[Snyk] Upgrade eslint-plugin-import from 2.22.1 to 2.23.4

[snyk-bot]

Snyk has created this PR to upgrade eslint-plugin-import from 2.22.1 to 2.23.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2021-05-29.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: eslint-plugin-import

• 2.23.4 - 2021-05-29
  

  v2.23.4

• 2.23.3 - 2021-05-21
  

  v2.23.3

• 2.23.2 - 2021-05-15
  

  v2.23.2

• 2.23.1 - 2021-05-15
  

  v2.23.1

• 2.23.0 - 2021-05-14
  

  https://github.com/benmosher/eslint-plugin-import/blob/v2.23.0/CHANGELOG.md#2230---2021-05-13

• 2.22.1 - 2020-09-27
  

  https://github.com/benmosher/eslint-plugin-import/blob/v2.22.1/CHANGELOG.md#2221---2020-09-27

from eslint-plugin-import GitHub release notes

Commit messages

Package name: eslint-plugin-import

• 998c300 Bump to v2.23.4
• ec10721 [meta] fix changelog entries
• da8d584 [Fix] `no-extraneous-dependencies`: fix package name algorithm
• 81b9d24 [Fix] `no-import-module-exports`: Don't crash if packages have no entrypoint
• 20c373c Bump to v2.23.3
• 0a08b6a [Tests] `order` add passing test to close chore(deps-dev): bump eslint-plugin-mocha from 7.0.1 to 8.0.0 nock/nock#2081
• b39770d [Fix] `order`: restore default behavior unless `type` is in groups
• 72b9c3d [Fix] `no-cycle`: fix false negative when file imports a type after importing a value in Flow
• 30bba6a [Fix] `no-cycle`: ignore imports where imported file only imports types of importing file
• 3cf913d [meta] sort and uniquify usernames in changelog
• ddb2132 [Fix] `no-restricted-paths`: fix false positive matches
• bc99b86 [Docs] Add `no-relative-packages` to list of to the list of rules
• a332f20 Bump to v2.23.2
• 5af181f [meta] add `safe-publish-latest`; use `prepublishOnly` script for npm 7+
• 8431b46 Bump to v2.23.1
• 83f3c3e [Fix] `order`: fix alphabetical sorting
• 8213543 [Tests] add missing fixture from d903477f4e31be71e016f8af56cbe2a8d4f11c9c
• d903477 [Fix] ExportMap: do not crash when tsconfig lacks `.compilerOptions`
• dd0e8cb [meta] correct Weekly Digest (26 July, 2020 - 2 August, 2020) nock/nock#2065 -> fix: Parallel requests on same Interceptor are exposed correctly in reply functions nock/nock#2056
• 8d7ec17 [Fix] `newline-after-import`: fix crash with `export {}` syntax
• e9e755d Bump to v2.23.0
• 7b264c0 [resolvers/webpack] v0.13.1
• aa37904 [deps] update `eslint-module-utils`
• 6417cfd utils: v2.6.1

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. We try to do our best, but nock is maintained by volunteers and there is only so much we can do at a time. Thank you for your contributions.