-with-metadata), and stylish (#17531) (Josh Goldberg ✨)
    • e1e827f feat!: Require Node.js ^18.18.0 || ^20.9.0 || >=21.1.0 (#17725) (Milos Djermanovic)

    Features

    • d54a412 feat: Add --inspect-config CLI flag (#18270) (Nicholas C. Zakas)
    • 97ce45b feat: Add reportUsedIgnorePattern option to no-unused-vars rule (#17662) (Pearce Ropion)
    • 3e9fcea feat: Show config names in error messages (#18256) (Nicholas C. Zakas)
    • de40874 feat: Rule Performance Statistics for flat ESLint (#17850) (Mara Kiefer)
    • d85c436 feat: use-isnan report NaN in indexOf and lastIndexOf with fromIndex (#18225) (Tanuj Kanti)
    • b8fb572 feat: add reportUnusedFallthroughComment option to no-fallthrough rule (#18188) (Kirk Waiblinger)
    • 1c173dc feat: add ignoreClassWithStaticInitBlock option to no-unused-vars (#18170) (Tanuj Kanti)
    • a451b32 feat: make no-misleading-character-class report more granular errors (#18082) (Francesco Trotta)
    • c49ed63 feat: update complexity rule for optional chaining & default values (#18152) (Mathias Schreck)
    • 11144a2 feat: no-restricted-imports option added allowImportNames (#16196) (M Pater)
    • 74124c2 feat: add suggestions to use-isnan in indexOf & lastIndexOf calls (#18063) (StyleShit)
    • 53f0f47 feat: Add loadESLint() API method for v9 (#18097) (Nicholas C. Zakas)
    • 2d11d46 feat: add suggestions to use-isnan in binary expressions (#17996) (StyleShit)
    • 26093c7 feat: fix false negatives in no-this-before-super (#17762) (Yosuke Ota)
    • 5471e43 feat: convert unsafe autofixes to suggestions in no-implicit-coercion (#17985) (Gürgün Dayıoğlu)
    • e3051be feat: emit warning when .eslintignore file is detected (#17952) (Nitin Kumar)
    • a630edd feat: maintain latest ecma version in ESLint (#17958) (Milos Djermanovic)
    • b4e0503 feat: add no-useless-assignment rule (#17625) (Yosuke Ota)
    • 287c4b7 feat: no-misleading-character-class granular errors (#17515) (Josh Goldberg ✨)
    • 8792464 feat: Enable eslint.config.mjs and eslint.config.cjs (#17909) (Nicholas C. Zakas)
    • 24ce927 feat: ...

Snyk has created this PR to upgrade eslint from 5.6.1 to 9.1.1.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/baby636/project/fefe9db8-be6b-42fb-b0e1-4bb92c24795c?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants