nodeshift / opossum

Node.js circuit breaker - fails fast ⚡️
https://nodeshift.dev/opossum/
Apache License 2.0
1.33k stars 107 forks source link

[Snyk] Upgrade eslint-plugin-import from 2.27.5 to 2.30.0 #886

Closed lholmquist closed 1 month ago

lholmquist commented 1 month ago

Snyk has created this PR to upgrade eslint-plugin-import from 2.27.5 to 2.30.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-JSON5-3182856
641/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.4
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: eslint-plugin-import from eslint-plugin-import GitHub release notes
Commit messages
Package name: eslint-plugin-import
  • 18787d3 Bump to 2.30.0
  • 9902298 [Deps] update `eslint-module-utils`
  • 9d194a6 [utils] v2.9.0
  • 0a58d75 [resolvers/webpack] v0.13.9
  • a3015eb [Test] `namespace`: ensure valid case is actually included
  • 8bdb32b [Test] add explicit marker for trailing whitespace in cases
  • 038c26c [readme] Clarify how to install the plugin
  • 32a2b89 [Fix] `order`: do not compare first path segment for relative paths (#2682)
  • ee1ea02 [Fix] `newline-after-import`: fix considerComments option when require
  • 806e3c2 [New] add support for Flat Config
  • b340f1f [meta] no need to ship contrib docs
  • 6407c1c [Docs] `order`: update the description of the `pathGroupsExcludedImportTypes` option
  • 4bdf61a [Fix] `no-duplicates`: Removing duplicates breaks in TypeScript
  • 98a0991 [New] [Refactor] `no-cycle`: use scc algorithm to optimize; add `skipErrorMessagePath` for faster error messages
  • 19dbc33 [resolvers/webpack] [refactor] misc cleanup
  • db8b95d [resolvers/webpack] [refactor] simplify loop
  • bdff75d [Deps] update `array-includes`, `array.prototype.findlastindex`, `eslint-module-utils`, `hasown`, `is-core-module`, `object.fromentries`, `object.groupby`, `object.values`
  • 9b1a3b9 [utils] v2.8.2
  • bab3a10 [utils] [meta] add `exports`, `main`
  • c387276 [utils] [fix] `parse`: also delete parserOptions.projectService
  • 09476d7 [New] `no-unused-modules`: Add `ignoreUnusedTypeExports` option
  • fc361a9 [Fix] `no-extraneous-dependencies`: allow wrong path
  • 6554bd5 [meta] add `repository.directory` field
  • a3a7176 [New] `dynamic-import-chunkname`: Allow empty chunk name when webpackMode: 'eager' is set; add suggestions to remove name in eager mode'
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

coveralls commented 1 month ago

Pull Request Test Coverage Report for Build 11360417361

Details


Totals Coverage Status
Change from base Build 11331355812: 0.0%
Covered Lines: 374
Relevant Lines: 375

💛 - Coveralls