Skip to content

Bump eslint from 8.17.0 to 8.33.0#327

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-8.33.0
Closed

Bump eslint from 8.17.0 to 8.33.0#327
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/eslint-8.33.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 30, 2023

Copy link
Copy Markdown
Contributor

Bumps eslint from 8.17.0 to 8.33.0.

Release notes

Sourced from eslint's releases.

v8.33.0

Features

  • 2cc7954 feat: add restrictDefaultExports option to no-restricted-exports rule (#16785) (Nitin Kumar)

Documentation

  • 17f4be2 docs: Fix examples in no-multiple-empty-lines rule (#16835) (jonz94)
  • 9c7cfe3 docs: 'Source Code' content in 'Set up Development Environment' page (#16780) (Ben Perlmutter)
  • ede5c64 docs: Custom processors page (#16802) (Ben Perlmutter)
  • 2620614 docs: Code of Conduct page (#16781) (Ben Perlmutter)
  • 50a8efd docs: report a sec vulnerability page (#16808) (Ben Perlmutter)
  • ed60afd docs: Update page titles, section landing pages, and side TOC (#16760) (Ben Perlmutter)
  • 333c712 docs: add background to code-path-diagrams for dark-mode (#16822) (Tanuj Kanti)
  • f5f7b9b docs: Update README (GitHub Actions Bot)
  • 2aa4f5f docs: no-constant-condition: Add multi-comparison example (#16776) (Sebastian Simon)
  • 40287db docs: Remove Google Group icon (#16779) (Nicholas C. Zakas)
  • ea10ca5 docs: 'a .eslint' -> 'an .eslint' for consistency (#16809) (Ben Perlmutter)
  • 3be0748 docs: add example for nodejs lintText api (#16789) (Siva K)
  • ce4f5ff docs: Replace removed related rules with a valid rule (#16800) (Ville Saalo)

v8.32.0

Features

  • fc20f24 feat: add suggestions for redundant wrapping in prefer-regex-literals (#16658) (YeonJuan)

Bug Fixes

  • b4f8329 fix: ignore directives for no-fallthrough (#16757) (gfyoung)

Documentation

  • 17b65ad docs: IA Update page URL move (#16665) (Ben Perlmutter)
  • 5981296 docs: fix theme switcher button (#16752) (Sam Chen)
  • 6669413 docs: deploy prerelease docs under the /docs/next/ path (#16541) (Nitin Kumar)
  • 78ecfe0 docs: use inline code for rule options name (#16768) (Percy Ma)
  • fc2ea59 docs: Update README (GitHub Actions Bot)
  • 762a872 docs: Update README (GitHub Actions Bot)

Chores

  • 2952d6e chore: sync templates/*.md files with issue templates (#16758) (gfyoung)
  • 3e34418 chore: Add new issues to triage project (#16740) (Nicholas C. Zakas)

v8.31.0

Features

  • 52c7c73 feat: check assignment patterns in no-underscore-dangle (#16693) (Milos Djermanovic)
  • b401cde feat: add options to check destructuring in no-underscore-dangle (#16006) (Morten Kaltoft)
  • 30d0daf feat: group properties with values in parentheses in key-spacing (#16677) (Francesco Trotta)

Bug Fixes

  • 35439f1 fix: correct syntax error in prefer-arrow-callback autofix (#16722) (Francesco Trotta)
  • 87b2470 fix: new instance of FlatESLint should load latest config file version (#16608) (Milos Djermanovic)

Documentation

  • 4339dc4 docs: Update README (GitHub Actions Bot)

... (truncated)

Changelog

Sourced from eslint's changelog.

v8.33.0 - January 28, 2023

  • 17f4be2 docs: Fix examples in no-multiple-empty-lines rule (#16835) (jonz94)
  • 9c7cfe3 docs: 'Source Code' content in 'Set up Development Environment' page (#16780) (Ben Perlmutter)
  • ede5c64 docs: Custom processors page (#16802) (Ben Perlmutter)
  • 2620614 docs: Code of Conduct page (#16781) (Ben Perlmutter)
  • 50a8efd docs: report a sec vulnerability page (#16808) (Ben Perlmutter)
  • 2cc7954 feat: add restrictDefaultExports option to no-restricted-exports rule (#16785) (Nitin Kumar)
  • ed60afd docs: Update page titles, section landing pages, and side TOC (#16760) (Ben Perlmutter)
  • 333c712 docs: add background to code-path-diagrams for dark-mode (#16822) (Tanuj Kanti)
  • f5f7b9b docs: Update README (GitHub Actions Bot)
  • 2aa4f5f docs: no-constant-condition: Add multi-comparison example (#16776) (Sebastian Simon)
  • 40287db docs: Remove Google Group icon (#16779) (Nicholas C. Zakas)
  • ea10ca5 docs: 'a .eslint' -> 'an .eslint' for consistency (#16809) (Ben Perlmutter)
  • 3be0748 docs: add example for nodejs lintText api (#16789) (Siva K)
  • ce4f5ff docs: Replace removed related rules with a valid rule (#16800) (Ville Saalo)

v8.32.0 - January 14, 2023

  • 17b65ad docs: IA Update page URL move (#16665) (Ben Perlmutter)
  • b4f8329 fix: ignore directives for no-fallthrough (#16757) (gfyoung)
  • 5981296 docs: fix theme switcher button (#16752) (Sam Chen)
  • 6669413 docs: deploy prerelease docs under the /docs/next/ path (#16541) (Nitin Kumar)
  • 2952d6e chore: sync templates/*.md files with issue templates (#16758) (gfyoung)
  • 78ecfe0 docs: use inline code for rule options name (#16768) (Percy Ma)
  • 3e34418 chore: Add new issues to triage project (#16740) (Nicholas C. Zakas)
  • fc2ea59 docs: Update README (GitHub Actions Bot)
  • fc20f24 feat: add suggestions for redundant wrapping in prefer-regex-literals (#16658) (YeonJuan)
  • 762a872 docs: Update README (GitHub Actions Bot)

v8.31.0 - December 31, 2022

  • 65d4e24 chore: Upgrade @​eslint/eslintrc@​1.4.1 (#16729) (Brandon Mills)
  • 35439f1 fix: correct syntax error in prefer-arrow-callback autofix (#16722) (Francesco Trotta)
  • 87b2470 fix: new instance of FlatESLint should load latest config file version (#16608) (Milos Djermanovic)
  • 8d93081 chore: fix CI failure (#16721) (Sam Chen)
  • 4339dc4 docs: Update README (GitHub Actions Bot)
  • 8f17247 chore: Set up automatic updating of README (#16717) (Nicholas C. Zakas)
  • 4e4049c docs: optimize code block structure (#16669) (Sam Chen)
  • 54a7ade docs: do not escape code blocks of formatters examples (#16719) (Sam Chen)
  • 52c7c73 feat: check assignment patterns in no-underscore-dangle (#16693) (Milos Djermanovic)
  • e5ecfef docs: Add function call example for no-undefined (#16712) (Elliot Huffman)
  • a3262f0 docs: Add mastodon link (#16638) (Amaresh S M)
  • 4cd87cb ci: bump actions/stale from 6 to 7 (#16713) (dependabot[bot])
  • a14ccf9 docs: clarify files property (#16709) (Sam Chen)
  • 3b29eb1 docs: fix npm link (#16710) (Abdullah Osama)
  • fd20c75 chore: sort package.json scripts in alphabetical order (#16705) (Darius Dzien)
  • a638673 docs: fix search bar focus on Esc (#16700) (Shanmughapriyan S)
  • f62b722 docs: country flag missing in windows (#16698) (Shanmughapriyan S)
  • 4d27ec6 docs: display zh-hans in the docs language switcher (#16686) (Percy Ma)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eslint](https://github.com/eslint/eslint) from 8.17.0 to 8.33.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.17.0...v8.33.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jan 30, 2023
@guardrails

guardrails Bot commented Jan 30, 2023

Copy link
Copy Markdown

⚠️ We detected 123 security issues in this pull request:

