[Snyk] Security upgrade eslint from 8.57.0 to 10.0.0#1016
[Snyk] Security upgrade eslint from 8.57.0 to 10.0.0#1016
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-15274295
There was a problem hiding this comment.
Pull request overview
This Snyk-generated PR upgrades the repository’s JavaScript linting toolchain by bumping eslint to a new major version to address a reported vulnerability in the dependency graph.
Changes:
- Upgrades
eslintfrom8.xto10.0.0inpackage.json. - Regenerates
package-lock.jsonto reflect the neweslintversion and its updated transitive dependency tree.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Bumps the eslint devDependency to ^10.0.0. |
| package-lock.json | Updates the lockfile to the eslint@10 dependency graph. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "dotenv": "^16.4.5", | ||
| "dotenv-cli": "^7.4.3", | ||
| "eslint": "^8.56.0", | ||
| "eslint": "^10.0.0", |
There was a problem hiding this comment.
Upgrading to eslint@^10 introduces a peer-dependency conflict with eslint-plugin-jsdoc (the lockfile's eslint-plugin-jsdoc entry only supports eslint ^7 || ^8 || ^9). With npm's default peer resolution, npm ci may fail (ERESOLVE) and/or the plugin may not work correctly. Either upgrade eslint-plugin-jsdoc to a version that declares compatibility with eslint 10, or keep eslint on a compatible major version until that support exists.
| "eslint": "^10.0.0", | |
| "eslint": "^9.0.0", |
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-AJV-15274295
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)