PSDTools / psdtools.github.io

Our websites.
1 stars 0 forks source link

chore(deps-dev): bump the lint group with 4 updates #42

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the lint group with 4 updates: @sherifforg/types, eslint, @types/eslint and eslint-config-sheriff.

Updates @sherifforg/types from 3.1.2 to 4.0.1

Release notes

Sourced from @​sherifforg/types's releases.

@​sherifforg/types@​4.0.1

Patch Changes

  • fdbb0db: chore(deps): updated some deps

  • 028c5d7: chore(deps): bump

  • f685bae: feat(config): exposed more variables from main package feat(config): reworked overrides BREAKING CHANGE: removed the noRestrictedSyntaxOverride config option

    Closes #188

@​sherifforg/types@​4.0.0

Major Changes

  • 1859c47: fix!: typo in config

Patch Changes

  • aa57685: feat!: make astro support optional
Changelog

Sourced from @​sherifforg/types's changelog.

4.0.1

Patch Changes

  • fdbb0db: chore(deps): updated some deps

  • 028c5d7: chore(deps): bump

  • f685bae: feat(config): exposed more variables from main package feat(config): reworked overrides BREAKING CHANGE: removed the noRestrictedSyntaxOverride config option

    Closes #188

4.0.0

Major Changes

  • 1859c47: fix!: typo in config

Patch Changes

  • aa57685: feat!: make astro support optional
Commits


Updates eslint from 8.57.0 to 9.9.0

Release notes

Sourced from eslint's releases.

v9.9.0

Features

  • 41d0206 feat: Add support for TS config files (#18134) (Arya Emami)
  • 3a4eaf9 feat: add suggestion to require-await to remove async keyword (#18716) (Dave)

Documentation

  • 9fe068c docs: how to author plugins with configs that extend other configs (#18753) (Alec Gibson)
  • 48117b2 docs: add version support page in the side navbar (#18738) (Amaresh S M)
  • fec2951 docs: add version support page to the dropdown (#18730) (Amaresh S M)
  • 38a0661 docs: Fix typo (#18735) (Zaina Al Habash)
  • 3c32a9e docs: Update yarn command for creating ESLint config (#18739) (Temitope Ogunleye)
  • f9ac978 docs: Update README (GitHub Actions Bot)

Chores

  • 461b2c3 chore: upgrade to @eslint/js@9.9.0 (#18765) (Francesco Trotta)
  • 59dba1b chore: package.json update for @​eslint/js release (Jenkins)
  • fea8563 chore: update dependency @​eslint/core to ^0.3.0 (#18724) (renovate[bot])
  • aac191e chore: update dependency @​eslint/json to ^0.3.0 (#18760) (renovate[bot])
  • b97fa05 chore: update wdio dependencies for more stable tests (#18759) (Christian Bromann)

v9.8.0

Features

  • 13d0bd3 feat: Add and use SourceCode#getLoc/getRange (#18703) (Nicholas C. Zakas)

Bug Fixes

  • ab0ff27 fix: Throw error when invalid flags passed (#18705) (Nicholas C. Zakas)
  • 70dc803 fix: basePath directory can never be ignored (#18711) (Milos Djermanovic)

Documentation

Build Related

  • 4514424 build: Enable JSON linting (#18681) (Nicholas C. Zakas)

Chores

  • deee448 chore: upgrade to @eslint/js@9.8.0 (#18720) (Francesco Trotta)
  • 4aaf2b3 chore: package.json update for @​eslint/js release (Jenkins)
  • 8e1a627 chore: update dependency @​eslint/core to ^0.2.0 (#18700) (renovate[bot])

v9.7.0

Features

  • 7bd9839 feat: add support for es2025 duplicate named capturing groups (#18630) (Yosuke Ota)
  • 1381394 feat: add regex option in no-restricted-imports (#18622) (Nitin Kumar)

Bug Fixes

  • 14e9f81 fix: destructuring in catch clause in no-unused-vars (#18636) (Francesco Trotta)

Documentation

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.9.0 - August 9, 2024

  • 461b2c3 chore: upgrade to @eslint/js@9.9.0 (#18765) (Francesco Trotta)
  • 59dba1b chore: package.json update for @​eslint/js release (Jenkins)
  • fea8563 chore: update dependency @​eslint/core to ^0.3.0 (#18724) (renovate[bot])
  • 41d0206 feat: Add support for TS config files (#18134) (Arya Emami)
  • aac191e chore: update dependency @​eslint/json to ^0.3.0 (#18760) (renovate[bot])
  • 9fe068c docs: how to author plugins with configs that extend other configs (#18753) (Alec Gibson)
  • b97fa05 chore: update wdio dependencies for more stable tests (#18759) (Christian Bromann)
  • 3a4eaf9 feat: add suggestion to require-await to remove async keyword (#18716) (Dave)
  • 48117b2 docs: add version support page in the side navbar (#18738) (Amaresh S M)
  • fec2951 docs: add version support page to the dropdown (#18730) (Amaresh S M)
  • 38a0661 docs: Fix typo (#18735) (Zaina Al Habash)
  • 3c32a9e docs: Update yarn command for creating ESLint config (#18739) (Temitope Ogunleye)
  • f9ac978 docs: Update README (GitHub Actions Bot)

v9.8.0 - July 26, 2024

  • deee448 chore: upgrade to @eslint/js@9.8.0 (#18720) (Francesco Trotta)
  • 4aaf2b3 chore: package.json update for @​eslint/js release (Jenkins)
  • 8e1a627 chore: update dependency @​eslint/core to ^0.2.0 (#18700) (renovate[bot])
  • 13d0bd3 feat: Add and use SourceCode#getLoc/getRange (#18703) (Nicholas C. Zakas)
  • 282df1a docs: Add system theme option (#18617) (Amaresh S M)
  • ab0ff27 fix: Throw error when invalid flags passed (#18705) (Nicholas C. Zakas)
  • 70dc803 fix: basePath directory can never be ignored (#18711) (Milos Djermanovic)
  • 53b1ff0 docs: Debug config docs (#18698) (Nicholas C. Zakas)
  • 4514424 build: Enable JSON linting (#18681) (Nicholas C. Zakas)
  • a7016a5 docs: fix search input stylings (#18682) (Amaresh S M)

v9.7.0 - July 12, 2024

  • 793b718 chore: upgrade @​eslint/js@​9.7.0 (#18680) (Francesco Trotta)
  • 7ed6f9a chore: package.json update for @​eslint/js release (Jenkins)
  • 14e9f81 fix: destructuring in catch clause in no-unused-vars (#18636) (Francesco Trotta)
  • 7bcda76 refactor: Add type references (#18652) (Nicholas C. Zakas)
  • 51bf57c chore: add tech sponsors through actions (#18624) (Strek)
  • 9f416db docs: Add Powered by Algolia label to the search. (#18633) (Amaresh S M)
  • 6320732 refactor: don't use parent property in NodeEventGenerator (#18653) (Milos Djermanovic)
  • 7bd9839 feat: add support for es2025 duplicate named capturing groups (#18630) (Yosuke Ota)
  • 1381394 feat: add regex option in no-restricted-imports (#18622) (Nitin Kumar)
  • 9e6d640 refactor: move "Parsing error" prefix adding to Linter (#18650) (Milos Djermanovic)
  • c8d26cb docs: Open JS Foundation -> OpenJS Foundation (#18649) (Milos Djermanovic)
  • 6e79ac7 docs: loadESLint does not support option cwd (#18641) (Francesco Trotta)

v9.6.0 - June 28, 2024

  • b15ee30 chore: upgrade @​eslint/js@​9.6.0 (#18632) (Milos Djermanovic)
  • d655503 chore: package.json update for @​eslint/js release (Jenkins)
  • 1613e2e fix: Allow escaping characters in config patterns on Windows (#18628) (Milos Djermanovic)
  • 13dbecd docs: Limit search to just docs (#18627) (Nicholas C. Zakas)

... (truncated)

Commits
  • 0dd3863 9.9.0
  • 2e5ba77 Build: changelog update for 9.9.0
  • 461b2c3 chore: upgrade to @eslint/js@9.9.0 (#18765)
  • 59dba1b chore: package.json update for @​eslint/js release
  • fea8563 chore: update dependency @​eslint/core to ^0.3.0 (#18724)
  • 41d0206 feat: Add support for TS config files (#18134)
  • aac191e chore: update dependency @​eslint/json to ^0.3.0 (#18760)
  • 9fe068c docs: how to author plugins with configs that extend other configs (#18753)
  • b97fa05 chore: update wdio dependencies for more stable tests (#18759)
  • 3a4eaf9 feat: add suggestion to require-await to remove async keyword (#18716)
  • Additional commits viewable in compare view


Updates @types/eslint from 8.56.10 to 9.6.0

Commits


Updates eslint-config-sheriff from 18.7.0 to 20.0.0

Release notes

Sourced from eslint-config-sheriff's releases.

eslint-config-sheriff@20.0.0

Major Changes

  • f685bae: feat(config): exposed more variables from main package feat(config): reworked overrides BREAKING CHANGE: removed the noRestrictedSyntaxOverride config option

    Closes #188

  • b4685c3: feat(config): added ESLint v9 support and removed ESLint version 8.57.0 pins Fixes #179 Fixes #185

Minor Changes

  • a124f56: feat(config): removed eslint-plugin-fp
  • dd61624: feat(deps): Update eslint-plugin-jsdoc to latest. Closes #182
  • 4960381: feat(config): removed eslint-config-prettier
  • 734355c: feat(deps): updated eslint-plugin-unicorn to latest

Patch Changes

  • 1d42d3b: feat(deps): update eslint-plugin-playwright to latest Fixes #184
  • c92bee5: feat(config): added getIndexedBaseNoRestrictedSyntaxRules
  • 66b6e50: feat(deps): update eslint-plugin-jest to latest Fixes #183
  • fdbb0db: chore(deps): updated some deps
  • 028c5d7: chore(deps): bump
  • 84ab8bb: feat(deps): update eslint-plugin-react to latest Fixes #176
  • b755626: feat(deps): update eslint-plugin-sonarjs to latest
  • fc4e0e5: feat(deps): update @​typescript-eslint/eslint-plugin to latest Fixes #177
  • 76dcc6a: feat(deps): added @​types/eslint-plugin-jsx-a11y

eslint-config-sheriff@19.0.0

Major Changes

  • aa57685: feat!: make astro support optional
  • 1859c47: fix!: typo in config

Minor Changes

  • 0fd4217: feat: allow zero-config sheriff
Changelog

Sourced from eslint-config-sheriff's changelog.

20.0.0

Major Changes

  • f685bae: feat(config): exposed more variables from main package feat(config): reworked overrides BREAKING CHANGE: removed the noRestrictedSyntaxOverride config option

    Closes #188

  • b4685c3: feat(config): added ESLint v9 support and removed ESLint version 8.57.0 pins Fixes #179 Fixes #185

Minor Changes

  • a124f56: feat(config): removed eslint-plugin-fp
  • dd61624: feat(deps): Update eslint-plugin-jsdoc to latest. Closes #182
  • 4960381: feat(config): removed eslint-config-prettier
  • 734355c: feat(deps): updated eslint-plugin-unicorn to latest

Patch Changes

  • 1d42d3b: feat(deps): update eslint-plugin-playwright to latest Fixes #184
  • c92bee5: feat(config): added getIndexedBaseNoRestrictedSyntaxRules
  • 66b6e50: feat(deps): update eslint-plugin-jest to latest Fixes #183
  • fdbb0db: chore(deps): updated some deps
  • 028c5d7: chore(deps): bump
  • 84ab8bb: feat(deps): update eslint-plugin-react to latest Fixes #176
  • b755626: feat(deps): update eslint-plugin-sonarjs to latest
  • fc4e0e5: feat(deps): update @​typescript-eslint/eslint-plugin to latest Fixes #177
  • 76dcc6a: feat(deps): added @​types/eslint-plugin-jsx-a11y

19.0.0

Major Changes

  • aa57685: feat!: make astro support optional
  • 1859c47: fix!: typo in config

Minor Changes

  • 0fd4217: feat: allow zero-config sheriff
Commits
  • 58b5339 Version Packages
  • 3fe1e74 feat(config): added getIndexedBaseNoRestrictedSyntaxRules
  • dca5254 chore(deps): updated some deps
  • 6a301aa fix(config): added eslint v9 compatibility support to eslint-plugin-storybook...
  • 8b4c0ff fix(config): added explicit type definition to getJestConfig return type
  • cbee539 feat(config): added eslint v9 compatibility suppport to @​next/eslint-plugin-next
  • d75cdb6 feat(config): added eslint v9 compatibility suppport to eslint-plugin-import
  • b90353d feat(deps): updated ESLint major and minimum required nodejs version
  • a3f168c added comment
  • a213c03 feat(deps): update eslint-plugin-jest to latest
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
socket-security[bot] commented 2 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@sherifforg/types@4.0.1 None 0 5.72 kB andreapontrandolfo
npm/@types/eslint@9.6.0 None +2 253 kB types
npm/eslint-config-sheriff@20.0.0 eval Transitive: environment, filesystem, unsafe +332 50.7 MB andreapontrandolfo
npm/eslint@9.9.0 environment Transitive: eval, filesystem, shell, unsafe +81 9.35 MB eslintbot

🚮 Removed packages: npm/@sherifforg/types@3.1.2, npm/@typescript-eslint/eslint-plugin@7.18.0, npm/eslint-config-sheriff@18.7.0, npm/eslint@8.57.0

View full report↗︎

socket-security[bot] commented 2 months ago

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/@es-joy/jsdoccomment@0.46.0, npm/@eslint-react/ast@1.12.0, npm/@eslint-react/core@1.12.0, npm/@eslint-react/eslint-plugin@1.12.0, npm/@eslint-react/jsx@1.12.0, npm/@eslint-react/shared@1.12.0, npm/@eslint-react/tools@1.12.0, npm/@eslint-react/types@1.12.0, npm/@eslint-react/var@1.12.0, npm/@eslint/compat@1.1.1, npm/@eslint/config-array@0.17.1, npm/@eslint/eslintrc@3.1.0, npm/@eslint/js@9.9.0, npm/@eslint/object-schema@2.1.4, npm/@humanwhocodes/retry@0.3.0, npm/@sherifforg/types@4.0.1, npm/@types/eslint@9.6.0, npm/@typescript-eslint/eslint-plugin@8.2.0, npm/@typescript-eslint/parser@8.2.0, npm/@typescript-eslint/scope-manager@8.2.0, npm/@typescript-eslint/type-utils@8.2.0, npm/@typescript-eslint/types@8.2.0, npm/@typescript-eslint/typescript-estree@8.2.0, npm/@typescript-eslint/utils@8.2.0, npm/@typescript-eslint/visitor-keys@8.2.0, npm/@vitest/eslint-plugin@1.0.3, npm/astro-eslint-parser@1.0.2, npm/astrojs-compiler-sync@1.0.0, npm/birecord@0.1.1, npm/es-module-lexer@1.5.4, npm/eslint-compat-utils@0.5.1, npm/eslint-config-sheriff@20.0.0, npm/eslint-plugin-astro@1.2.3, npm/eslint-plugin-jest@28.8.0, npm/eslint-plugin-jsdoc@48.11.0, npm/eslint-plugin-playwright@1.6.2, npm/eslint-plugin-react-debug@1.12.0, npm/eslint-plugin-react-dom@1.12.0, npm/eslint-plugin-react-hooks-extra@1.12.0, npm/eslint-plugin-react-naming-convention@1.12.0, npm/eslint-plugin-react-web-api@1.12.0, npm/eslint-plugin-react-x@1.12.0, npm/eslint-plugin-react@7.35.0, npm/eslint-plugin-sonarjs@1.0.4, npm/eslint-plugin-unicorn@55.0.0, npm/eslint-scope@8.0.2, npm/eslint-visitor-keys@4.0.0, npm/eslint@9.9.0, npm/espree@10.1.0, npm/file-entry-cache@8.0.0, npm/flat-cache@4.0.1, npm/globals@14.0.0, npm/globals@15.9.0, npm/is-immutable-type@5.0.0, npm/minimatch@10.0.1, npm/parse-imports@2.1.1, npm/semver@7.6.3, npm/short-unique-id@5.2.0, npm/slashes@3.0.12, npm/synckit@0.9.1, npm/ts-declaration-location@1.0.4, npm/ts-pattern@5.3.1

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

lishaduck commented 2 months ago

@dependabot rebase

lishaduck commented 2 months ago

@dependabot rebase

CI didn't trigger... hmm

dependabot[bot] commented 2 months ago

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

lishaduck commented 2 months ago

@dependabot recreate

lishaduck commented 2 months ago

@SocketSecurity ignore-all