Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade eslint from 5.0.0 to 9.15.0 #207

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Omrisnyk
Copy link
Owner

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • large-file/package.json
  • large-file/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
  170  
Release notes
Package name: eslint
  • 9.15.0 - 2024-11-15

    Features

    • 01557ce feat: Implement Language#normalizeLanguageOptions() (#19104) (Nicholas C. Zakas)
    • 2edc0e2 feat: add meta.defaultOptions (#17656) (Josh Goldberg ✨)
    • bdec50e feat: fix no-useless-computed-key false negative with __proto__ (#19123) (Milos Djermanovic)
    • 3087c9e feat: add meta object to @ eslint/js plugin (#19095) (Francesco Trotta)

    Bug Fixes

    • fd33f13 fix: update types for no-restricted-imports rule (#19060) (Nitin Kumar)
    • bd35098 fix: switch away from Node.js node:assert and AssertionError (#19082) (Josh Goldberg ✨)
    • 9db5b15 fix: unsafe report for no-lonely-if (#19087) (Abraham Guo)
    • 68fa497 fix: ignore files on a different drive on Windows (#19069) (Francesco Trotta)
    • 4ce625a fix: upgrade @ humanwhocodes/[email protected] to avoid debug logs (#19102) (Milos Djermanovic)

    Documentation

    • d927920 docs: fix styles in no-js mode (#18916) (Tanuj Kanti)
    • 09bc2a8 docs: Update README (GitHub Actions Bot)
    • 39089c8 docs: add no-useless-computed-key examples with object patterns (#19109) (Milos Djermanovic)
    • 895c60f docs: add missing messageId property and suggestion properties (#19122) (fnx)
    • 298625e docs: Change CLI -c to use flat config (#19103) (Nicholas C. Zakas)
    • 522d8a3 docs: add deprecation on indent, quotes and semi rule types (#19090) (Marco Pasqualetti)

    Chores

  • 9.14.0 - 2024-11-01

    Features

    • 3fa009f feat: add support for Import Attributes and RegExp Modifiers (#19076) (Milos Djermanovic)
    • b0faee3 feat: add types for the @ eslint/js package (#19010) (Nitin Kumar)

    Bug Fixes

    • 24d0172 fix: enable retry concurrency limit for readFile() (#19077) (Nicholas C. Zakas)
    • b442067 fix: Don't crash when directory is deleted during traversal. (#19067) (Nicholas C. Zakas)
    • d474443 fix: avoid call stack overflow while processing globs (#19035) (Livia Medeiros)

    Documentation

    • 151c965 docs: update context.languageOptions.parser description (#19084) (Nitin Kumar)
    • dc34f94 docs: Update README (GitHub Actions Bot)
    • f16e846 docs: Update README (GitHub Actions Bot)
    • ee0a77e docs: change link from @ types/eslint to lib/types (#19049) (Karl Horky)
    • 50f03a1 docs: Clarify global ignores in config migration guide (#19032) (Milos Djermanovic)

    Build Related

    • 37c9177 build: update @ wdio/* dependencies (#19068) (Francesco Trotta)
    • 35a8858 build: exclude flawed dendency versions (#19065) (Francesco Trotta)

    Chores

    • f36cb16 chore: upgrade @ eslint/[email protected] (#19086) (Milos Djermanovic)
    • 28be447 chore: package.json update for @ eslint/js release (Jenkins)
    • f48a2a0 test: add no-invalid-regexp tests with RegExp Modifiers (#19075) (Milos Djermanovic)
    • 425202e perf: Fix caching in config loaders (#19042) (Milos Djermanovic)
    • 3d44b3c ci: run tests in Node.js 23 (#19055) (Francesco Trotta)
    • 7259627 test: ensure tmp directory cleanup in check-emfile-handling.js (#19036) (Livia Medeiros)
  • 9.13.0 - 2024-10-18

