[Snyk] Upgrade eslint-plugin-node from 5.2.0 to 11.1.0 #4

YoutacRandS-VA · 2024-06-19T23:26:03Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade eslint-plugin-node from 5.2.0 to 11.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 15 versions ahead of your current version.
The recommended version was released on 4 years ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	696	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	696	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	696	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-6139239	696	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-73638	696	Proof of Concept
Arbitrary Code Execution SNYK-JS-JSYAML-174129	696	No Known Exploit
Command Injection SNYK-JS-LODASH-1040724	696	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-450202	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	696	Proof of Concept
Prototype Pollution npm:lodash:20180130	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	696	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-559764	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	696	Proof of Concept
Denial of Service (DoS) SNYK-JS-JSYAML-173999	696	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:eslint:20180222	696	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	696	Proof of Concept

Release notes

Package name: eslint-plugin-node

11.1.0 - 2020-03-28
The many rules for Node.js in the ESLint core will be deprecated in ESLint 7.0.0. This release includes the clone of those core rules.

✨ Enhancements
- 8788a11 added ten rules from the ESLint core:
  - node/callback-return rule that corresponds to callback-return rule.
  - node/global-require rule that corresponds to global-require rule.
  - node/handle-callback-err rule that corresponds to handle-callback-err rule.
  - node/no-mixed-requires rule that corresponds to no-mixed-requires rule.
  - node/no-new-require rule that corresponds to no-new-require rule.
  - node/no-path-concat rule that corresponds to no-path-concat rule, plus this recognizes template literals as well.
  - node/no-process-env rule that corresponds to no-process-env rule.
  - node/no-process-exit rule that corresponds to no-process-exit rule.
  - node/no-restricted-require rule that corresponds to no-restricted-modules rule, but this has simplified options.
  - node/no-sync rule that corresponds to no-sync rule.
- ade0b59 added node/no-restricted-import rule that is ES modules version of node/no-restricted-require rule.
11.0.0 - 2019-12-26
💥 Breaking changes
- b6cb9a0 updated node/no-unsupported-features/node-builtins rule based on Node.js 13.2.0.
- fb9ce15 updated node/no-unsupported-features/es-syntax rule to recognize BigInt literal property names.
- 4295f6a updated the rules that check global variables to recognize globalThis.*.
- 04051ed updated node/no-unsupported-features/es-builtins rule to recognize globalThis.
✨ Enhancements
- 276a9ad updated node/no-deprecated-api rule to allow revoked deprecations.
- 972f828 updated node/no-unsupported-features/node-builtins rule to handle backporting properly.
🐛 Bug fixes
- 4f74fbf fixed a crash bug around dynamic import syntax.
10.0.0 - 2019-09-05
This release supports BigInt and Dynamic Imports if you are using ESLint 6.2.0 or later.

💥 Breaking Changes
- 9ea67c9 updated node/no-unsupported-features/es-syntax rule to recognize BigInt literals and import().
- b91b48d updated node/no-unsupported-features/es-builtins rule to recognize BigInt, BigInt64Array, BigUint64Array, and Promise.allSettled.
- b57a4f9 updated node/file-extension-in-import, node/no-extraneous-import, node/no-missing-import, and node/no-unpublished-import rules to recognize import().
- 4b9c4d7 updated node/no-deprecated-api rule to recognize module.createRequireFromPath.
- 9c574ba updated plugin:node/recommended and the other configs.
  - It added node/no-exports-assign rule.
  - It changed exports global variable writable.
  - It enabled node/*-import rules in CommonJS mode as well.
✨ New rules
- a0f0ee1 added node/no-exports-assign rule that disallows exports = {}.
9.2.0 - 2019-08-29
✨ New Rules
- c1d5dbf added a new rule no-callback-literal.
🐛 Bug Fixes
- 72de3a3 updated eslint-utils for security fix.
9.1.0 - 2019-05-23
✨ Features
- fd9d19d updated no-deprecated-api to not suggest alternative APIs if it has not supported on configured Node.js version. Thank you, @ Lalem001 !
🐛 Bug Fixes
- e5aee3c updated semver package to not crash on wildcard * version range.
9.0.1 - 2019-05-04
🐛 Bug Fixes
- dfb4dc0 fixed the false positive of node/file-extension-in-import rule on scoped packages (#160).
9.0.0 - 2019-05-03
Update for Node.js v12 🎉

