Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade stylelint from 15.0.0 to 15.6.0 #140

Merged
merged 2 commits into from
May 23, 2023

Conversation

BinamB
Copy link
Contributor

@BinamB BinamB commented May 23, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade stylelint from 15.0.0 to 15.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 6 versions ahead of your current version.
  • The recommended version was released a month ago, on 2023-04-23.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-D3COLOR-1076592
586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: stylelint from stylelint GitHub release notes
Commit messages
Package name: stylelint
  • 380e920 15.6.0
  • a0b7f71 Prepare release (#6794)
  • fffbb4c Add `ignore: ["with-var-inside"]` to `color-function-notation` (#6802)
  • b089a42 Add `allowEmptyInput`, `cache`, `fix` options to configuration object (#6778)
  • 2e31353 Fix `declaration-block-no-redundant-longhand-properties` autofix for `grid-template` (#6777)
  • 61d53ff Fix `declaration-block-no-duplicate-properties` autofix for 3 or more duplicates (#6801)
  • 56ba4c5 Fix `function-url-quotes` autofix for comments in SCSS function (#6800)
  • 28328a6 Fix `declaration-block-no-duplicate-properties` false positives with option `consecutive-duplicates-with-different-syntaxes` (#6797)
  • afe410a Bump postcss from 8.4.21 to 8.4.22 (#6789)
  • d14a883 Bump @ csstools/media-query-list-parser from 2.0.2 to 2.0.4 (#6786)
  • 8039696 Bump @ csstools/css-parser-algorithms from 2.1.0 to 2.1.1 (#6787)
  • 7edd34b Bump @ csstools/css-tokenizer from 2.1.0 to 2.1.1 (#6790)
  • 74c8afd Fix `declaration-block-no-duplicate-properties` syntax error (#6792)
  • 369557b 15.5.0
  • d536c30 Prepare release (#6762)
  • 9552c84 Improve CLI help (#6783)
  • 231dac4 Fix `block-no-empty` false positives with non-whitespace characters (#6782)
  • 34403c1 Add `ignore: ["consecutive-duplicates-with-different-syntaxes"]` to `declaration-block-no-duplicate-properties` (#6772)
  • c6c11ea Fix `color-function-notation` false positives for namespaced imports (#6774)
  • 0dd3d5b Add `ignoreProperties: []` to `declaration-block-no-duplicate-custom-properties` (#6773)
  • 7973659 Bump typescript from 5.0.3 to 5.0.4 (#6768)
  • 2285625 Bump html-tags from 3.3.0 to 3.3.1 (#6769)
  • 305c19f Bump lint-staged from 13.2.0 to 13.2.1 (#6770)
  • 4d5e24d Bump eslint from 8.37.0 to 8.38.0 (#6771)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@ocshawn ocshawn merged commit bb9ad5d into master May 23, 2023
@ocshawn ocshawn deleted the snyk-upgrade-5e3d94f77b620035d03f11f6b52dbe9d branch May 23, 2023 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants