Skip to content

Conversation

@patooworld
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade stylelint from 8.4.0 to 15.11.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 99 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2023-10-17.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TRIM-1017038
160/1000
Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00632, Social Trends: No, Days since published: 1132, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.66, Score Version: V5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-STYLELINT-1585622
160/1000
Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00632, Social Trends: No, Days since published: 1132, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.66, Score Version: V5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-STYLELINT-460283
160/1000
Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00632, Social Trends: No, Days since published: 1132, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.66, Score Version: V5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: stylelint
  • 15.11.0 - 2023-10-17
    • Added: ignoreRules to max-nesting-depth (#7215) (@ mattxwang).
    • Fixed: declaration-block-no-redundant-longhand-properties autofix for grid-template with repeat() (#7230) (@ mattxwang).
    • Fixed: declaration-block-no-redundant-longhand-properties false negative for font-synthesis (#7214) (@ mattxwang).
    • Fixed: declaration-block-no-redundant-longhand-properties false negatives for *-block and *-inline logical properties (#7208) (@ mattxwang).
    • Fixed: declaration-block-no-redundant-longhand-properties false negatives for overflow, overscroll-behavior, scroll-margin, scroll-padding, and new Box Alignment shorthands (#7213) (@ mattxwang).
    • Fixed: function-no-unknown false positives for light-dark, linear and xywh (#7242) (@ mattxwang).
  • 15.10.3 - 2023-08-18
    • Fixed: declaration-property-value-no-unknown false negatives for typed custom properties (#7078) (@ romainmenke).
    • Fixed: property-no-unknown false positives for scroll-driven animations (#7090) (@ renato-bohler).
  • 15.10.2 - 2023-07-19
    • Fixed: declaration-property-value-no-unknown false negatives for nested declarations (#7079) (@ romainmenke).
    • Fixed: selector-pseudo-element-no-unknown false positives for view-transition pseudo-elements (#7070) (@ danielroe).
  • 15.10.1 - 2023-07-06
  • 15.10.0 - 2023-07-04
    • Added: media-query-no-invalid (#6963) (@ romainmenke).
    • Added: support for JS objects with extends config option (#6998) (@ fpetrakov).
    • Fixed: inconsistent errored properties in stylelint.lint() return value (#6983) (@ ybiquitous).
    • Fixed: {selector,value}-no-vendor-prefix performance (#7016) (@ jeddy3).
    • Fixed: custom-property-pattern performance (#7009) (@ jeddy3).
    • Fixed: function-linear-gradient-no-nonstandard-direction false positives for <color-interpolation-method> (#6987) (@ romainmenke).
    • Fixed: function-name-case performance (#7010) (@ jeddy3).
    • Fixed: function-no-unknown performance (#7004) (@ jeddy3).
    • Fixed: function-url-quotes performance (#7011) (@ jeddy3).
    • Fixed: hue-degree-notation false negatives for oklch (#7015) (@ romainmenke).
    • Fixed: hue-degree-notation performance (#7012) (@ jeddy3).
    • Fixed: media-feature-name-no-unknown false positives for environment-blending, nav-controls, prefers-reduced-data, and video-color-gamut (#6978) (@ romainmenke).
    • Fixed: media-feature-name-no-vendor-prefix positions for *-device-pixel-ratio (#6977) (@ romainmenke).
    • Fixed: no-descending-specificity performance (#7026) (@ romainmenke).
    • Fixed: no-duplicate-at-import-rules false negatives for imports with supports and layer conditions (#7001) (@ romainmenke).
    • Fixed: selector-anb-no-unmatchable performance (#7042) (@ romainmenke).
    • Fixed: selector-id-pattern performance (#7013) (@ jeddy3).
    • Fixed: selector-pseudo-class-no-unknown false negatives for pseudo-elements with matching names (#6964) (@ Mouvedia).
    • Fixed: selector-pseudo-element-no-unknown performance (#7007) (@ jeddy3).
    • Fixed: selector-type-case performance (#7041) (@ romainmenke).
    • Fixed: selector-type-no-unknown performance (#7027) (@ romainmenke).
    • Fixed: unit-disallowed-list false negatives with percentages (#7018) (@ romainmenke).
  • 15.9.0 - 2023-06-23
    Read more
  • 15.8.0 - 2023-06-17
  • 15.7.0 - 2023-06-05
  • 15.6.3 - 2023-06-03
  • 15.6.2 - 2023-05-16
  • 15.6.1 - 2023-05-02
  • 15.6.0 - 2023-04-23
  • 15.5.0 - 2023-04-16
  • 15.4.0 - 2023-04-01
  • 15.3.0 - 2023-03-16
  • 15.2.0 - 2023-02-19
  • 15.1.0 - 2023-02-11
  • 15.0.0 - 2023-02-09
  • 14.16.1 - 2022-12-29
  • 14.16.0 - 2022-12-03
  • 14.15.0 - 2022-11-13
  • 14.14.1 - 2022-11-03
  • 14.14.0 - 2022-10-15
  • 14.13.0 - 2022-09-28
  • 14.12.1 - 2022-09-21
  • 14.12.0 - 2022-09-18
  • 14.11.0 - 2022-08-21
  • 14.10.0 - 2022-08-11
  • 14.9.1 - 2022-06-11
  • 14.9.0 - 2022-06-08
  • 14.8.5 - 2022-05-25
  • 14.8.4 - 2022-05-24
  • 14.8.3 - 2022-05-21
  • 14.8.2 - 2022-05-04
  • 14.8.1 - 2022-04-29
  • 14.8.0 - 2022-04-26
  • 14.7.1 - 2022-04-17
  • 14.7.0 - 2022-04-15
  • 14.6.1 - 2022-03-25
  • 14.6.0 - 2022-03-16
  • 14.5.3 - 2022-02-23
  • 14.5.2 - 2022-02-22
  • 14.5.1 - 2022-02-16
  • 14.5.0 - 2022-02-10
  • 14.4.0 - 2022-02-08
  • 14.3.0 - 2022-01-23
  • 14.2.0 - 2021-12-21
  • 14.1.0 - 2021-11-14
  • 14.0.1 - 2021-10-26
  • 14.0.0 - 2021-10-21
  • 14.0.0-0 - 2021-10-20
  • 13.13.1 - 2021-05-01
  • 13.13.0 - 2021-04-24
  • 13.12.0 - 2021-03-06
  • 13.11.0 - 2021-02-20
  • 13.10.0 - 2021-02-11
  • 13.9.0 - 2021-01-19
  • 13.8.0 - 2020-11-17
  • 13.7.2 - 2020-09-25
  • 13.7.1 - 2020-09-11
  • 13.7.0 - 2020-08-31
  • 13.6.1 - 2020-06-17
  • 13.6.0 - 2020-06-04
  • 13.5.0 - 2020-05-19
  • 13.4.1 - 2020-05-18
  • 13.4.0 - 2020-05-17
  • 13.3.3 - 2020-04-21
  • 13.3.2 - 2020-04-11
  • 13.3.1 - 2020-04-09
  • 13.3.0 - 2020-04-03
  • 13.2.1 - 2020-03-09
  • 13.2.0 - 2020-02-14
  • 13.1.0 - 2020-02-08
  • 13.0.0 - 2020-01-12
  • 12.0.1 - 2019-12-25
  • 12.0.0 - 2019-11-16
  • 11.1.1 - 2019-10-10
  • 11.1.0 - 2019-10-10
  • 11.0.0 - 2019-09-15
  • 10.1.0 - 2019-06-07
  • 10.0.1 - 2019-04-16
  • 10.0.0 - 2019-04-13
  • 9.10.1 - 2019-01-19
  • 9.10.0 - 2019-01-16
  • 9.9.0 - 2018-11-27
  • 9.8.0 - 2018-11-09
  • 9.7.1 - 2018-10-30
  • 9.7.0 - 2018-10-28
  • 9.6.0 - 2018-09-27
  • 9.5.0 - 2018-08-19
  • 9.4.0 - 2018-07-25
  • 9.3.0 - 2018-06-15
  • 9.2.1 - 2018-05-16
  • 9.2.0 - 2018-04-01
  • 9.1.3 - 2018-03-14
  • 9.1.2 - 2018-03-13
  • 9.1.1 - 2018-02-21
  • 9.1.0 - 2018-02-21
  • 9.0.0 - 2018-02-18
  • 8.4.0 - 2017-12-15
from stylelint GitHub release notes
Commit messages
Package name: stylelint
  • 8914d46 15.11.0
  • 29fe2df Prepare 15.11.0 (#7212)
  • fafb83e Bump known-css-properties from 0.28.0 to 0.29.0 (#7247)
  • 6e06398 Bump css-functions-list from 3.2.0 to 3.2.1 (#7242)
  • 9941121 Remove some TODOs (#7234)
  • f1d3228 Fix `declaration-block-no-redundant-longhand-properties` autofix for `grid-template` with `repeat()` (#7230)
  • 2a1fc6d Bump postcss from 8.4.28 to 8.4.31 (#7218)
  • dfd1ffc Fix `declaration-block-no-redundant-longhand-properties` false negative for `font-synthesis` (#7214)
  • 3374bb4 Fix `declaration-block-no-redundant-longhand-properties` false negatives for `overflow`, `overscroll-behavior`, `scroll-margin`, `scroll-padding`, and new Box Alignment shorthands (#7213)
  • e468814 Add `ignoreRules` to `max-nesting-depth` (#7215)
  • 4bfee38 Fix `declaration-block-no-redundant-longhand-properties` false negatives for `*-block` and `*-inline` logical properties (#7208)
  • 7e629d4 Simplify array-from in rules (#7193)
  • 74425d1 Bump actions/checkout from 3 to 4 (#7180)
  • 0b686f2 Change Dependabot target branch to v16 (retry) (#7157)
  • b509d18 Bump file-entry-cache from 6.0.1 to 7.0.0 (#7155)
  • b67979a Bump lint-staged from 14.0.0 to 14.0.1 (#7156)
  • 3cdb190 Bump the jest group with 2 updates (#7153)
  • bd50050 Bump the typescript group with 1 update (#7154)
  • a8714d7 Bump the eslint group with 3 updates (#7150)
  • 2cf5bb3 Bump postcss-scss from 4.0.6 to 4.0.7 (#7144)
  • 5ebb77a Bump postcss from 8.4.27 to 8.4.28 (#7143)
  • 9e7319d 15.10.3
  • 0520c84 Prepare 15.10.3 (#7089)
  • 97e5f89 Bump lint-staged from 13.2.3 to 14.0.0 (#7133)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants