Skip to content

Bump eslint from 8.17.0 to 8.31.0#319

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-8.31.0
Closed

Bump eslint from 8.17.0 to 8.31.0#319
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-8.31.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 2, 2023

Copy link
Copy Markdown
Contributor

Bumps eslint from 8.17.0 to 8.31.0.

Release notes

Sourced from eslint's releases.

v8.31.0

Features

  • 52c7c73 feat: check assignment patterns in no-underscore-dangle (#16693) (Milos Djermanovic)
  • b401cde feat: add options to check destructuring in no-underscore-dangle (#16006) (Morten Kaltoft)
  • 30d0daf feat: group properties with values in parentheses in key-spacing (#16677) (Francesco Trotta)

Bug Fixes

  • 35439f1 fix: correct syntax error in prefer-arrow-callback autofix (#16722) (Francesco Trotta)
  • 87b2470 fix: new instance of FlatESLint should load latest config file version (#16608) (Milos Djermanovic)

Documentation

  • 4339dc4 docs: Update README (GitHub Actions Bot)
  • 4e4049c docs: optimize code block structure (#16669) (Sam Chen)
  • 54a7ade docs: do not escape code blocks of formatters examples (#16719) (Sam Chen)
  • e5ecfef docs: Add function call example for no-undefined (#16712) (Elliot Huffman)
  • a3262f0 docs: Add mastodon link (#16638) (Amaresh S M)
  • a14ccf9 docs: clarify files property (#16709) (Sam Chen)
  • 3b29eb1 docs: fix npm link (#16710) (Abdullah Osama)
  • a638673 docs: fix search bar focus on Esc (#16700) (Shanmughapriyan S)
  • f62b722 docs: country flag missing in windows (#16698) (Shanmughapriyan S)
  • 4d27ec6 docs: display zh-hans in the docs language switcher (#16686) (Percy Ma)
  • 8bda20e docs: remove manually maintained anchors (#16685) (Percy Ma)
  • b68440f docs: User Guide Getting Started expansion (#16596) (Ben Perlmutter)

Chores

  • 65d4e24 chore: Upgrade @​eslint/eslintrc@​1.4.1 (#16729) (Brandon Mills)
  • 8d93081 chore: fix CI failure (#16721) (Sam Chen)
  • 8f17247 chore: Set up automatic updating of README (#16717) (Nicholas C. Zakas)
  • 4cd87cb ci: bump actions/stale from 6 to 7 (#16713) (dependabot[bot])
  • fd20c75 chore: sort package.json scripts in alphabetical order (#16705) (Darius Dzien)
  • 10a5c78 chore: update ignore patterns in eslint.config.js (#16678) (Milos Djermanovic)

v8.30.0

Features

  • 075ef2c feat: add suggestion for no-return-await (#16637) (Daniel Bartholomae)
  • 7190d98 feat: update globals (#16654) (Sébastien Règne)

Bug Fixes

  • 1a327aa fix: Ensure flat config unignores work consistently like eslintrc (#16579) (Nicholas C. Zakas)
  • 9b8bb72 fix: autofix recursive functions in no-var (#16611) (Milos Djermanovic)

Documentation

  • 6a8cd94 docs: Clarify Discord info in issue template config (#16663) (Nicholas C. Zakas)
  • ad44344 docs: CLI documentation standardization (#16563) (Ben Perlmutter)
  • 293573e docs: fix broken line numbers (#16606) (Sam Chen)
  • fa2c64b docs: use relative links for internal links (#16631) (Percy Ma)
  • 75276c9 docs: reorder options in no-unused-vars (#16625) (Milos Djermanovic)
  • 7276fe5 docs: Fix anchor in URL (#16628) (Karl Horky)
  • 6bef135 docs: don't apply layouts to html formatter example (#16591) (Tanuj Kanti)
  • dfc7ec1 docs: Formatters page updates (#16566) (Ben Perlmutter)

... (truncated)

Changelog

Sourced from eslint's changelog.

v8.31.0 - December 31, 2022

  • 65d4e24 chore: Upgrade @​eslint/eslintrc@​1.4.1 (#16729) (Brandon Mills)
  • 35439f1 fix: correct syntax error in prefer-arrow-callback autofix (#16722) (Francesco Trotta)
  • 87b2470 fix: new instance of FlatESLint should load latest config file version (#16608) (Milos Djermanovic)
  • 8d93081 chore: fix CI failure (#16721) (Sam Chen)
  • 4339dc4 docs: Update README (GitHub Actions Bot)
  • 8f17247 chore: Set up automatic updating of README (#16717) (Nicholas C. Zakas)
  • 4e4049c docs: optimize code block structure (#16669) (Sam Chen)
  • 54a7ade docs: do not escape code blocks of formatters examples (#16719) (Sam Chen)
  • 52c7c73 feat: check assignment patterns in no-underscore-dangle (#16693) (Milos Djermanovic)
  • e5ecfef docs: Add function call example for no-undefined (#16712) (Elliot Huffman)
  • a3262f0 docs: Add mastodon link (#16638) (Amaresh S M)
  • 4cd87cb ci: bump actions/stale from 6 to 7 (#16713) (dependabot[bot])
  • a14ccf9 docs: clarify files property (#16709) (Sam Chen)
  • 3b29eb1 docs: fix npm link (#16710) (Abdullah Osama)
  • fd20c75 chore: sort package.json scripts in alphabetical order (#16705) (Darius Dzien)
  • a638673 docs: fix search bar focus on Esc (#16700) (Shanmughapriyan S)
  • f62b722 docs: country flag missing in windows (#16698) (Shanmughapriyan S)
  • 4d27ec6 docs: display zh-hans in the docs language switcher (#16686) (Percy Ma)
  • 8bda20e docs: remove manually maintained anchors (#16685) (Percy Ma)
  • b401cde feat: add options to check destructuring in no-underscore-dangle (#16006) (Morten Kaltoft)
  • b68440f docs: User Guide Getting Started expansion (#16596) (Ben Perlmutter)
  • 30d0daf feat: group properties with values in parentheses in key-spacing (#16677) (Francesco Trotta)
  • 10a5c78 chore: update ignore patterns in eslint.config.js (#16678) (Milos Djermanovic)

v8.30.0 - December 16, 2022

  • f2c4737 chore: upgrade @​eslint/eslintrc@​1.4.0 (#16675) (Milos Djermanovic)
  • 1a327aa fix: Ensure flat config unignores work consistently like eslintrc (#16579) (Nicholas C. Zakas)
  • 075ef2c feat: add suggestion for no-return-await (#16637) (Daniel Bartholomae)
  • ba74253 chore: standardize npm script names per #14827 (#16315) (Patrick McElhaney)
  • 6a8cd94 docs: Clarify Discord info in issue template config (#16663) (Nicholas C. Zakas)
  • 0d9af4c ci: fix npm v9 problem with file: (#16664) (Milos Djermanovic)
  • 7190d98 feat: update globals (#16654) (Sébastien Règne)
  • ad44344 docs: CLI documentation standardization (#16563) (Ben Perlmutter)
  • 90c9219 refactor: migrate off deprecated function-style rules in all tests (#16618) (Bryan Mishkin)
  • 9b8bb72 fix: autofix recursive functions in no-var (#16611) (Milos Djermanovic)
  • 293573e docs: fix broken line numbers (#16606) (Sam Chen)
  • fa2c64b docs: use relative links for internal links (#16631) (Percy Ma)
  • 75276c9 docs: reorder options in no-unused-vars (#16625) (Milos Djermanovic)
  • 7276fe5 docs: Fix anchor in URL (#16628) (Karl Horky)
  • 6bef135 docs: don't apply layouts to html formatter example (#16591) (Tanuj Kanti)
  • dfc7ec1 docs: Formatters page updates (#16566) (Ben Perlmutter)
  • 8ba124c docs: update the prefer-const example (#16607) (Pavel)
  • e6cb05a docs: fix css leaking (#16603) (Sam Chen)

v8.29.0 - December 2, 2022

  • 0311d81 docs: Configuring Plugins page intro, page tweaks, and rename (#16534) (Ben Perlmutter)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint](https://github.com/eslint/eslint) from 8.17.0 to 8.31.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.17.0...v8.31.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jan 2, 2023
@guardrails

guardrails Bot commented Jan 2, 2023

Copy link
Copy Markdown

⚠️ We detected 41 security issues in this pull request:

Vulnerable Libraries (41)
Severity Details
High eslint-config-airbnb@19.0.4 (t) upgrade to: >=18.2.1
High eslint-config-airbnb-base@15.0.0 (t) upgrade to: >=15.0.0
High gulp@4.0.2 (t) upgrade to: >=3.9.1
High ini@1.3.5 (t) upgrade to: >=1.3.6
High tar@4.4.13 (t) upgrade to: >4.4.17
High terser@5.10.0 (t) upgrade to: >5.14.1
High pkg:npm/json5@1.0.1@1.0.1 (t) upgrade to: 2.2.2
High pkg:npm/json5@1.0.1@1.0.1 (t) upgrade to: 2.2.2
High pkg:npm/json-merge-patch@0.2.3@0.2.3 (t) - no patch available
High pkg:npm/json-merge-patch@0.2.3@0.2.3 (t) - no patch available
Critical pkg:npm/set-value@2.0.1@2.0.1 (t) - no patch available
Critical pkg:npm/set-value@2.0.1@2.0.1 (t) - no patch available
Critical pkg:npm/unset-value@1.0.0@1.0.0 (t) - no patch available
Medium pkg:npm/react@18.1.0@18.1.0 (t) - no patch available
Medium pkg:npm/react@18.1.0@18.1.0 (t) - no patch available
High pkg:npm/flat@5.0.2@5.0.2 (t) - no patch available
High pkg:npm/flat@5.0.2@5.0.2 (t) - no patch available
N/A pkg:npm/jsonwebtoken@8.5.1@8.5.1 (t) upgrade to: 9.0.0
N/A pkg:npm/jsonwebtoken@8.5.1@8.5.1 (t) upgrade to: 9.0.0
Critical pkg:npm/msrcrypto@1.5.8@1.5.8 (t) - no patch available
N/A pkg:npm/node-forge@0.10.0@0.10.0 (t) upgrade to: 1.0.0
High pkg:npm/fast-json-patch@2.2.1@2.2.1 (t) - no patch available
High pkg:npm/fast-json-patch@2.2.1@2.2.1 (t) - no patch available
High pkg:npm/yargs-parser@5.0.0-security.0@5.0.0-security.0 (t) - no patch available
N/A pkg:npm/decode-uri-component@0.2.0@0.2.0 (t) - no patch available
N/A pkg:npm/decode-uri-component@0.2.0@0.2.0 (t) - no patch available
High pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
High pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
High pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
Low pkg:npm/request@2.88.2@2.88.2 (t) - no patch available
Medium pkg:npm/node-notifier@9.0.0@9.0.0 (t) - no patch available
High pkg:npm/moment@2.29.2@2.29.2 (t) upgrade to: 2.29.4,2.29.4
Low pkg:npm/node-fetch@2.6.7@2.6.7 (t) - no patch available
Low pkg:npm/node-fetch@2.6.7@2.6.7 (t) - no patch available
Critical pkg:npm/qs@6.9.6@6.9.6 (t) - no patch available
Critical pkg:npm/express@4.17.2@4.17.2 (t) - no patch available
Critical pkg:npm/express@4.17.2@4.17.2 (t) - no patch available
Medium pkg:npm/got@8.3.2@8.3.2 (t) - no patch available
Medium pkg:npm/got@8.3.2@8.3.2 (t) - no patch available
High pkg:npm/file-type@11.1.0@11.1.0 (t) - no patch available
High pkg:npm/file-type@11.1.0@11.1.0 (t) - no patch available

More info on how to fix Vulnerable Libraries in JavaScript.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@dependabot @github

dependabot Bot commented on behalf of github Jan 16, 2023

Copy link
Copy Markdown
Contributor Author

Superseded by #324.

@dependabot dependabot Bot closed this Jan 16, 2023
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/eslint-8.31.0 branch January 16, 2023 13:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants