Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade eslint from 4.4.1 to 4.19.1 #5

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

yurovant
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade eslint from 4.4.1 to 4.19.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 23 versions ahead of your current version.

  • The recommended version was released on 6 years ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
506 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:eslint:20180222
506 Proof of Concept
Release notes
Package name: eslint
  • 4.19.1 - 2018-03-22
    • 3ff5d11 Fix: no-invalid-regexp not understand variable for flags (fixes #10112) (#10113) (薛定谔的猫)
    • abc765c Fix: object-curly-newline minProperties w/default export (fixes #10101) (#10103) (Kevin Partington)
    • 6f9e155 Docs: Update ambiguous for...in example for guard-for-in (#10114) (CJ R)
    • 0360cc2 Chore: Adding debug logs on successful plugin loads (#10100) (Kevin Partington)
    • a717c5d Chore: Adding log at beginning of unit tests in Makefile.js (#10102) (Kevin Partington)
  • 4.19.0 - 2018-03-16
    • 55a1593 Update: consecutive option for one-var (fixes #4680) (#9994) (薛定谔的猫)
    • 8d3814e Fix: false positive about ES2018 RegExp enhancements (fixes #9893) (#10062) (Toru Nagashima)
    • 935f4e4 Docs: Clarify default ignoring of node_modules (#10092) (Matijs Brinkhuis)
    • 72ed3db Docs: Wrap Buffer() in backticks in no-buffer-constructor rule description (#10084) (Stephen Edgar)
    • 3aded2f Docs: Fix lodash typos, make spacing consistent (#10073) (Josh Smith)
    • e33bb64 Chore: enable no-param-reassign on ESLint codebase (#10065) (Teddy Katz)
    • 66a1e9a Docs: fix possible typo (#10060) (Vse Mozhet Byt)
    • 2e68be6 Update: give a node at least the indentation of its parent (fixes #9995) (#10054) (Teddy Katz)
    • 72ca5b3 Update: Correctly indent JSXText with trailing linebreaks (fixes #9878) (#10055) (Teddy Katz)
    • 2a4c838 Docs: Update ECMAScript versions in FAQ (#10047) (alberto)
  • 4.18.2 - 2018-03-02
    • 6b71fd0 Fix: table@4.0.2, because 4.0.3 needs "ajv": "^6.0.1" (#10022) (Mathieu Seiler)
    • 3c697de Chore: fix incorrect comment about linter.verify return value (#10030) (Teddy Katz)
    • 9df8653 Chore: refactor parser-loading out of linter.verify (#10028) (Teddy Katz)
    • f6901d0 Fix: remove catastrophic backtracking vulnerability (fixes #10002) (#10019) (Jamie Davis)
    • e4f52ce Chore: Simplify dataflow in linter.verify (#10020) (Teddy Katz)
    • 33177cd Chore: make library files non-executable (#10021) (Teddy Katz)
    • 558ccba Chore: refactor directive comment processing (#10007) (Teddy Katz)
    • 18e15d9 Chore: avoid useless catch clauses that just rethrow errors (#10010) (Teddy Katz)
    • a1c3759 Chore: refactor populating configs with defaults in linter (#10006) (Teddy Katz)
    • aea07dc Fix: Make max-len ignoreStrings ignore JSXText (fixes #9954) (#9985) (Rachael Sim)
  • 4.18.1 - 2018-02-20
    • f417506 Fix: ensure no-await-in-loop reports the correct node (fixes #9992) (#9993) (Teddy Katz)
    • 3e99363 Docs: Fixed typo in key-spacing rule doc (#9987) (Jaid)
    • 7c2cd70 Docs: deprecate experimentalObjectRestSpread (#9986) (Toru Nagashima)
  • 4.18.0 - 2018-02-16
    • 70f22f3 Chore: Apply memoization to config creation within glob utils (#9944) (Kenton Jacobsen)
    • 0e4ae22 Update: fix indent bug with binary operators/ignoredNodes (fixes #9882) (#9951) (Teddy Katz)
    • 47ac478 Update: add named imports and exports for object-curly-newline (#9876) (Nicholas Chua)
    • e8efdd0 Fix: support Rest/Spread Properties (fixes #9885) (#9943) (Toru Nagashima)
    • f012b8c Fix: support Async iteration (fixes #9891) (#9957) (Toru Nagashima)
    • 74fa253 Docs: Clarify no-mixed-operators options (fixes #9962) (#9964) (Ivan Hayes)
    • 426868f Docs: clean up key-spacing docs (fixes #9900) (#9963) (Abid Uzair)
    • 4a6f22e Update: support eslint-disable-* block comments (fixes #8781) (#9745) (Erin)
    • 777283b Docs: Propose fix typo for function (#9965) (John Eismeier)
    • bf3d494 Docs: Fix typo in max-len ignorePattern example. (#9956) (Tim Martin)
    • d64fbb4 Docs: fix typo in prefer-destructuring.md example (#9930) (Vse Mozhet Byt)
    • f8d343f Chore: Fix default issue template (#9946) (Kai Cataldo)
  • 4.17.0 - 2018-02-03
    • 1da1ada Update: Add "multiline" type to padding-line-between-statements (#8668) (Matthew Bennett)
    • bb213dc Chore: Use messageIds in some of the core rules (#9648) (Jed Fox)
    • 1aa1970 Docs: remove outdated rule naming convention (#9925) (Teddy Katz)
    • 3afaff6 Docs: Add prefer-destructuring variable reassignment example (#9873) (LePirlouit)
    • d20f6b4 Fix: Typo in error message when running npm (#9866) (Maciej Kasprzyk)
    • 51ec6a7 Docs: Use GitHub Multiple PR/Issue templates (#9911) (Kai Cataldo)
    • dc80487 Update: space-unary-ops uses astUtils.canTokensBeAdjacent (fixes #9907) (#9906) (Kevin Partington)
    • 084351b Docs: Fix the messageId example (fixes #9889) (#9892) (Jed Fox)
    • 9cbb487 Docs: Mention the globals key in the no-undef docs (#9867) (Dan Dascalescu)
  • 4.16.0 - 2018-01-20
    • e26a25f Update: allow continue instead of if wrap in guard-for-in (fixes #7567) (#9796) (Michael Ficarra)
    • af043eb Update: Add NewExpression support to comma-style (#9591) (Frazer McLean)
    • 4f898c7 Build: Fix JSDoc syntax errors (#9813) (Matija Marohnić)
    • 13bcf3c Fix: Removing curly quotes in no-eq-null report message (#9852) (Kevin Partington)
    • b96fb31 Docs: configuration hierarchy for CLIEngine options (fixes #9526) (#9855) (PiIsFour)
    • 8ccbdda Docs: Clarify that -c configs merge with .eslintrc.* (fixes #9535) (#9847) (Kevin Partington)
    • 978574f Docs: Fix examples for no-useless-escape (#9853) (Toru Kobayashi)
    • cd5681d Chore: Deactivate consistent-docs-url in internal rules folder (#9815) (Kevin Partington)
    • 2e87ddd Docs: Sync messageId examples' style with other examples (#9816) (Kevin Partington)
    • 1d61930 Update: use doctrine range information in valid-jsdoc (#9831) (Teddy Katz)
    • 133336e Update: fix indent behavior on template literal arguments (fixes #9061) (#9820) (Teddy Katz)
    • ea1b15d Fix: avoid crashing on malformed configuration comments (fixes #9373) (#9819) (Teddy Katz)
    • add1e70 Update: fix indent bug on comments in ternary expressions (fixes #9729) (#9818) (Teddy Katz)
    • 6a5cd32 Fix: prefer-destructuring error with computed properties (fixes #9784) (#9817) (Teddy Katz)
    • 601f851 Docs: Minor modification to code comments for clarity (#9821) (rgovind92)
    • b9da067 Docs: fix misleading info about RuleTester column numbers (#9830) (Teddy Katz)
    • 2cf4522 Update: Rename and deprecate object-property-newline option (#9570) (Jonathan Pool)
    • acde640 Docs: Add ES 2018 to Configuring ESLint (#9829) (Kai Cataldo)
    • ccfce15 Docs: Minor tweaks to working with rules page (#9824) (Kevin Partington)
    • 54b329a Docs: fix substitution of {{ name }} (#9822) (Andres Kalle)
  • 4.15.0 - 2018-01-07
    • 6ab04b5 New: Add context.report({ messageId }) (fixes #6740) (#9165) (Jed Fox)
    • fc7f404 Docs: add url to each of the rules (refs #6582) (#9788) (Patrick McElhaney)
    • fc44da9 Docs: fix sort-imports rule block language (#9805) (ferhat elmas)
    • 65f0176 New: CLIEngine#getRules() (refs #6582) (#9782) (Patrick McElhaney)
    • c64195f Update: More detailed assert message for rule-tester (#9769) (Weijia Wang)
    • 9fcfabf Fix: no-extra-parens false positive (fixes: #9755) (#9795) (Erin)
    • 61e5fa0 Docs: Add table of contents to Node.js API docs (#9785) (Patrick McElhaney)
    • 4c87f42 Fix: incorrect error messages of no-unused-vars (fixes #9774) (#9791) (akouryy)

Snyk has created this PR to upgrade eslint from 4.4.1 to 4.19.1.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/yurovant/project/1f837db8-c58e-4c5a-8fb8-3ce9945bb27c?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment