[Snyk] Upgrade eslint-plugin-import from 2.27.5 to 2.29.0 #837

lholmquist · 2023-11-14T02:07:51Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade eslint-plugin-import from 2.27.5 to 2.29.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 3 versions ahead of your current version.
The recommended version was released 22 days ago, on 2023-10-23.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-JSON5-3182856	427/1000 Why? Proof of Concept exploit, CVSS 6.4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: eslint-plugin-import

2.29.0 - 2023-10-23
Full Changelog: v2.28.1...v2.29.0
2.28.1 - 2023-08-18
Full Changelog: v2.28.0...v2.28.1
2.28.0 - 2023-07-28
2.27.5 - 2023-01-16

from eslint-plugin-import GitHub release notes

Commit messages

Package name: eslint-plugin-import

6d34c88 Bump to 2.29.0
ec6a8ea [Refactor] use `hasown` instead of `has`
78f50b8 [Deps] update `array-includes`, `array.prototype.findlastindex`, `array.prototype.flat`, `array.prototype.flatmap`, `eslint-import-resolver-node`, `is-core-module`, `object.fromentries`, `object.groupby`, `object.values`
6d2540f [resolvers/webpack] v0.13.8
30d61b6 [resolvers/webpack] [deps] update `array.prototype.find`, `is-core-module`, `resolve`
2c281d1 [resolvers/webpack] [refactor] use `hasown` instead of `has`
66cb10f [Fix] `newline-after-import`: fix `exactCount` with `considerComments` false positive, when there is a leading comment
8705121 [New] `newline-after-import`: new option `exactCount` and docs update
6b95a02 [resolvers/webpack] v0.13.7
04e68a2 [resolvers/webpack] [fix] use the `dirname` of the `configPath` as `basedir`
4d32d68 [New] TypeScript config: add .cts and .mts extensions
cd95728 Bump to 2.28.1
0847443 Revert 1fa2971 (breaking group change in `order`)
e9de30a [resolvers/webpack] v0.13.6
cd1dff7 Revert "[resolvers/webpack] [refactor] replace `lodash/isEqual` usage with `deep-equal`"
da71746 [resolvers/webpack] v0.13.5
22a0802 [resolvers/webpack] [deps] update `resolve`
1e81734 [resolvers/webpack] [refactor] replace `lodash/isEqual` usage with `deep-equal`
2c18c29 [resolvers/webpack] [refactor] remove `lodash/get` usage
b9b9c86 [resolvers/webpack] [refactor] switch to a maintained array.prototype.find package
2e7612f [Dev Deps] pin `jackspeak` since 2.1.2+ depends on npm aliases, which kill the install process in npm < 6
26ea4f8 [Docs] Add markdownlint
c704253 [resolvers/node] v0.3.9
559480d [resolvers/webpack] v0.13.4