💥 Breaking Changes
- c95b2fd dropped Node.js 6 support because of End-of-Life.
- fe2343f dropped ESLint 4 support. New supported versions are ^5.16.0 and >=6.0.0.
- 7e0c2c5 updated node/no-deprecated-api rule to check new deprecated APIs in Node.js 12.
- 5d79f2d updated node/no-unsupported-features/node-builtins rule to recognize new APIs in Node.js 12.
- 02d61cf updated node/no-unsupported-features/es-builtins rule to recognize new APIs in Node.js 12.
- b94731a updated the rules for require() such as node/no-missing-require rule to check require.resolve() as well.
- 2061413 updated plugin:node/recommended preset.
✨ New Rules
- a3e0e29 added node/file-extension-in-import rule which enforce the style of file extensions.
- e41a1e0 added node/prefer-promises/dns rule and node/prefer-promises/fs rule which enforce to use Promise API instead of Callback API.
8.0.1 - 2019-01-04
🐛 Bug fixes
- 62ba642 fixed the wrong messages of node/no-deprecated-api rule (#142).
- 0225b02...0593c67 fixed the false positives of no-unpublished-(bin|import|require) rules (#115, #126).
8.0.0 - 2018-10-27
This release focuses on supporting new things that were added between Node.js 8.7.0 and 11.0.0.

Breaking changes
- 5860795 updated node/no-deprecated-api rule to disallow new deprecated APIs.
  Especially, it includes legacy URL API.
- d153b93 updated node/no-unsupported-features/node-builtins rule to detect new APIs.
New rules
- 46ed54d added node/prefer-global/text-decoder rule for new global varaible TextDecoder.
- 46ed54d added node/prefer-global/text-encoder rule for new global varaible TextEncoder.
7.0.1 - 2018-07-17
Bug fixes
- It fixed false positive that the node/no-unsupported-features/node-builtins reports the process.emitWarning method on Node.js >=6 <8. It was supported since Node.js 6.0.0.
7.0.0 - 2018-07-17
7.0.0-beta.0 - 2018-07-16
6.0.1 - 2018-02-23
6.0.0 - 2018-02-05
5.2.1 - 2017-10-23
5.2.0 - 2017-09-28

from eslint-plugin-node GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade eslint-plugin-node from 5.2.0 to 11.1.0. See this package in npm: eslint-plugin-node See this project in Snyk: https://app.snyk.io/org/youtacrands-va/project/7facb797-9137-428b-bbca-6bf2cc9f6189?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade eslint-plugin-node from 5.2.0 to 11.1.0 #4

[Snyk] Upgrade eslint-plugin-node from 5.2.0 to 11.1.0 #4

YoutacRandS-VA commented Jun 19, 2024

✨ Enhancements

💥 Breaking changes

✨ Enhancements

🐛 Bug fixes

💥 Breaking Changes

✨ New rules

✨ New Rules

🐛 Bug Fixes

✨ Features

🐛 Bug Fixes

🐛 Bug Fixes

💥 Breaking Changes

✨ New Rules

🐛 Bug fixes

Breaking changes

New rules

Bug fixes

[Snyk] Upgrade eslint-plugin-node from 5.2.0 to 11.1.0 #4

Are you sure you want to change the base?

[Snyk] Upgrade eslint-plugin-node from 5.2.0 to 11.1.0 #4

Conversation

YoutacRandS-VA commented Jun 19, 2024

Snyk has created this PR to upgrade eslint-plugin-node from 5.2.0 to 11.1.0.

Issues fixed by the recommended upgrade:

✨ Enhancements

💥 Breaking changes

✨ Enhancements

🐛 Bug fixes

💥 Breaking Changes

✨ New rules

✨ New Rules

🐛 Bug Fixes

✨ Features

🐛 Bug Fixes

🐛 Bug Fixes

💥 Breaking Changes

✨ New Rules

🐛 Bug fixes

Breaking changes

New rules

Bug fixes