Vulnerable Libraries (123)
Severity Details
High @unimodules/react-native-adapter@6.1.0 (t) upgrade to: >6.1.0
High glob-watcher@5.0.5 (t) upgrade to: >=3.0.0
High gulp@4.0.2 (t) upgrade to: >=3.9.1
High ini@1.3.5 (t) upgrade to: >=1.3.6
High json5@1.0.1 (t) upgrade to: >=1.0.2
High minimatch@3.0.4 (t) upgrade to: >=3.0.5
Critical minimist@1.2.5 (t) upgrade to: >=1.2.6
High tar@4.4.13 (t) upgrade to: >4.4.17
High pkg:npm/file-type@4.4.0@4.4.0 (t) - no patch available
High pkg:npm/file-type@4.4.0@4.4.0 (t) - no patch available
High pkg:npm/file-type@4.4.0@4.4.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/msrcrypto@1.5.8@1.5.8 (t) - no patch available
Critical pkg:npm/msrcrypto@1.5.8@1.5.8 (t) - no patch available
Medium pkg:npm/got@8.3.2@8.3.2 (t) - no patch available
Medium pkg:npm/got@8.3.2@8.3.2 (t) - no patch available
Medium pkg:npm/got@8.3.2@8.3.2 (t) - no patch available
High pkg:npm/yargs-parser@5.0.0-security.0@5.0.0-security.0 (t) - no patch available
High pkg:npm/yargs-parser@5.0.0-security.0@5.0.0-security.0 (t) - no patch available
High pkg:npm/fast-json-patch@2.2.1@2.2.1 (t) - no patch available
High pkg:npm/fast-json-patch@2.2.1@2.2.1 (t) - no patch available
High pkg:npm/fast-json-patch@2.2.1@2.2.1 (t) - no patch available
Medium pkg:npm/react@18.2.0@18.2.0 (t) - no patch available
Medium pkg:npm/react@18.2.0@18.2.0 (t) - no patch available
Medium pkg:npm/react@18.2.0@18.2.0 (t) - no patch available
Medium pkg:npm/react@18.2.0@18.2.0 (t) - no patch available
Medium pkg:npm/react@18.2.0@18.2.0 (t) - no patch available
Medium pkg:npm/react@18.2.0@18.2.0 (t) - no patch available
Medium pkg:npm/react@18.2.0@18.2.0 (t) - no patch available
High pkg:npm/mocha@10.0.0@10.0.0 (t) - no patch available
High pkg:npm/file-type@5.2.0@5.2.0 (t) - no patch available
High pkg:npm/file-type@5.2.0@5.2.0 (t) - no patch available
High pkg:npm/file-type@5.2.0@5.2.0 (t) - no patch available
High pkg:npm/file-type@5.2.0@5.2.0 (t) - no patch available
High pkg:npm/file-type@5.2.0@5.2.0 (t) - no patch available
High pkg:npm/flat@5.0.2@5.0.2 (t) - no patch available
High pkg:npm/flat@5.0.2@5.0.2 (t) - no patch available
High pkg:npm/flat@5.0.2@5.0.2 (t) - no patch available
High pkg:npm/file-type@6.2.0@6.2.0 (t) - no patch available
High pkg:npm/file-type@6.2.0@6.2.0 (t) - no patch available
High pkg:npm/file-type@6.2.0@6.2.0 (t) - no patch available
Critical pkg:npm/unset-value@1.0.0@1.0.0 (t) - no patch available
Critical pkg:npm/unset-value@1.0.0@1.0.0 (t) - no patch available
High pkg:npm/json-merge-patch@0.2.3@0.2.3 (t) - no patch available
High pkg:npm/json-merge-patch@0.2.3@0.2.3 (t) - no patch available
High pkg:npm/json-merge-patch@0.2.3@0.2.3 (t) - no patch available
High pkg:npm/minimatch@3.0.4@3.0.4 (t) upgrade to: 3.0.5
High pkg:npm/minimatch@3.0.4@3.0.4 (t) upgrade to: 3.0.5
High pkg:npm/ini@1.3.5@1.3.5 (t) upgrade to: 1.3.6
High pkg:npm/ini@1.3.5@1.3.5 (t) upgrade to: 1.3.6
High pkg:npm/ini@1.3.5@1.3.5 (t) upgrade to: 1.3.6
Medium pkg:npm/jszip@3.7.1@3.7.1 (t) - no patch available
Medium pkg:npm/jszip@3.7.1@3.7.1 (t) - no patch available
Medium pkg:npm/jszip@3.7.1@3.7.1 (t) - no patch available
High pkg:npm/moment@2.29.2@2.29.2 (t) upgrade to: 2.29.4,2.29.4
High pkg:npm/moment@2.29.2@2.29.2 (t) upgrade to: 2.29.4,2.29.4
Critical pkg:npm/express@4.17.2@4.17.2 (t) - no patch available
Critical pkg:npm/express@4.17.2@4.17.2 (t) - no patch available
Critical pkg:npm/express@4.17.2@4.17.2 (t) - no patch available
High pkg:npm/json5@1.0.1@1.0.1 (t) upgrade to: 2.2.2
High pkg:npm/json5@1.0.1@1.0.1 (t) upgrade to: 2.2.2
High pkg:npm/file-type@11.1.0@11.1.0 (t) - no patch available
High pkg:npm/file-type@11.1.0@11.1.0 (t) - no patch available
High pkg:npm/file-type@11.1.0@11.1.0 (t) - no patch available
High pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
High pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
High pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
High pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
Critical pkg:npm/qs@6.9.6@6.9.6 (t) - no patch available
Critical pkg:npm/qs@6.9.6@6.9.6 (t) - no patch available
Medium pkg:npm/got@9.6.0@9.6.0 (t) - no patch available
Medium pkg:npm/got@9.6.0@9.6.0 (t) - no patch available
High pkg:npm/file-type@3.9.0@3.9.0 (t) - no patch available
High pkg:npm/file-type@3.9.0@3.9.0 (t) - no patch available
High pkg:npm/file-type@3.9.0@3.9.0 (t) - no patch available
Medium pkg:npm/node-notifier@9.0.0@9.0.0 (t) - no patch available
Medium pkg:npm/node-notifier@9.0.0@9.0.0 (t) - no patch available
Critical pkg:npm/minimist@1.2.5@1.2.5 (t) upgrade to: 1.2.6
Critical pkg:npm/minimist@1.2.5@1.2.5 (t) upgrade to: 1.2.6
Critical pkg:npm/set-value@2.0.1@2.0.1 (t) - no patch available
Critical pkg:npm/set-value@2.0.1@2.0.1 (t) - no patch available
Critical pkg:npm/set-value@2.0.1@2.0.1 (t) - no patch available
Medium pkg:npm/eslint-plugin-no-unsanitized@4.0.1@4.0.1 (t) - no patch available
N/A pkg:npm/debug@2.6.9@2.6.9 (t) upgrade to: 3.1.0
N/A pkg:npm/debug@2.6.9@2.6.9 (t) upgrade to: 3.1.0
N/A pkg:npm/debug@2.6.9@2.6.9 (t) upgrade to: 3.1.0
N/A pkg:npm/node-forge@0.10.0@0.10.0 (t) upgrade to: 1.0.0
N/A pkg:npm/node-forge@0.10.0@0.10.0 (t) upgrade to: 1.0.0
High pkg:npm/json@11.0.0@11.0.0 (t) - no patch available
Medium pkg:npm/node-fetch@1.7.3@1.7.3 (t) - no patch available
Medium pkg:npm/node-fetch@1.7.3@1.7.3 (t) - no patch available
Medium pkg:npm/node-fetch@1.7.3@1.7.3 (t) - no patch available
Critical pkg:npm/jsonwebtoken@8.5.1@8.5.1 (t) - no patch available
Critical pkg:npm/jsonwebtoken@8.5.1@8.5.1 (t) - no patch available
Critical pkg:npm/jsonwebtoken@8.5.1@8.5.1 (t) - no patch available
N/A pkg:npm/decode-uri-component@0.2.0@0.2.0 (t) - no patch available
N/A pkg:npm/decode-uri-component@0.2.0@0.2.0 (t) - no patch available
N/A pkg:npm/decode-uri-component@0.2.0@0.2.0 (t) - no patch available
Medium pkg:npm/ua-parser-js@0.7.33@0.7.33 (t) - no patch available
Medium pkg:npm/ua-parser-js@0.7.33@0.7.33 (t) - no patch available
Medium pkg:npm/ua-parser-js@0.7.33@0.7.33 (t) - no patch available
Low pkg:npm/node-fetch@2.6.8@2.6.8 (t) - no patch available
Low pkg:npm/node-fetch@2.6.8@2.6.8 (t) - no patch available
Low pkg:npm/node-fetch@2.6.8@2.6.8 (t) - no patch available
Medium pkg:npm/request@2.88.2@2.88.2 (t) - no patch available
Medium pkg:npm/request@2.88.2@2.88.2 (t) - no patch available
High pkg:npm/tar@4.4.13@4.4.13 (t) upgrade to: 4.4.18,5.0.10,6.1.9
High pkg:npm/tar@4.4.13@4.4.13 (t) upgrade to: 4.4.18,5.0.10,6.1.9
Medium pkg:npm/ws@6.2.2@6.2.2 (t) - no patch available
Medium pkg:npm/ws@6.2.2@6.2.2 (t) - no patch available
Medium pkg:npm/ws@6.2.2@6.2.2 (t) - no patch available

More info on how to fix Vulnerable Libraries in JavaScript.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@dependabot @github

dependabot Bot commented on behalf of github Feb 13, 2023

Copy link
Copy Markdown
Contributor Author

Superseded by #332.

@dependabot dependabot Bot closed this Feb 13, 2023
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/eslint-8.33.0 branch February 13, 2023 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants