Skip to content

Conversation

nerdy-tech-com-gitub
Copy link
Owner

@nerdy-tech-com-gitub nerdy-tech-com-gitub commented Jul 24, 2025

snyk-top-banner

Snyk has created this PR to upgrade eslint from 8.57.0 to 9.30.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 45 versions ahead of your current version.

  • The recommended version was released 22 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Prototype Pollution
SNYK-JS-VUEI18N-9376708
264 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
264 Proof of Concept
high severity Prototype Pollution
SNYK-JS-INTLIFYSHARED-8442251
264 Proof of Concept
high severity Incorrect Authorization
SNYK-JS-VITE-9653016
264 Proof of Concept
high severity Prototype Pollution
SNYK-JS-VUEI18N-8442254
264 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELHELPERS-9397697
264 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIME-10044504
264 Proof of Concept
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
264 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-INTLIFYCOREBASE-8442262
264 Proof of Concept
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
264 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097
264 Proof of Concept
medium severity Origin Validation Error
SNYK-JS-VITE-8648411
264 Proof of Concept
medium severity Incorrect Authorization
SNYK-JS-VITE-9512410
264 Mature
medium severity Access Control Bypass
SNYK-JS-VITE-9576207
264 Proof of Concept
medium severity Information Exposure
SNYK-JS-VITE-9685035
264 Proof of Concept
medium severity Directory Traversal
SNYK-JS-VITE-9919777
264 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
264 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
264 Proof of Concept
critical severity Cross-site Scripting (XSS)
SNYK-JS-INTLIFYCOREBASE-10753753
264 Proof of Concept
critical severity Cross-site Scripting (XSS)
SNYK-JS-INTLIFYSHARED-10753754
264 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-VUEI18N-8442260
264 Proof of Concept
Release notes
Package name: eslint
  • 9.30.1 - 2025-07-01

    Bug Fixes

    • e91bb87 fix: allow separate default and named type imports (#19899) (xbinaryx)

    Documentation

    • ab7c625 docs: Update README (GitHub Actions Bot)
    • dae1e5b docs: update jsdoc's link (#19896) (JamesVanWaza)

    Chores

    • b035f74 chore: upgrade to @ eslint/js@9.30.1 (#19906) (Francesco Trotta)
    • b3dbc16 chore: package.json update for @ eslint/js release (Jenkins)
  • 9.30.0 - 2025-06-27

    Features

    • 52a5fca feat: Support basePath property in config objects (#19879) (Milos Djermanovic)
    • 4ab4482 feat: add allowSeparateTypeImports option to no-duplicate-imports (#19872) (sethamus)
    • b8a7e7a feat: throw error when column is negative in getIndexFromLoc (#19831) (루밀LuMir)

    Bug Fixes

    • 6a0f164 fix: handle null type loc in getIndexFromLoc method (#19862) (루밀LuMir)
    • 3fbcd70 fix: update error message for no-restricted-properties (#19855) (Tanuj Kanti)
    • 7ef4cf7 fix: remove unnecessary semicolon from fixes (#19857) (Francesco Trotta)
    • 7dabc38 fix: use process.version in --env-info (#19865) (TKDev7)

    Documentation

    • 8662ed1 docs: adopt eslint-stylistic sub packages related changes (#19887) (ntnyq)
    • 20158b0 docs: typo in comment for unused variables handling (#19870) (leopardracer)
    • ebfb5b4 docs: Fixed Typo in configuration-files.md (#19873) (0-20)
    • 4112fd0 docs: clarify that boolean is still allowed for rule meta.deprecated (#19866) (Bryan Mishkin)

    Chores

    • 2b6491c chore: upgrade to @ eslint/js@9.30.0 (#19889) (Francesco Trotta)
    • 5a5d526 chore: package.json update for @ eslint/js release (Jenkins)
    • eaf8a41 chore: Correct typos in linter tests (#19878) (kilavvy)
  • 9.29.0 - 2025-06-13

    Features

    • f686fcb feat: add ecmaVersion: 2026, parsing using and await using (#19832) (Milos Djermanovic)
    • 19cdd22 feat: prune suppressions for non-existent files (#19825) (TKDev7)
    • b3d720f feat: add ES2025 globals (#19835) (fisker Cheung)
    • 677a283 feat: add auto-accessor fields support to class-methods-use-this (#19789) (sethamus)
    • dbba058 feat: allow global type declaration in no-var (#19714) (Remco Haszing)
    • 342bd29 feat: ignore type annotations in no-restricted-globals (#19781) (sethamus)
    • 786bcd1 feat: add allowProperties option to no-restricted-properties (#19772) (sethamus)
    • 05b66d0 feat: add sourceCode.isGlobalReference(node) method (#19695) (Nitin Kumar)

    Bug Fixes

    • 85c082c fix: explicit matching behavior with negated patterns and arrays (#19845) (Milos Djermanovic)
    • 9bda4a9 fix: fix LintOptions.filterCodeBlock types (#19837) (ntnyq)
    • 7ab77a2 fix: correct breaking deprecation of FlatConfig type (#19826) (Logicer)
    • 1ba3318 fix: add language and dialects to no-use-before-define (#19808) (Francesco Trotta)

    Documentation

    • 00e3e6a docs: add support for custom name parameter to includeIgnoreFile (#19795) (루밀LuMir)
    • 3aed075 docs: Update README (GitHub Actions Bot)
    • a2f888d docs: enhance documentation with links and fix typos (#19761) (루밀LuMir)
    • 53c3235 docs: update to clarify prompt usage (#19748) (Jennifer Davis)

    Chores

    • 5c114c9 chore: upgrade @ eslint/js@9.29.0 (#19851) (Milos Djermanovic)
    • acf2201 chore: package.json update for @ eslint/js release (Jenkins)
    • a806994 refactor: Remove eslintrc from flat config functionality (#19833) (Nicholas C. Zakas)
    • 152ed51 test: switch to flat config mode in code path analysis tests (#19824) (Milos Djermanovic)
    • b647239 chore: Update first-party dependencies faster with Renovate (#19822) (Nicholas C. Zakas)
    • 7abe42e refactor: SafeEmitter -> SourceCodeVisitor (#19708) (Nicholas C. Zakas)
    • e392895 perf: improve time complexity of getLocFromIndex (#19782) (루밀LuMir)
    • 0ed289c chore: remove accidentally committed file (#19807) (Francesco Trotta)
  • 9.28.0 - 2025-05-30

    Features

    • b0674be feat: Customization of serialization for languageOptions (#19760) (Nicholas C. Zakas)
    • a95721f feat: Add --pass-on-unpruned-suppressions CLI option (#19773) (Milos Djermanovic)
    • bfd0e7a feat: support TypeScript syntax in no-use-before-define (#19566) (Tanuj Kanti)
    • 68c61c0 feat: support TS syntax in no-shadow (#19565) (Nitin Kumar)
    • 0f773ef feat: support TS syntax in no-magic-numbers (#19561) (Nitin Kumar)
    • c4a6b60 feat: add allowTypeAnnotation to func-style (#19754) (sethamus)
    • b03ad17 feat: add TypeScript support to prefer-arrow-callback (#19678) (Tanuj Kanti)
    • bc3c331 feat: ignore overloaded function declarations in func-style rule (#19755) (sethamus)

    Bug Fixes

    • eea3e7e fix: Remove configured global variables from GlobalScope#implicit (#19779) (Milos Djermanovic)
    • a467de3 fix: update context.report types (#19751) (Nitin Kumar)
    • fd467bb fix: remove interopDefault to use jiti's default (#19697) (sethamus)
    • 72d16e3 fix: avoid false positive in no-unassigned-vars for declare module (#19746) (Azat S.)
    • 81c3c93 fix: curly types (#19750) (Eli)

    Documentation

    • 3ec2082 docs: Nested arrays in files config entry (#19799) (Nicholas C. Zakas)
    • 89a65b0 docs: clarify how config arrays can apply to subsets of files (#19788) (Shais Ch)
    • 2ba8a0d docs: Add description of meta.namespace to plugin docs (#19798) (Nicholas C. Zakas)
    • 59dd7e6 docs: update func-style with examples (#19793) (Tanuj Kanti)
    • e9129e0 docs: add global scope's implicit field to Scope Manager docs (#19770) (Milos Djermanovic)
    • 52f5b7a docs: fix minor typos and add links (#19743) (루밀LuMir)
    • 00716a3 docs: upfront recommend against using the no-return-await rule (#19727) (Mike DiDomizio)

    Chores

    • 175b7b8 chore: upgrade to @ eslint/js@9.28.0 (#19802) (Francesco Trotta)
    • 844f5a6 chore: package.json update for @ eslint/js release (Jenkins)
    • 62b1c1b chore: update globals to v16 (#19791) (Nitin Kumar)
    • e8a1cb8 chore: ignore jiti-v2.0 & jiti-v2.1 for renovate (#19786) (Nitin Kumar)
    • 43d3975 chore: Add Copilot Instructions file (#19753) (Nicholas C. Zakas)
    • 2dfb5eb test: update SourceCodeTraverser tests (#19763) (Milos Djermanovic)
    • 5bc21f9 chore: add *.code-workspace to .gitignore (#19771) (루밀LuMir)
    • f4fa40e refactor: NodeEventGenerator -> SourceCodeTraverser (#19679) (Nicholas C. Zakas)
    • 0f49329 refactor: use a service to emit warnings (#19725) (Francesco Trotta)
    • 20a9e59 chore: update dependency shelljs to ^0.10.0 (#19740) (renovate[bot])
  • 9.27.0 - 2025-05-16

    Features

    • d71e37f feat: Allow flags to be set in ESLINT_FLAGS env variable (#19717) (Nicholas C. Zakas)
    • ba456e0 feat: Externalize MCP server (#19699) (Nicholas C. Zakas)
    • 07c1a7e feat: add allowRegexCharacters to no-useless-escape (#19705) (sethamus)
    • 7bc6c71 feat: add no-unassigned-vars rule (#19618) (Jacob Bandes-Storch)
    • ee40364 feat: convert no-array-constructor suggestions to autofixes (#19621) (sethamus)
    • 32957cd feat: support TS syntax in max-params (#19557) (Nitin Kumar)

    Bug Fixes

    • 5687ce7 fix: correct mismatched removed rules (#19734) (루밀LuMir)
    • dc5ed33 fix: correct types and tighten type definitions in SourceCode class (#19731) (루밀LuMir)
    • de1b5de fix: correct service property name in Linter.ESLintParseResult type (#19713) (Francesco Trotta)
    • 60c3e2c fix: sort keys in eslint-suppressions.json to avoid git churn (#19711) (Ron Waldon-Howe)
    • 9da90ca fix: add allowReserved to Linter.ParserOptions type (#19710) (Francesco Trotta)
    • fbb8be9 fix: add info to ESLint.DeprecatedRuleUse type (#19701) (Francesco Trotta)

    Documentation

    • 25de550 docs: Update description of frozen rules to mention TypeScript (#19736) (Nicholas C. Zakas)
    • bd5def6 docs: Clean up configuration files docs (#19735) (Nicholas C. Zakas)
    • 4d0c60d docs: Add Neovim to editor integrations (#19729) (Maria José Solano)
    • 71317eb docs: Update README (GitHub Actions Bot)
    • 4c289e6 docs: Update README (GitHub Actions Bot)
    • f0f0d46 docs: clarify that unused suppressions cause non-zero exit code (#19698) (Milos Djermanovic)
    • 8ed3273 docs: fix internal usages of ConfigData type (#19688) (Francesco Trotta)
    • eb316a8 docs: add fmt and check sections to Package.json Conventions (#19686) (루밀LuMir)
    • a3a2559 docs: fix wording in Combine Configs (#19685) (Milos Djermanovic)
    • c8d17e1 docs: Update README (GitHub Actions Bot)

    Chores

    • f8f1560 chore: upgrade @ eslint/js@9.27.0 (#19739) (Milos Djermanovic)
    • ecaef73 chore: package.json update for @ eslint/js release (Jenkins)
    • 596fdc6 chore: update dependency @ arethetypeswrong/cli to ^0.18.0 (#19732) (renovate[bot])
    • f791da0 chore: remove unbalanced curly brace from .editorconfig (#19730) (Maria José Solano)
    • e86edee refactor: Consolidate Config helpers (#19675) (Nicholas C. Zakas)
    • cf36352 chore: remove shared types (#19718) (Francesco Trotta)
    • f60f276 refactor: Easier RuleContext creation (#19709) (Nicholas C. Zakas)
    • 58a171e chore: update dependency @ eslint/plugin-kit to ^0.3.1 (#19712) (renovate[bot])
    • 3a075a2 chore: update dependency @ eslint/core to ^0.14.0 (#19715) (renovate[bot])
    • 44bac9d ci: run tests in Node.js 24 (#19702) (Francesco Trotta)
    • 35304dd chore: add missing funding field to packages (#19684) (루밀LuMir)
    • f305beb test: mock process.emitWarning to prevent output disruption (#19687) (Francesco Trotta)
  • 9.26.0 - 2025-05-02

    Features

    • e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670) (sethamus)
    • 0fa2b7a feat: add suggestions for eqeqeq rule (

Snyk has created this PR to upgrade eslint from 8.57.0 to 9.30.1.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/a6d95be2-6fa7-418d-8fd1-0cd3974eee23?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

sourcery-ai bot commented Jul 24, 2025

Reviewer's Guide

This PR upgrades the project's ESLint dependency from 8.57.0 to 9.30.1 by updating the version in package.json and regenerating the lockfile, without altering any linting configurations.

File-Level Changes

Change Details Files
Upgrade ESLint dependency to a new major version
  • Updated ESLint version in frontend/package.json from ^8.57.0 to ^9.30.1
  • Regenerated the lockfile to lock in the new dependency
frontend/package.json
frontend/package-lock.json

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants