[Snyk] Upgrade eslint-plugin-react from 7.33.2 to 7.34.0 #321

Loonz206 · 2024-03-26T05:28:39Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade eslint-plugin-react from 7.33.2 to 7.34.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released 22 days ago, on 2024-03-04.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	549/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.4	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	549/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.4	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	549/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: eslint-plugin-react

7.34.0 - 2024-03-04
Added
- sort-prop-types: give errors on TS types (#3615 @ akulsr0)
- no-invalid-html-attribute: add support for apple-touch-startup-image rel attributes in link tags (#3638 @ thomashockaday)
- no-unknown-property: add requireDataLowercase option (#3645 @ HermanBilous)
- no-unknown-property: add displaystyle on <math> (#3652 @ lounsbrough)
- prefer-read-only-props, prop-types, component detection: allow components to be async functions (#3654 @ pnodet)
- no-unknown-property: support onResize on audio/video tags (#3662 @ caesar1030)
- jsx-wrap-multilines: add never option to prohibit wrapping parens on multiline JSX (#3668 @ reedws)
- jsx-filename-extension: add ignoreFilesWithoutCode option to allow empty files (#3674 @ burtek)
- jsx-boolean-value: add assumeUndefinedIsFalse option (#3675 @ developer-bandi)
- linkAttribute setting, jsx-no-target-blank: support multiple properties (#3673 @ burtek)
- jsx-no-script-url: add includeFromSettings option to support linkAttributes setting (#3673 @ burtek)
- jsx-one-expression-per-line: add non-jsx option to allow non-JSX children in one line (#3677 @ burtek)
- add checked-requires-onchange-or-readonly rule (#3680 @ jaesoekjjang)
Fixed
- jsx-no-leaked-render: preserve RHS parens for multiline jsx elements while fixing (#3623 @ akulsr0)
- jsx-key: detect conditional returns (#3630 @ yialo)
- jsx-newline: prevent a crash when allowMultilines (#3633 @ ljharb)
- no-unknown-property: use a better regex to avoid a crash (#3666 @ ljharb @ SCH227)
- prop-types: handle nested forwardRef + memo (#3679 @ developer-bandi)
- no-unknown-property: add fetchPriority (#3697 @ SevereCloud)
- forbid-elements: prevent a crash on createElement() (#3632 @ ljharb)
Changed
- jsx-boolean-value: make error messages clearer (#3691 @ developer-bandi)
- [Refactor] propTypes: extract type params to var (#3634 @ HenryBrown0)
- [Refactor] boolean-prop-naming: invert if statement (#3634 @ HenryBrown0)
- [Refactor] function-component-definition: exit early if no type params (#3634 @ HenryBrown0)
- [Refactor] jsx-props-no-multi-spaces: extract type parameters to var (#3634 @ HenryBrown0)
- [Docs] jsx-key: fix correct example (#3656 @ developer-bandi)
- [Tests] jsx-wrap-multilines: passing tests (#3545 @ burtek)
- [Docs] iframe-missing-sandbox: fix link to iframe attribute on mdn (#3690 @ nnmrts)
- [Docs] hook-use-state: fix an undefined variable (#3626 @ chentsulin)
7.33.2 - 2023-08-16
Fixed
- no-deprecated: prevent false positive on commonjs import (#3614 @ akulsr0)
- no-unsafe: report on the method instead of the entire component (@ ljharb)
- no-deprecated: report on the destructured property instead of the entire variable declarator (@ ljharb)
- no-deprecated: report on the imported specifier instead of the entire import statement (@ ljharb)
- no-invalid-html-attribute: report more granularly (@ ljharb)

from eslint-plugin-react GitHub release notes

Commit messages

Package name: eslint-plugin-react

2e6b557 Update CHANGELOG and bump version
24d21ac [Dev Deps] update `@ babel/core`, `@ babel/plugin-syntax-decorators`, `eslint-doc-generator`
6cb0f00 [Fix] `jsx-boolean-value`: make error messages clearer
2124d13 [Fix] add a few jsdoc type annotations to work around TS inference for consumers
bd55ca2 [Docs] update URLs
83a26dd [Fix] `forbid-elements`: prevent a crash on `createElement()`
e880213 [Fix] `no-unknown-property`: add `fetchPriority`
36e791d [Deps] update `array.prototype.findlast`, `array.prototype.tosorted`, `es-iterator-helpers`
b8a0580 [Dev Deps] update `@ babel/core`, `@ babel/eslint-parser`, `eslint-doc-generator`
d4e58aa [Docs] `hook-use-state`: fix an undefined variable
b9292b4 [New] add `checked-requires-onchange-or-readonly` rule
4edc1f0 [Docs] `iframe-missing-sandbox`: fix link to iframe attribute on mdn
88f7f09 [Fix] `prop-types`: handle nested forwardRef + memo
9f4b2b9 [New] `jsx-one-expression-per-line`: add `non-jsx` option to allow non-JSX children in one line
1014f8c [New] `jsx-no-script-url`: add `includeFromSettings` option to support `linkAttributes` setting
de35e6f [New] `linkAttribute` setting, `jsx-no-target-blank`: support multiple properties
3730edb [New] `jsx-boolean-value`: add `assumeUndefinedIsFalse` option
67e669d [Tests] `jsx-wrap-multilines`: passing tests
2e30897 [New] `jsx-filename-extension`: add `ignoreFilesWithoutCode` option to allow empty files
ca162fd [Refactor] better use of `.reverse`, etc
b4b7497 [New] `jsx-wrap-multilines`: add `never` option to prohibit wrapping parens on multiline JSX
37d8bbe [Dev Deps] update `@ babel/core`, `aud`, `eslint-doc-generator`, `eslint-plugin-import`, `npmignore`
96af875 [Fix] `no-unknown-property`: use a better regex to avoid a crash
b95a059 [New] `no-unknown-property`: support `onResize` on audio/video tags