    Features

    • 381c32b feat: Allow languages to provide defaultLanguageOptions (#19003) (Milos Djermanovic)
    • bf723bd feat: Improve eslintrc warning message (#19023) (Milos Djermanovic)
    • 1def4cd feat: drop support for jiti v1.21 (#18996) (Francesco Trotta)
    • f879be2 feat: export ESLint.defaultConfig (#18983) (Nitin Kumar)

    Bug Fixes

    Documentation

    • abdbfa8 docs: mark LintMessage#nodeType as deprecated (#19019) (Nitin Kumar)
    • 19e68d3 docs: update deprecated rules type definitions (#19018) (Nitin Kumar)
    • 7dd402d docs: Update examples of passing multiple values to a CLI option (#19006) (Milos Djermanovic)
    • 5dcbc51 docs: Add example with side-effect imports to no-restricted-imports (#18997) (Milos Djermanovic)
    • 1ee87ca docs: Update README (GitHub Actions Bot)
    • 2c3dbdc docs: Use prerendered sponsors for README (#18988) (Milos Djermanovic)

    Chores

  • 9.12.0 - 2024-10-04

    Features

    • 5a6a053 feat: update to jiti v2 (#18954) (Arya Emami)
    • 17a07fb feat: Hooks for test cases (RuleTester) (#18771) (Anna Bocharova)
    • 2ff0e51 feat: Implement alternate config lookup (#18742) (Nicholas C. Zakas)
    • 2d17453 feat: Implement modified cyclomatic complexity (#18896) (Dmitry Pashkevich)

    Bug Fixes

    • ea380ca fix: Upgrade retry to avoid EMFILE errors (#18986) (Nicholas C. Zakas)
    • fdd6319 fix: Issues with type definitions (#18940) (Arya Emami)

    Documentation

    • ecbd522 docs: Mention code explorer (#18978) (Nicholas C. Zakas)
    • 7ea4ecc docs: Clarifying the Use of Meta Objects (#18697) (Amaresh S M)
    • d3e4b2e docs: Clarify how to exclude .js files (#18976) (Milos Djermanovic)
    • 57232ff docs: Mention plugin-kit in language docs (#18973) (Nicholas C. Zakas)
    • b80ed00 docs: Update README (GitHub Actions Bot)
    • cb69ab3 docs: Update README (GitHub Actions Bot)
    • 7fb0d95 docs: Update README (GitHub Actions Bot)
    • 493348a docs: Update README (GitHub Actions Bot)
    • 87a582c docs: fix typo in id-match rule (#18944) (Jay)

    Chores

    • 555aafd chore: upgrade to @ eslint/[email protected] (#18987) (Francesco Trotta)
    • 873ae60 chore: package.json update for @ eslint/js release (Jenkins)
    • d0a5414 refactor: replace strip-ansi with native module (#18982) (Cristopher)
    • b827029 chore: Enable JSON5 linting (#18979) (Milos Djermanovic)
    • 8f55ca2 chore: Upgrade espree, eslint-visitor-keys, eslint-scope (#18962) (Nicholas C. Zakas)
    • c1a2725 chore: update dependency mocha to ^10.7.3 (#18945) (Milos Djermanovic)
  • 9.11.1 - 2024-09-23

    Bug Fixes

    • 20fd916 fix: add @ eslint/core, @ types/estree, & @ types/json-schema deps (#18938) (Nitin Kumar)
    • 2738322 fix: add missing types for require-atomic-updates rule (#18937) (Kristóf Poduszló)
    • d71ff30 fix: add missing types for object-shorthand rule (#18935) (Kristóf Poduszló)
    • 561cadc fix: add missing types for no-unsafe-negation rule (#18932) (Kristóf Poduszló)
    • 8843656 fix: add missing types for no-underscore-dangle rule (#18931) (Kristóf Poduszló)
    • 92cde5c fix: add missing types for no-shadow rule (#18930) (Kristóf Poduszló)
    • b3cbe11 fix: add missing types for no-sequences rule (#18929) (Kristóf Poduszló)
    • 976f77f fix: add missing types for no-unused-expressions rule (#18933) (Kristóf Poduszló)

    Documentation

    • 3eff709 docs: replace deprecated Linter.FlatConfig type with Linter.Config (#18941) (Carlos Meira)

    Chores

  • 9.11.0 - 2024-09-20

    Features

    • ec30c73 feat: add "eslint/universal" to export Linter (#18883) (唯然)
    • c591da6 feat: Add language to types (#18917) (Nicholas C. Zakas)
    • 492eb8f feat: limit the name given to ImportSpecifier in id-length (#18861) (Tanuj Kanti)
    • 19c6856 feat: Add no-useless-constructor suggestion (#18799) (Jordan Thomson)
    • a48f8c2 feat: add type FormatterFunction, update LoadedFormatter (#18872) (Francesco Trotta)

    Bug Fixes

    • 5e5f39b fix: add missing types for no-restricted-exports rule (#18914) (Kristóf Poduszló)
    • 8f630eb fix: add missing types for no-param-reassign options (#18906) (Kristóf Poduszló)
    • d715781 fix: add missing types for no-extra-boolean-cast options (#18902) (Kristóf Poduszló)
    • 2de5742 fix: add missing types for no-misleading-character-class options (#18905) (Kristóf Poduszló)
    • c153084 fix: add missing types for no-implicit-coercion options (#18903) (Kristóf Poduszló)
    • fa11b2e fix: add missing types for no-empty-function options (#18901) (Kristóf Poduszló)
    • a0deed1 fix: add missing types for camelcase options (#18897) (Kristóf Poduszló)

    Documentation

    • e4e5709 docs: correct prefer-object-has-own type definition comment (#18924) (Nitin Kumar)
    • 91cbd18 docs: add unicode abbreviations in no-irregular-whitespace rule (#18894) (Alix Royere)
    • 59cfc0f docs: clarify resultsMeta in LoadedFormatter type (#18881) (Milos Djermanovic)
    • adcc50d docs: Update README (GitHub Actions Bot)
    • 4edac1a docs: Update README (GitHub Actions Bot)

    Build Related

    • 959d360 build: Support updates to previous major versions (#18871) (Milos Djermanovic)

    Chores

    • ca21a64 chore: upgrade @ eslint/[email protected] (#18927) (Milos Djermanovic)
    • a10f90a chore: package.json update for @ eslint/js release (Jenkins)
    • e4e02cc refactor: Extract processor logic into ProcessorService (#18818) (Nicholas C. Zakas)
    • 6d4484d chore: updates for v8.57.1 release (Jenkins)
    • 71f37c5 refactor: use optional chaining when validating config rules (#18893) (lucasrmendonca)
    • 2c2805f chore: Add PR note to all templates (#18892) (Nicholas C. Zakas)
    • 7b852ce refactor: use Directive class from @ eslint/plugin-kit (#18884) (Milos Djermanovic)
    • d594ddd chore: update dependency @ eslint/core to ^0.6.0 (#18863) (renovate[bot])
    • 78b2421 chore: Update change.yml (#18882) (Nicholas C. Zakas)
    • a416f0a chore: enable $ExpectType comments in .ts files (#18869) (Francesco Trotta)
  • 9.10.0 - 2024-09-06

    Features

    • 301b90d feat: Add types (#18854) (Nicholas C. Zakas)
    • bcf0df5 feat: limit namespace import identifier in id-length rule (#18849) (ChaedongIm)
    • 45c18e1 feat: add requireFlag opt...

… vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
@Omrisnyk
Copy link
Owner Author

Omrisnyk commented Nov 16, 2024

🎉 Snyk checks have passed. No issues have been found so far.

security/snyk check is complete. No issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants