Bump eslint-plugin-import-x in lockfile

[Mrtenz]

This fixes an issue in the compatibility tests workflow in CI (example here) since the latest version of eslint-plugin-import-x uses unrs-resolver, which needs to be added to the allow-scripts configuration. I've bumped it in the lockfile here and added the allow-scripts configuration to resolve the CI error.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​unrs/​resolver-binding-win32-x64-msvc@​1.7.11
	@​unrs/​resolver-binding-win32-arm64-msvc@​1.7.11
	@​unrs/​resolver-binding-win32-ia32-msvc@​1.7.11
	@​unrs/​resolver-binding-linux-x64-gnu@​1.7.11
	@​unrs/​resolver-binding-linux-x64-musl@​1.7.11
	@​unrs/​resolver-binding-freebsd-x64@​1.7.11
	@​unrs/​resolver-binding-linux-arm64-gnu@​1.7.11
	@​unrs/​resolver-binding-linux-arm64-musl@​1.7.11
	@​unrs/​resolver-binding-linux-arm-gnueabihf@​1.7.11
	@​unrs/​resolver-binding-linux-arm-musleabihf@​1.7.11
	@​unrs/​resolver-binding-linux-ppc64-gnu@​1.7.11
	@​unrs/​resolver-binding-linux-riscv64-gnu@​1.7.11
	@​unrs/​resolver-binding-linux-riscv64-musl@​1.7.11
	@​unrs/​resolver-binding-linux-s390x-gnu@​1.7.11
	@​unrs/​resolver-binding-darwin-arm64@​1.7.11
	@​unrs/​resolver-binding-darwin-x64@​1.7.11
	@​unrs/​resolver-binding-wasm32-wasi@​1.7.11
	@​napi-rs/​wasm-runtime@​0.2.10
	@​emnapi/​runtime@​1.4.3
	@​emnapi/​core@​1.4.3
	@​tybys/​wasm-util@​0.9.0
	get-tsconfig@​4.8.1 ⏵ 4.10.1	+1
	unrs-resolver@​1.7.11
	stable-hash-x@​0.1.1
	semver@​7.6.3 ⏵ 7.7.2	+1		+1
	@​emnapi/​wasi-threads@​1.0.2
	napi-postinstall@​0.2.4
	eslint-import-context@​0.1.8
	eslint-plugin-import-x@​4.4.0 ⏵ 4.15.1	+2		+1	+4

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• @tybys/[email protected]
• @emnapi/[email protected]
• [email protected]
• @unrs/[email protected]
• [email protected]

View full report

[Gudahtt]

@SocketSecurity ignore npm/@emnapi/[email protected]
@SocketSecurity ignore npm/@tybys/[email protected]
@SocketSecurity ignore npm/@unrs/[email protected]
@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]

These packages have a really concerningly broad set of permissions 🤔. It does make sense given what they do, but it's really unfortunate that we need to use these for our ESLint plugin. We've crossed that bridge already so I won't suggest we reverse course here, and I understand this resolves some egregious performance issues in the original eslint-plugin-import package. But it's unfortunate. Ah well.

[Gudahtt]

LGTM!

[cryptodev-2s]

LGTM!