Skip to content

[Snyk] Upgrade eslint from 8.27.0 to 9.32.0 #1128

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade eslint from 8.27.0 to 9.32.0 #1128

wants to merge 1 commit into from

Conversation

nerdy-tech-com-gitub
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade eslint from 8.27.0 to 9.32.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 77 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727		 140 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230		 140 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076		 140 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIME-10044504		 140 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIMECOREJS3-9397696		 140 Proof of Concept
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 140 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085		 140 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		 140 Proof of Concept
Release notes
Package name: eslint
  • 9.32.0 - 2025-07-25

    Features

    • 1245000 feat: support explicit resource management in core rules (#19828) (fnx)
    • 0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)

    Bug Fixes

    • 960fd40 fix: Upgrade @ eslint/js (#19971) (Nicholas C. Zakas)
    • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
    • d498887 fix: bump @ eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
    • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
    • 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)
    • 3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

    Documentation

    • 86e7426 docs: Update README (GitHub Actions Bot)

    Chores

    • 50de1ce chore: package.json update for @ eslint/js release (Jenkins)
    • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
    • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
    • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
    • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
    • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)
    • e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)
    • 2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)
    • c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)
  • 9.31.0 - 2025-07-11

    Features

    • 35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)
    • a6a6325 feat: support explicit resource management in no-loop-func (#19895) (Milos Djermanovic)
    • 4682cdc feat: support explicit resource management in no-undef-init (#19894) (Milos Djermanovic)
    • 5848216 feat: support explicit resource management in init-declarations (#19893) (Milos Djermanovic)
    • bb370b8 feat: support explicit resource management in no-const-assign (#19892) (Milos Djermanovic)

    Bug Fixes

    • 07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)
    • 28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)

    Documentation

    • 664cb44 docs: Update README (GitHub Actions Bot)
    • 40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)
    • 5a0069d docs: Update README (GitHub Actions Bot)
    • fef04b5 docs: Update working on issues info (#19902) (Nicholas C. Zakas)

    Chores

  • 9.30.1 - 2025-07-01

    Bug Fixes

    • e91bb87 fix: allow separate default and named type imports (#19899) (xbinaryx)

    Documentation

    • ab7c625 docs: Update README (GitHub Actions Bot)
    • dae1e5b docs: update jsdoc's link (#19896) (JamesVanWaza)

    Chores

  • 9.30.0 - 2025-06-27

    Features

    • 52a5fca feat: Support basePath property in config objects (#19879) (Milos Djermanovic)
    • 4ab4482 feat: add allowSeparateTypeImports option to no-duplicate-imports (#19872) (sethamus)
    • b8a7e7a feat: throw error when column is negative in getIndexFromLoc (#19831) (루밀LuMir)

    Bug Fixes

    • 6a0f164 fix: handle null type loc in getIndexFromLoc method (#19862) (루밀LuMir)
    • 3fbcd70 fix: update error message for no-restricted-properties (#19855) (Tanuj Kanti)
    • 7ef4cf7 fix: remove unnecessary semicolon from fixes (#19857) (Francesco Trotta)
    • 7dabc38 fix: use process.version in --env-info (#19865) (TKDev7)

    Documentation

    • 8662ed1 docs: adopt eslint-stylistic sub packages related changes (#19887) (ntnyq)
    • 20158b0 docs: typo in comment for unused variables handling (#19870) (leopardracer)
    • ebfb5b4 docs: Fixed Typo in configuration-files.md (#19873) (0-20)
    • 4112fd0 docs: clarify that boolean is still allowed for rule meta.deprecated (#19866) (Bryan Mishkin)

    Chores

  • 9.29.0 - 2025-06-13

    Features

    • f686fcb feat: add ecmaVersion: 2026, parsing using and await using (#19832) (Milos Djermanovic)
    • 19cdd22 feat: prune suppressions for non-existent files (#19825) (TKDev7)
    • b3d720f feat: add ES2025 globals (#19835) (fisker Cheung)
    • 677a283 feat: add auto-accessor fields support to class-methods-use-this (#19789) (sethamus)
    • dbba058 feat: allow global type declaration in no-var (#19714) (Remco Haszing)
    • 342bd29 feat: ignore type annotations in no-restricted-globals (#19781) (sethamus)
    • 786bcd1 feat: add allowProperties option to no-restricted-properties (#19772) (sethamus)
    • 05b66d0 feat: add sourceCode.isGlobalReference(node) method (#19695) (Nitin Kumar)

    Bug Fixes

    • 85c082c fix: explicit matching behavior with negated patterns and arrays (#19845) (Milos Djermanovic)
    • 9bda4a9 fix: fix LintOptions.filterCodeBlock types (#19837) (ntnyq)
    • 7ab77a2 fix: correct breaking deprecation of FlatConfig type (#19826) (Logicer)
    • 1ba3318 fix: add language and dialects to no-use-before-define (#19808) (Francesco Trotta)

    Documentation

    • 00e3e6a docs: add support for custom name parameter to includeIgnoreFile (#19795) (루밀LuMir)
    • 3aed075 docs: Update README (GitHub Actions Bot)
    • a2f888d docs: enhance documentation with links and fix typos (#19761) (루밀LuMir)
    • 53c3235 docs: update to clarify prompt usage (#19748) (Jennifer Davis)

    Chores

    • 5c114c9 chore: upgrade @ eslint/[email protected] (#19851) (Milos Djermanovic)
    • acf2201 chore: package.json update for @ eslint/js release (Jenkins)
    • a806994 refactor: Remove eslintrc from flat config functionality (#19833) (Nicholas C. Zakas)
    • 152ed51 test: switch to flat config mode in code path analysis tests (#19824) (Milos Djermanovic)
    • b647239 chore: Update first-party dependencies faster with Renovate (#19822) (Nicholas C. Zakas)
    • 7abe42e refactor: SafeEmitter -> SourceCodeVisitor (#19708) (Nicholas C. Zakas)
    • e392895 perf: improve time complexity of getLocFromIndex (#19782) (루밀LuMir)
    • 0ed289c chore: remove accidentally committed file (#19807) (Francesco Trotta)
  • 9.28.0 - 2025-05-30

    Features

    • b0674be feat: Customization of serialization for languageOptions (#19760) (Nicholas C. Zakas)
    • a95721f feat: Add --pass-on-unpruned-suppressions CLI option (#19773) (Milos Djermanovic)
    • bfd0e7a feat: support TypeScript syntax in no-use-before-define (#19566) (Tanuj Kanti)
    • 68c61c0 feat: support TS syntax in no-shadow (#19565) (Nitin Kumar)
    • 0f773ef feat: support TS syntax in no-magic-numbers (#19561) (Nitin Kumar)
    • c4a6b60 feat: add allowTypeAnnotation to func-style (#19754) (sethamus)
    • b03ad17 feat: add TypeScript support to prefer-arrow-callback (#19678) (Tanuj Kanti)
    • bc3c331 feat: ignore overloaded function declarations in func-style rule (#19755) (sethamus)

    Bug Fixes

    • eea3e7e fix: Remove configured global variables from GlobalScope#implicit (#19779) (Milos Djermanovic)
    • a467de3 fix: update context.report types (#19751) (Nitin Kumar)
    • fd467bb fix: remove interopDefault to use jiti's default (#19697) (sethamus)
    • 72d16e3 fix: avoid false positive in no-unassigned-vars for declare module (#19746) (Azat S.)
    • 81c3c93 fix: curly types (#19750) (Eli)

    Documentation

    • 3ec2082 docs: Nested arrays in files config entry (#19799) (Nicholas C. Zakas)
    • 89a65b0 docs: clarify how config arrays can apply to subsets of files (#19788) (Shais Ch)
    • 2ba8a0d docs: Add description of meta.namespace to plugin docs (#19798) (Nicholas C. Zakas)
    • 59dd7e6 docs: update func-style with examples (#19793) (Tanuj Kanti)
    • e9129e0 docs: add global scope's implicit field to Scope Manager docs (#19770) (Milos Djermanovic)
    • 52f5b7a docs: fix minor typos and add links (#19743) (루밀LuMir)
    • 00716a3 docs: upfront recommend against using the no-return-await rule (#19727) (Mike DiDomizio)

    Chores

    • 175b7b8 chore: upgrade to @ eslint/[email protected] (#19802) (Francesco Trotta)
    • 844f5a6 chore: package.json update for @ eslint/js release (Jenkins)
    • 62b1c1b chore: update globals to v16 (#19791) (Nitin Kumar)
    • e8a1cb8 chore: ignore jiti-v2.0 & jiti-v2.1 for renovate (#19786) (Nitin Kumar)
    • 43d3975 chore: Add Copilot Instructions file (#19753) (Nicholas C. Zakas)
    • 2dfb5eb test: update SourceCodeTraverser tests (#19763) (Milos Djermanovic)
    • 5bc21f9 chore: add *.code-workspace to .gitignore (#19771) (루밀LuMir)
    • f4fa40e refactor: NodeEventGenerator -> SourceCodeTraverser (#19679) (Nicholas C. Zakas)
    • 0f49329 refactor: use a service to emit warnings (#19725) (Francesco Trotta)
    • 20a9e59 chore: update dependency shelljs to ^0.10.0 (#19740) (renovate[bot])
  • 9.27.0 - 2025-05-16

    Features

    • d71e37f feat: Allow flags to be set in ESLINT_FLAGS env variable (#19717) (Nicholas C. Zakas)
    • ba456e0 feat: Externalize MCP server (#19699) (Nicholas C. Zakas)
    • 07c1a7e feat: add allowRegexCharacters to no-useless-escape (#19705) (sethamus)
    • 7bc6c71 feat: add no-unassigned-vars rule (#19618) (Jacob Bandes-Storch)
    • ee40364 feat: convert no-array-constructor suggestions to autofixes (#19621) (sethamus)
    • 32957cd feat: support TS syntax in max-params (#19557) (Nitin Kumar)

    Bug Fixes

    • 5687ce7 fix: correct mismatched removed rules (#19734) (루밀LuMir)
    • dc5ed33 fix: correct types and tighten type definitions in SourceCode class (#19731) (루밀LuMir)
    • de1b5de fix: correct service property name in Linter.ESLintParseResult type (

@snyk-bot
feat: upgrade eslint from 8.27.0 to 9.32.0
cf5d4ae 
Snyk has created this PR to upgrade eslint from 8.27.0 to 9.32.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/a354ad92-7c9d-4805-b67a-3028136e2c7d?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@nerdy-tech-com-gitub @snyk-bot