Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade cspell from 6.31.3 to 8.9.1 #12

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

WontonSam
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade cspell from 6.31.3 to 8.9.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 53 versions ahead of your current version.

  • The recommended version was released on a month ago.

Release notes
Package name: cspell
  • 8.9.1 - 2024-06-20

    Changes

    Fixes

    fix: Make sure binary files are not checked. (#5780)

    fix: Make sure binary files are not checked. (#5780)

    fixes #5779

    • add .mp4 to the video list
    • treat unknown file types that contain 0x00 as binary.

    Documentation

    docs: format tables in generated docs (#5776)

    docs: format tables in generated docs (#5776)


  • 8.9.0 - 2024-06-18

    Changes

    Features

    feat: Support spell checking more document types (#5741)

    feat: Support spell checking more document types (#5741)

    fixes #5740

    Checking Custom AST Nodes

    The checkScope setting is used to enable / disable checking AST Nodes. Parsers are used to generate the AST (Abstract Syntax Tree) used by ESLint to evaluate a document. Each PlugIn gets access to the AST. checkScope can be used to handle new AST node when a custom parser is added.

    rules: {
      '@ cspell/spellchecker': ['warn', { checkScope: [
        ['JSONLiteral': true],  // will match AST Nodes of type `JSONLiteral` and spell check the value.
        ['JSONProperty[key] JSONLiteral', false]  // will turn off checking the JSON Property keys.
        ['JSONProperty JSONLiteral', false]  // will turn off checking the JSON Property keys and values.
        ['JSONProperty[value] JSONLiteral', true]  // will turn on checking the JSON Property values.
        ['YAMLPair[key] YAMLScalar', true],
        ['YAMLPair[value] YAMLScalar', true],
        ['YAMLSequence YAMLScalar', true],
      ] }],
    },

    New Options

      /**
       * Scope selectors to spell check.
       * This is a list of scope selectors to spell check.
       *
       * Example:
       * ```js
       * checkScope: [
       *     ['YAMLPair[key] YAMLScalar', true],
       *     ['YAMLPair[value] YAMLScalar', true],
       *     ['YAMLSequence[entries] YAMLScalar', true],
       *     ['JSONProperty[key] JSONLiteral', true],
       *     ['JSONProperty[value] JSONLiteral', true],
       *     ['JSONArrayExpression JSONLiteral', true],
       * ],
       * ```
       *
       * To turn off checking JSON keys, use the following:
       *
       * ```js
       * checkScope: [
       *     ['JSONProperty[key] JSONLiteral', false],
       * ],
       * ```
       *
       * @ since 8.9.0
       */
      checkScope?: ScopeSelectorList;

    feat: Add library `@ cspell/url` (#5720)

    feat: Add library @ cspell/url (#5720)

    Move URL methods into a common library.


    Fixes

    fix: Workflow Bot -- Update Dictionaries (#5729)

    fix: Workflow Bot -- Update Dictionaries (#5729)


    Dictionary Updates

    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    Update Dictionaries (main)

    Summary

     .../SoftwareBrothers/admin-bro/report.yaml         |  7 +++---
     .../SoftwareBrothers/admin-bro/snapshot.txt        |  3 ++-
     .../apollographql/apollo-server/report.yaml        |  7 +++---
     .../apollographql/apollo-server/snapshot.txt       |  5 +++--
     .../microsoft/TypeScript-Website/report.yaml       |  3 ++-
     .../microsoft/TypeScript-Website/snapshot.txt      |  3 ++-
     .../snapshots/prettier/prettier/report.yaml        |  7 +++---
     .../snapshots/prettier/prettier/snapshot.txt       |  5 +++--
     packages/cspell-bundled-dicts/package.json         |  6 ++---
     pnpm-lock.yaml                                     | 26 +++++++++++++++-------
     10 files changed, 45 insertions(+), 27 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5755)

    fix: Workflow Bot -- Update Dictionaries (main) (#5755)

    Update Dictionaries (main)

    Summary

     packages/cspell-bundled-dicts/package.json | 2 +-
     pnpm-lock.yaml                             | 8 ++++----
     2 files changed, 5 insertions(+), 5 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5716)

    fix: Workflow Bot -- Update Dictionaries (main) (#5716)

    Update Dictionaries (main)

    Summary

     .../MartinThoma/LaTeX-examples/report.yaml         |  3 +-
     .../MartinThoma/LaTeX-examples/snapshot.txt        |  3 +-
     .../aspnetboilerplate/report.yaml                  |  3 +-
     .../aspnetboilerplate/snapshot.txt                 |  3 +-
     .../snapshots/django/django/report.yaml            |  4 +--
     .../snapshots/django/django/snapshot.txt           |  3 +-
     .../snapshots/eslint/eslint/report.yaml            |  6 ++--
     .../snapshots/eslint/eslint/snapshot.txt           |  3 +-
     .../snapshots/gitbucket/gitbucket/report.yaml      |  2 +-
     .../snapshots/gitbucket/gitbucket/snapshot.txt     |  2 +-
     .../googleapis/google-cloud-cpp/report.yaml        |  4 +--
     .../googleapis/google-cloud-cpp/snapshot.txt       |  4 +--
     .../iluwatar/java-design-patterns/report.yaml      |  6 ++--
     .../iluwatar/java-design-patterns/snapshot.txt     |  4 +--
     .../snapshots/ktaranov/sqlserver-kit/report.yaml   |  8 ++----
     .../snapshots/ktaranov/sqlserver-kit/snapshot.txt  |  6 +---
     .../microsoft/TypeScript-Website/report.yaml       |  3 +-
     .../microsoft/TypeScript-Website/snapshot.txt      |  5 ++--
     .../snapshots/php/php-src/report.yaml              |  4 +--
     .../snapshots/php/php-src/snapshot.txt             |  4 +--
     .../snapshots/sveltejs/svelte/report.yaml          |  3 +-
     .../snapshots/sveltejs/svelte/snapshot.txt         |  3 +-
     packages/cspell-bundled-dicts/package.json         |  8 +++---
     pnpm-lock.yaml                                     | 33 +++++++++++++---------
     24 files changed, 49 insertions(+), 78 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5711)

    fix: Workflow Bot -- Update Dictionaries (main) (#5711)

    Update Dictionaries (main)

    Summary

     .../Azure/azure-rest-api-specs/report.yaml         |  8 +--
     .../Azure/azure-rest-api-specs/snapshot.txt        |  6 +-
     .../snapshots/RustPython/RustPython/report.yaml    | 12 +---
     .../snapshots/RustPython/RustPython/snapshot.txt   | 10 +--
     .../snapshots/TheAlgorithms/Python/report.yaml     | 16 +----
     .../snapshots/TheAlgorithms/Python/snapshot.txt    | 14 +---
     .../snapshots/django/django/report.yaml            | 78 +++-------------------
     .../snapshots/django/django/snapshot.txt           | 34 +---------
     .../googleapis/google-cloud-cpp/report.yaml        | 14 ++--
     .../googleapis/google-cloud-cpp/snapshot.txt       |  6 +-
     .../snapshots/pycontribs/jira/report.yaml          |  2 +-
     .../snapshots/pycontribs/jira/snapshot.txt         |  2 +-
     .../snapshots/sveltejs/svelte/report.yaml          |  3 +-
     .../snapshots/sveltejs/svelte/snapshot.txt         |  3 +-
     packages/cspell-bundled-dicts/package.json         |  4 +-
     .../cspell/src/app/__snapshots__/app.test.ts.snap  |  6 +-
     pnpm-lock.yaml                                     | 24 +++++--
     17 files changed, 62 insertions(+), 180 deletions(-)
    

    Documentation

    docs: Extract Markdown from cspell.schema.json (#5722)

    docs: Extract Markdown from cspell.schema.json (#5722)

    Extract Markdown from Schema file


    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    Update Dictionaries (main)

    Summary

     .../SoftwareBrothers/admin-bro/report.yaml         |  7 +++---
     .../SoftwareBrothers/admin-bro/snapshot.txt        |  3 ++-
     .../apollographql/apollo-server/report.yaml        |  7 +++---
     .../apollographql/apollo-server/snapshot.txt       |  5 +++--
     .../microsoft/TypeScript-Website/report.yaml       |  3 ++-
     .../microsoft/TypeScript-Website/snapshot.txt      |  3 ++-
     .../snapshots/prettier/prettier/report.yaml        |  7 +++---
     .../snapshots/prettier/prettier/snapshot.txt       |  5 +++--
     packages/cspell-bundled-dicts/package.json         |  6 ++---
     pnpm-lock.yaml                                     | 26 +++++++++++++++-------
     10 files changed, 45 insertions(+), 27 deletions(-)
    

    docs: Use `inject` template function (#5754)

    docs: Use inject template function (#5754)

    Create an inject template function to help with keeping indention consistant.

    Co-authored-by: Felix Moeser amanoji@users.noreply.github.com


    docs: change `
    ` indent in generated markdown (#5742)

    docs: change <dl> indent in generated markdown (#5742)


    docs: work on configuration page (#5739)

    docs: work on configuration page (#5739)


    docs: generate docs (#5723)

    docs: generate docs (#5723)


  • 8.9.0-alpha.0 - 2024-06-18

    Changes

    docs: Extract Markdown from cspell.schema.json (#5722)

    docs: Extract Markdown from cspell.schema.json (#5722)

    Extract Markdown from Schema file


    Features

    feat: Support spell checking more document types (#5741)

    feat: Support spell checking more document types (#5741)

    fixes #5740

    Checking Custom AST Nodes

    The checkScope setting is used to enable / disable checking AST Nodes. Parsers are used to generate the AST (Abstract Syntax Tree) used by ESLint to evaluate a document. Each PlugIn gets access to the AST. checkScope can be used to handle new AST node when a custom parser is added.

    rules: {
      '@ cspell/spellchecker': ['warn', { checkScope: [
        ['JSONLiteral': true],  // will match AST Nodes of type `JSONLiteral` and spell check the value.
        ['JSONProperty[key] JSONLiteral', false]  // will turn off checking the JSON Property keys.
        ['JSONProperty JSONLiteral', false]  // will turn off checking the JSON Property keys and values.
        ['JSONProperty[value] JSONLiteral', true]  // will turn on checking the JSON Property values.
        ['YAMLPair[key] YAMLScalar', true],
        ['YAMLPair[value] YAMLScalar', true],
        ['YAMLSequence YAMLScalar', true],
      ] }],
    },

    New Options

      /**
       * Scope selectors to spell check.
       * This is a list of scope selectors to spell check.
       *
       * Example:
       * ```js
       * checkScope: [
       *     ['YAMLPair[key] YAMLScalar', true],
       *     ['YAMLPair[value] YAMLScalar', true],
       *     ['YAMLSequence[entries] YAMLScalar', true],
       *     ['JSONProperty[key] JSONLiteral', true],
       *     ['JSONProperty[value] JSONLiteral', true],
       *     ['JSONArrayExpression JSONLiteral', true],
       * ],
       * ```
       *
       * To turn off checking JSON keys, use the following:
       *
       * ```js
       * checkScope: [
       *     ['JSONProperty[key] JSONLiteral', false],
       * ],
       * ```
       *
       * @ since 8.9.0
       */
      checkScope?: ScopeSelectorList;

    feat: Add library `@ cspell/url` (#5720)

    feat: Add library @ cspell/url (#5720)

    Move URL methods into a common library.


    Fixes

    fix: Workflow Bot -- Update Dictionaries (#5729)

    fix: Workflow Bot -- Update Dictionaries (#5729)


    Dictionary Updates

    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    Update Dictionaries (main)

    Summary

     .../SoftwareBrothers/admin-bro/report.yaml         |  7 +++---
     .../SoftwareBrothers/admin-bro/snapshot.txt        |  3 ++-
     .../apollographql/apollo-server/report.yaml        |  7 +++---
     .../apollographql/apollo-server/snapshot.txt       |  5 +++--
     .../microsoft/TypeScript-Website/report.yaml       |  3 ++-
     .../microsoft/TypeScript-Website/snapshot.txt      |  3 ++-
     .../snapshots/prettier/prettier/report.yaml        |  7 +++---
     .../snapshots/prettier/prettier/snapshot.txt       |  5 +++--
     packages/cspell-bundled-dicts/package.json         |  6 ++---
     pnpm-lock.yaml                                     | 26 +++++++++++++++-------
     10 files changed, 45 insertions(+), 27 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5755)

    fix: Workflow Bot -- Update Dictionaries (main) (#5755)

    Update Dictionaries (main)

    Summary

     packages/cspell-bundled-dicts/package.json | 2 +-
     pnpm-lock.yaml                             | 8 ++++----
     2 files changed, 5 insertions(+), 5 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5716)

    fix: Workflow Bot -- Update Dictionaries (main) (#5716)

    Update Dictionaries (main)

    Summary

     .../MartinThoma/LaTeX-examples/report.yaml         |  3 +-
     .../MartinThoma/LaTeX-examples/snapshot.txt        |  3 +-
     .../aspnetboilerplate/report.yaml                  |  3 +-
     .../aspnetboilerplate/snapshot.txt                 |  3 +-
     .../snapshots/django/django/report.yaml            |  4 +--
     .../snapshots/django/django/snapshot.txt           |  3 +-
     .../snapshots/eslint/eslint/report.yaml            |  6 ++--
     .../snapshots/eslint/eslint/snapshot.txt           |  3 +-
     .../snapshots/gitbucket/gitbucket/report.yaml      |  2 +-
     .../snapshots/gitbucket/gitbucket/snapshot.txt     |  2 +-
     .../googleapis/google-cloud-cpp/report.yaml        |  4 +--
     .../googleapis/google-cloud-cpp/snapshot.txt       |  4 +--
     .../iluwatar/java-design-patterns/report.yaml      |  6 ++--
     .../iluwatar/java-design-patterns/snapshot.txt     |  4 +--
     .../snapshots/ktaranov/sqlserver-kit/report.yaml   |  8 ++----
     .../snapshots/ktaranov/sqlserver-kit/snapshot.txt  |  6 +---
     .../microsoft/TypeScript-Website/report.yaml       |  3 +-
     .../microsoft/TypeScript-Website/snapshot.txt      |  5 ++--
     .../snapshots/php/php-src/report.yaml              |  4 +--
     .../snapshots/php/php-src/snapshot.txt             |  4 +--
     .../snapshots/sveltejs/svelte/report.yaml          |  3 +-
     .../snapshots/sveltejs/svelte/snapshot.txt         |  3 +-
     packages/cspell-bundled-dicts/package.json         |  8 +++---
     pnpm-lock.yaml                                     | 33 +++++++++++++---------
     24 files changed, 49 insertions(+), 78 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5711)

    fix: Workflow Bot -- Update Dictionaries (main) (#5711)

    Update Dictionaries (main)

    Summary

     .../Azure/azure-rest-api-specs/report.yaml         |  8 +--
     .../Azure/azure-rest-api-specs/snapshot.txt        |  6 +-
     .../snapshots/RustPython/RustPython/report.yaml    | 12 +---
     .../snapshots/RustPython/RustPython/snapshot.txt   | 10 +--
     .../snapshots/TheAlgorithms/Python/report.yaml     | 16 +----
     .../snapshots/TheAlgorithms/Python/snapshot.txt    | 14 +---
     .../snapshots/django/django/report.yaml            | 78 +++-------------------
     .../snapshots/django/django/snapshot.txt           | 34 +---------
     .../googleapis/google-cloud-cpp/report.yaml        | 14 ++--
     .../googleapis/google-cloud-cpp/snapshot.txt       |  6 +-
     .../snapshots/pycontribs/jira/report.yaml          |  2 +-
     .../snapshots/pycontribs/jira/snapshot.txt         |  2 +-
     .../snapshots/sveltejs/svelte/report.yaml          |  3 +-
     .../snapshots/sveltejs/svelte/snapshot.txt         |  3 +-
     packages/cspell-bundled-dicts/package.json         |  4 +-
     .../cspell/src/app/__snapshots__/app.test.ts.snap  |  6 +-
     pnpm-lock.yaml                                     | 24 +++++--
     17 files changed, 62 insertions(+), 180 deletions(-)
    

    Documentation

    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    fix: Workflow Bot -- Update Dictionaries (main) (#5762)

    Update Dictionaries (main)

    Summary

     .../SoftwareBrothers/admin-bro/report.yaml         |  7 +++---
     .../SoftwareBrothers/admin-bro/snapshot.txt        |  3 ++-
     .../apollographql/apollo-server/report.yaml        |  7 +++---
     .../apollographql/apollo-server/snapshot.txt       |  5 +++--
     .../microsoft/TypeScript-Website/report.yaml       |  3 ++-
     .../microsoft/TypeScript-Website/snapshot.txt      |  3 ++-
     .../snapshots/prettier/prettier/report.yaml        |  7 +++---
     .../snapshots/prettier/prettier/snapshot.txt       |  5 +++--
     packages/cspell-bundled-dicts/package.json         |  6 ++---
     pnpm-lock.yaml                                     | 26 +++++++++++++++-------
     10 files changed, 45 insertions(+), 27 deletions(-)
    

    docs: Use `inject` template function (#5754)

    docs: Use inject template function (#5754)

    Create an inject template function to help with keeping indention consistant.

    Co-authored-by: Felix Moeser amanoji@users.noreply.github.com


    docs: change `
    ` indent in generated markdown (#5742)

    docs: change <dl> indent in generated markdown (#5742)


    docs: work on configuration page (#5739)

    docs: work on configuration page (#5739)


    docs: generate docs (#5723)

    docs: generate docs (#5723)


  • 8.8.4 - 2024-06-03

    Changes

    Fixes

    fix: improve URL detection (#5698)

    fix: improve URL detection (#5698)


    Dictionary Updates

    fix: Workflow Bot -- Update Dictionaries (main) (#5696)

    fix: Workflow Bot -- Update Dictionaries (main) (#5696)

    Update Dictionaries (main)

    Summary

     packages/cspell-bundled-dicts/package.json | 2 +-
     pnpm-lock.yaml                             | 8 ++++----
     2 files changed, 5 insertions(+), 5 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5689)

    fix: Workflow Bot -- Update Dictionaries (main) (#5689)

    Update Dictionaries (main)

    Summary

     .../snapshots/wireapp/wire-webapp/report.yaml           |  4 +---
     .../snapshots/wireapp/wire-webapp/snapshot.txt          |  4 +---
     packages/cspell-bundled-dicts/package.json              |  4 ++--
     pnpm-lock.yaml                                          | 17 +++++++++++------
     4 files changed, 15 insertions(+), 14 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5682)

    fix: Workflow Bot -- Update Dictionaries (main) (#5682)

    Update Dictionaries (main)

    Summary

     packages/cspell-bundled-dicts/package.json |  6 +++---
     pnpm-lock.yaml                             | 24 ++++++++++++------------
     2 files changed, 15 insertions(+), 15 deletions(-)
    

    fix: Workflow Bot -- Update Dictionaries (main) (#5675)

    fix: Workflow Bot -- Update Dictionaries (main) (

Snyk has created this PR to upgrade cspell from 6.31.3 to 8.9.1.

See this package in npm:
cspell

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/4351fd45-d634-4280-b037-2d3bfbd0187b?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

google-cla bot commented Jul 17, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Bug]: don't scan .mp4 💡: Add support for YML to the CSpell ESLint Plugin
2 participants