Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade eslint from 7.0.0 to 7.30.0 #11

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade eslint from 7.0.0 to 7.30.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 33 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-07-02.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-590103
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Command Injection
SNYK-JS-LODASH-1040724
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-AJV-584908
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: eslint
  • 7.30.0 - 2021-07-02
    • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)
    • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)
    • aa87329 Docs: fix broken links (#14756) (Sam Chen)
    • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)
    • ed1da5d Update: ecmaVersion allows "latest" (#14720) (薛定谔的猫)
    • 104c0b5 Update: improve use-isnan rule to detect Number.NaN (fixes #14715) (#14718) (Nitin Kumar)
    • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)
    • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)
    • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)
    • aada733 Docs: fix two broken links (#14726) (Sam Chen)
    • 8972529 Docs: Update README team and sponsors (ESLint Jenkins)
  • 7.29.0 - 2021-06-18
    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)
    • e2bed2e Sponsors: Sync README with website (ESLint Jenkins)
    • 8490fb4 Sponsors: Sync README with website (ESLint Jenkins)
    • ddbe877 Sponsors: Sync README with website (ESLint Jenkins)
  • 7.28.0 - 2021-06-04
    • 1237705 Upgrade: @ eslint/eslintrc to 0.4.2 (#14672) (Milos Djermanovic)
    • 123fb86 Docs: Add Feedback Needed triage description (#14670) (Nicholas C. Zakas)
    • c545163 Update: support multiline /eslint-env/ directives (fixes #14652) (#14660) (薛定谔的猫)
    • 8d1e75a Upgrade: glob-parent version in package.json (#14658) (Hamza Najeeb)
    • 1f048cb Fix: no-implicit-coercion false positive with String() (fixes #14623) (#14641) (Milos Djermanovic)
    • d709abf Chore: fix comment location in no-unused-vars (#14648) (Milos Djermanovic)
    • e44ce0a Fix: no-duplicate-imports allow unmergeable (fixes #12758, fixes #12760) (#14238) (Soufiane Boutahlil)
    • bb66a3d New: add getPhysicalFilename() method to rule context (fixes #11989) (#14616) (Nitin Kumar)
    • 2e43dac Docs: fix no-sequences example (#14643) (Nitin Kumar)
    • 958ff4e Docs: add note for arrow functions in no-seq rule (#14578) (Nitin Kumar)
    • e4f111b Fix: arrow-body-style crash with object pattern (fixes #14633) (#14635) (Milos Djermanovic)
    • ec28b5a Chore: upgrade eslint-plugin-eslint-plugin (#14590) (薛定谔的猫)
    • 85a2725 Docs: Update README team and sponsors (ESLint Jenkins)
  • 7.27.0 - 2021-05-22
    Read more
  • 7.26.0 - 2021-05-08
    Read more
  • 7.25.0 - 2021-04-23
    Read more
  • 7.24.0 - 2021-04-09
    Read more
  • 7.23.0 - 2021-03-26
    Read more
  • 7.22.0 - 2021-03-12
    Read more
  • 7.21.0 - 2021-02-27
    Read more
  • 7.20.0 - 2021-02-12
  • 7.19.0 - 2021-01-31
  • 7.18.0 - 2021-01-15
  • 7.17.0 - 2021-01-02
  • 7.16.0 - 2020-12-18
  • 7.15.0 - 2020-12-05
  • 7.14.0 - 2020-11-20
  • 7.13.0 - 2020-11-07
  • 7.12.1 - 2020-10-27
  • 7.12.0 - 2020-10-24
  • 7.11.0 - 2020-10-09
  • 7.10.0 - 2020-09-26
  • 7.9.0 - 2020-09-12
  • 7.8.1 - 2020-09-01
  • 7.8.0 - 2020-08-31
  • 7.7.0 - 2020-08-14
  • 7.6.0 - 2020-07-31
  • 7.5.0 - 2020-07-18
  • 7.4.0 - 2020-07-03
  • 7.3.1 - 2020-06-23
  • 7.3.0 - 2020-06-19
  • 7.2.0 - 2020-06-05
  • 7.1.0 - 2020-05-23
  • 7.0.0 - 2020-05-08
from eslint GitHub release notes
Commit messages
Package name: eslint
  • e837d81 7.30.0
  • 21a85b1 Build: changelog update for 7.30.0
  • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748)
  • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754)
  • aa87329 Docs: fix broken links (#14756)
  • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725)
  • ed1da5d Update: ecmaVersion allows "latest" (#14720)
  • 104c0b5 Update: improve use-isnan rule to detect `Number.NaN` (fixes #14715) (#14718)
  • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321)
  • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738)
  • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723)
  • aada733 Docs: fix two broken links (#14726)
  • 8972529 Docs: Update README team and sponsors
  • b402f78 7.29.0
  • a02dbd2 Build: changelog update for 7.29.0
  • bfbfe5c New: Add only to RuleTester (refs New: RuleTester test isolation with only eslint/rfcs#73) (#14677)
  • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716)
  • eea7e0d Chore: remove duplicate code (#14719)
  • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702)
  • 97d9bd2 Revert "Update: ecmaVersion defaults to 5, and allows "latest" (#14622)" (#14711)
  • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707)
  • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699)
  • 757c495 Chore: add some rules to eslint-config-eslint (#14692)
  • 831f6b3 Update: ecmaVersion defaults to 5, and allows "latest" (#14622)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant