Snyk has created this PR to upgrade eslint from 7.22.0 to 7.24.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released a month ago, on 2021-04-09.
Snyk has created this PR to upgrade eslint from 7.22.0 to 7.24.0.
The recommended version fixes:
SNYK-JS-XMLHTTPREQUESTSSL-1255647
Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3
SNYK-JS-XMLHTTPREQUESTSSL-1082936
Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: eslint
0c346c8
Chore: ignorepnpm-lock.yaml
(#14303) (Nitin Kumar)f06ecdf
Update: Add disallowTemplateShorthand option in no-implicit-coercion (#13579) (Remco Haszing)71a80e3
Docs: fix broken links in Node.js API docs toc (#14296) (u-sho (Shouhei Uechi))bd46dc4
Docs: Fix incorrect reference to "braces" in arrow-parens (#14300) (emclain)0d6235e
Docs: update header in max-lines (#14273) (Shinigami)70c9216
Docs: Update issue triage to include blocked column (#14275) (Nicholas C. Zakas)abca186
Docs: Fix typo in suggestions section (#14293) (Kevin Partington)c4d8b0d
Fix: no-unused-vars ignoreRestSiblings check assignments (fixes #14163) (#14264) (YeonJuan)b51d077
Update: add ignoreNonDeclaration to no-multi-assign rule (fixes #12545) (#14185) (t-mangoe)c981fb1
Chore: Upgrade mocha to 8.3.2 (#14278) (Stephen Wade)147fc04
Docs: Fixrepro:needed
label in bug report template (#14285) (Milos Djermanovic)e1cfde9
Docs: Update bug report template (#14276) (Nicholas C. Zakas)c85c2f1
Docs: Add fatal to Node.js API LintMessage type (#14251) (Brandon Mills)687ccae
Update: add option "allowInParentheses" to no-sequences (fixes #14197) (#14199) (Daniel Rentz)dbf2529
Sponsors: Sync README with website (ESLint Jenkins)4bdf2c1
Sponsors: Sync README with website (ESLint Jenkins)49d1697
Chore: Upgrade eslint-plugin-jsdoc to v25 and remove --legacy-peer-deps (#14244) (Brandon Mills)43f1685
Update:--quiet
should not supress--max-warnings
(fixes #14202) (#14242) (Milos Djermanovic)909c727
Docs: Add valid example that shows vars in a block scope (#14230) (Ed S)28583eb
Fix: no-mixed-operators false positives with? :
(fixes #14223) (#14226) (Milos Djermanovic)a99eb2d
Fix: Clarify line breaks in object-curly-newline (fixes #14024) (#14063) (armin yahya)8984c91
Update: eslint --env-info output os info (#14059) (薛定谔的猫)2a79306
Sponsors: Sync README with website (ESLint Jenkins)ebd7026
Docs: Fix typo (#14225) (Greg Finley)a2013fc
Sponsors: Sync README with website (ESLint Jenkins)3a432d8
Docs: Improve documentation for indent rule (#14168) (Serkan Özel)f62ec8d
Update: throw error when fix range is invalid (#14142) (Jacob Bandes-Storch)0eecad2
Upgrade: Update lodash in package.json to V 4.17.21 (#14159) (Basem Al-Nabulsi)5ad91aa
Update: report es2021 globals in no-extend-native (refs #13602) (#14177) (Milos Djermanovic)c295581
Chore: remove leftover JSDoc from lint-result-cache (#14176) (Milos Djermanovic)0d541f9
Chore: Reduce lodash usage (#14178) (Stephen Wade)27a67d7
Sponsors: Sync README with website (ESLint Jenkins)459d821
Chore: upgrade dependencies of browser test (#14127) (Pig Fang)ebfb63a
Sponsors: Sync README with website (ESLint Jenkins)3ba029f
Docs: Remove Extraneous Dash (#14164) (Danny Hurlburt)6f4540e
Sponsors: Sync README with website (ESLint Jenkins)ddf361c
Docs: Fix Formatting (#14154) (Danny Hurlburt)c0d2ac1
Sponsors: Sync README with website (ESLint Jenkins)a8df03e
Docs: Clarify triage process (#14117) (Nicholas C. Zakas)Commit messages
Package name: eslint
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:![](https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI3ZTZiOGQ4OC01YmY0LTQ1MzAtYmNhYi01MGFkMzhmOTZhZWEiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjdlNmI4ZDg4LTViZjQtNDUzMC1iY2FiLTUwYWQzOGY5NmFlYSJ9fQ==)
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs