cmv / cmv-app

CMV - The Configurable Map Viewer - A community supported open source mapping framework built with the Esri JavaScript API and the Dojo Toolkit
https://demo.cmv.io/
MIT License
323 stars 278 forks source link

[Snyk] Upgrade eslint from 7.22.0 to 7.24.0 #985

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade eslint from 7.22.0 to 7.24.0.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Access Restriction Bypass
SNYK-JS-XMLHTTPREQUESTSSL-1255647
544/1000
Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3
Proof of Concept
Arbitrary Code Injection
SNYK-JS-XMLHTTPREQUESTSSL-1082936
544/1000
Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: eslint
  • 7.24.0 - 2021-04-09
    • 0c346c8 Chore: ignore pnpm-lock.yaml (#14303) (Nitin Kumar)
    • f06ecdf Update: Add disallowTemplateShorthand option in no-implicit-coercion (#13579) (Remco Haszing)
    • 71a80e3 Docs: fix broken links in Node.js API docs toc (#14296) (u-sho (Shouhei Uechi))
    • bd46dc4 Docs: Fix incorrect reference to "braces" in arrow-parens (#14300) (emclain)
    • 0d6235e Docs: update header in max-lines (#14273) (Shinigami)
    • 70c9216 Docs: Update issue triage to include blocked column (#14275) (Nicholas C. Zakas)
    • abca186 Docs: Fix typo in suggestions section (#14293) (Kevin Partington)
    • c4d8b0d Fix: no-unused-vars ignoreRestSiblings check assignments (fixes #14163) (#14264) (YeonJuan)
    • b51d077 Update: add ignoreNonDeclaration to no-multi-assign rule (fixes #12545) (#14185) (t-mangoe)
    • c981fb1 Chore: Upgrade mocha to 8.3.2 (#14278) (Stephen Wade)
    • 147fc04 Docs: Fix repro:needed label in bug report template (#14285) (Milos Djermanovic)
    • e1cfde9 Docs: Update bug report template (#14276) (Nicholas C. Zakas)
    • c85c2f1 Docs: Add fatal to Node.js API LintMessage type (#14251) (Brandon Mills)
  • 7.23.0 - 2021-03-26
    • 687ccae Update: add option "allowInParentheses" to no-sequences (fixes #14197) (#14199) (Daniel Rentz)
    • dbf2529 Sponsors: Sync README with website (ESLint Jenkins)
    • 4bdf2c1 Sponsors: Sync README with website (ESLint Jenkins)
    • 49d1697 Chore: Upgrade eslint-plugin-jsdoc to v25 and remove --legacy-peer-deps (#14244) (Brandon Mills)
    • 43f1685 Update: --quiet should not supress --max-warnings (fixes #14202) (#14242) (Milos Djermanovic)
    • 909c727 Docs: Add valid example that shows vars in a block scope (#14230) (Ed S)
    • 28583eb Fix: no-mixed-operators false positives with ? : (fixes #14223) (#14226) (Milos Djermanovic)
    • a99eb2d Fix: Clarify line breaks in object-curly-newline (fixes #14024) (#14063) (armin yahya)
    • 8984c91 Update: eslint --env-info output os info (#14059) (薛定谔的猫)
    • 2a79306 Sponsors: Sync README with website (ESLint Jenkins)
    • ebd7026 Docs: Fix typo (#14225) (Greg Finley)
    • a2013fc Sponsors: Sync README with website (ESLint Jenkins)
  • 7.22.0 - 2021-03-12
    • 3a432d8 Docs: Improve documentation for indent rule (#14168) (Serkan Özel)
    • f62ec8d Update: throw error when fix range is invalid (#14142) (Jacob Bandes-Storch)
    • 0eecad2 Upgrade: Update lodash in package.json to V 4.17.21 (#14159) (Basem Al-Nabulsi)
    • 5ad91aa Update: report es2021 globals in no-extend-native (refs #13602) (#14177) (Milos Djermanovic)
    • c295581 Chore: remove leftover JSDoc from lint-result-cache (#14176) (Milos Djermanovic)
    • 0d541f9 Chore: Reduce lodash usage (#14178) (Stephen Wade)
    • 27a67d7 Sponsors: Sync README with website (ESLint Jenkins)
    • 459d821 Chore: upgrade dependencies of browser test (#14127) (Pig Fang)
    • ebfb63a Sponsors: Sync README with website (ESLint Jenkins)
    • 3ba029f Docs: Remove Extraneous Dash (#14164) (Danny Hurlburt)
    • 6f4540e Sponsors: Sync README with website (ESLint Jenkins)
    • ddf361c Docs: Fix Formatting (#14154) (Danny Hurlburt)
    • c0d2ac1 Sponsors: Sync README with website (ESLint Jenkins)
    • a8df03e Docs: Clarify triage process (#14117) (Nicholas C. Zakas)
from eslint GitHub release notes
Commit messages
Package name: eslint
  • 555cbf3 7.24.0
  • 10b31ff Build: changelog update for 7.24.0
  • 0c346c8 Chore: ignore `pnpm-lock.yaml` (#14303)
  • f06ecdf Update: Add disallowTemplateShorthand option in no-implicit-coercion (#13579)
  • 71a80e3 Docs: fix broken links in Node.js API docs toc (#14296)
  • bd46dc4 Docs: Fix incorrect reference to "braces" in arrow-parens (#14300)
  • 0d6235e Docs: update header in max-lines (#14273)
  • 70c9216 Docs: Update issue triage to include blocked column (#14275)
  • abca186 Docs: Fix typo in suggestions section (#14293)
  • c4d8b0d Fix: no-unused-vars ignoreRestSiblings check assignments (fixes #14163) (#14264)
  • b51d077 Update: add ignoreNonDeclaration to no-multi-assign rule (fixes #12545) (#14185)
  • c981fb1 Chore: Upgrade mocha to 8.3.2 (#14278)
  • 147fc04 Docs: Fix `repro:needed` label in bug report template (#14285)
  • e1cfde9 Docs: Update bug report template (#14276)
  • c85c2f1 Docs: Add fatal to Node.js API LintMessage type (#14251)
  • cd2e584 7.23.0
  • 11bdeab Build: changelog update for 7.23.0
  • 687ccae Update: add option "allowInParentheses" to no-sequences (fixes #14197) (#14199)
  • dbf2529 Sponsors: Sync README with website
  • 4bdf2c1 Sponsors: Sync README with website
  • 49d1697 Chore: Upgrade eslint-plugin-jsdoc to v25 and remove --legacy-peer-deps (#14244)
  • 43f1685 Update: `--quiet` should not supress `--max-warnings` (fixes #14202) (#14242)
  • 909c727 Docs: Add valid example that shows vars in a block scope (#14230)
  • 28583eb Fix: no-mixed-operators false positives with `? :` (fixes #14223) (#14226)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs