socket-security[bot]
commented
2 weeks ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@typescript-eslint/eslint-plugin@8.8.0 | Transitive: environment, filesystem | +18 |
6.36 MB | bradzacher, jameshenry |
| npm/@typescript-eslint/parser@8.8.0 | Transitive: environment, filesystem | +13 |
1.69 MB | bradzacher, jameshenry |
| npm/@vitest/eslint-plugin@1.1.6 | Transitive: environment, filesystem | +15 |
2.76 MB | antfu, oreanno, patak, ...2 more |
🚮 Removed packages: npm/@typescript-eslint/eslint-plugin@8.6.0, npm/@typescript-eslint/parser@8.6.0, npm/eslint-plugin-storybook@0.8.0, npm/eslint-plugin-vitest@0.5.4
Description
The replacement of the Vitest ESLint plugin failed CI because of an incompatibility for
@typescript-eslint/utils, but was automerged because of a missing branch protection. The lockfile is now stuck behind for multiple updates and builds are failing.This PR fixes the issue by removing the
eslint-plugin-storybookdependency (it hasn't been updated much recently & it's 3 major versions behind for the utils package), and updating to Typescript v5 + bumping the new Vitest ESLint plugin to latest.