Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade eslint from 7.19.0 to 7.30.0 #185

Closed

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade eslint from 7.19.0 to 7.30.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 11 versions ahead of your current version.
  • The recommended version was released 23 days ago, on 2021-07-02.
Release notes
Package name: eslint from eslint GitHub release notes
Commit messages
Package name: eslint
  • e837d81 7.30.0
  • 21a85b1 Build: changelog update for 7.30.0
  • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748)
  • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754)
  • aa87329 Docs: fix broken links (#14756)
  • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725)
  • ed1da5d Update: ecmaVersion allows "latest" (#14720)
  • 104c0b5 Update: improve use-isnan rule to detect `Number.NaN` (fixes #14715) (#14718)
  • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321)
  • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738)
  • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723)
  • aada733 Docs: fix two broken links (#14726)
  • 8972529 Docs: Update README team and sponsors
  • b402f78 7.29.0
  • a02dbd2 Build: changelog update for 7.29.0
  • bfbfe5c New: Add only to RuleTester (refs New: RuleTester test isolation with only eslint/rfcs#73) (#14677)
  • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716)
  • eea7e0d Chore: remove duplicate code (#14719)
  • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702)
  • 97d9bd2 Revert "Update: ecmaVersion defaults to 5, and allows "latest" (#14622)" (#14711)
  • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707)
  • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699)
  • 757c495 Chore: add some rules to eslint-config-eslint (#14692)
  • 831f6b3 Update: ecmaVersion defaults to 5, and allows "latest" (#14622)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@mistaken-pull-closer
Copy link

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

@mistaken-pull-closer mistaken-pull-closer bot added the invalid This doesn't seem right label Jul 25, 2021
@pull-dog
Copy link

pull-dog bot commented Jul 25, 2021

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

  • docker-compose.yml
What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands
  • @pull-dog up to reprovision or provision the server.
  • @pull-dog down to delete the provisioned server.
Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
2647bf60-ed8d-11eb-88eb-ab90eabbccc1

@guardrails
Copy link

guardrails bot commented Jul 25, 2021

⚠️ We detected 18 security issues in this pull request:

Mode: paranoid | Total findings: 18 | Considered vulnerability: 18

Vulnerable Libraries (18)
Severity Details
Medium @docusaurus/core@2.0.0-alpha.66 (t) - no patch available
Medium @docusaurus/mdx-loader@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/plugin-content-blog@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/plugin-content-docs@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/plugin-content-pages@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/plugin-debug@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/plugin-google-analytics@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/plugin-google-gtag@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/plugin-sitemap@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/preset-classic@2.0.0-alpha.66 (t) - no patch available
Medium @docusaurus/theme-classic@2.0.0-alpha.66 (t) upgrade to: ***
Medium @docusaurus/theme-search-algolia@2.0.0-alpha.66 (t) upgrade to: ***
High @mdx-js/mdx@1.6.19 (t) upgrade to: >2.0.0-next.8
High dns-packet@1.3.1 (t) upgrade to: >=1.3.2 || >=5.2.2
High prismjs@1.22.0 (t) upgrade to: >1.23.0
High ua-parser-js@0.7.22 (t) upgrade to: >0.7.23
High url-parse@1.4.7 (t) upgrade to: >=1.5.0
Medium webpack-dev-server@3.11.0 (t) upgrade to: >3.11.2

More info on how to fix Vulnerable Libraries in JavaScript.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
invalid This doesn't seem right
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant