Skip to content

Conversation

nerdy-tech-com-gitub
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade eslint from 8.50.0 to 9.34.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 56 versions ahead of your current version.

  • The recommended version was released 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
57 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-HTTPPROXYMIDDLEWARE-8229906
57 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
57 No Known Exploit
medium severity Always-Incorrect Control Flow Implementation
SNYK-JS-HTTPPROXYMIDDLEWARE-9691387
57 No Known Exploit
medium severity Improper Check for Unusual or Exceptional Conditions
SNYK-JS-HTTPPROXYMIDDLEWARE-9691389
57 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
57 No Known Exploit
medium severity Improper Handling of Unexpected Data Type
SNYK-JS-ONHEADERS-10773729
57 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-8482416
57 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
57 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
57 Proof of Concept
Release notes
Package name: eslint
  • 9.34.0 - 2025-08-22

    Features

    • 0bb777a feat: multithread linting (#19794) (Francesco Trotta)
    • 43a5f9e feat: add eslint-plugin-regexp to eslint-config-eslint base config (#19951) (Pixel998)

    Bug Fixes

    • 9b89903 fix: default value of accessor-pairs option in rule.d.ts file (#20024) (Tanuj Kanti)
    • 6c07420 fix: fix spurious failure in neostandard integration test (#20023) (Kirk Waiblinger)
    • 676f4ac fix: allow scientific notation with trailing zeros matching exponent (#20002) (Sweta Tanwar)

    Documentation

    • 0b4a590 docs: make rulesdir deprecation clearer (#20018) (Domenico Gemoli)
    • 327c672 docs: Update README (GitHub Actions Bot)
    • bf26229 docs: Fix typo in core-concepts/index.md (#20009) (Tobias Hernstig)
    • 2309327 docs: fix typo in the "Configuring Rules" section (#20001) (ghazi-git)
    • 2b87e21 docs: [no-else-return] clarify sample code. (#19991) (Yuki Takada (Yukinosuke Takada))
    • c36570c docs: Update README (GitHub Actions Bot)

    Chores

    • f19ad94 chore: upgrade to @ eslint/[email protected] (#20030) (Francesco Trotta)
    • b48fa20 chore: package.json update for @ eslint/js release (Jenkins)
    • 4bce8a2 chore: package.json update for eslint-config-eslint release (Jenkins)
    • 0c9999c refactor: prefer default options in grouped-accessor-pairs (#20028) (루밀LuMir)
    • d503f19 ci: fix stale.yml (#20010) (루밀LuMir)
    • e2dc67d ci: centralize stale.yml (#19994) (루밀LuMir)
    • 7093cb8 ci: bump actions/checkout from 4 to 5 (#20005) (dependabot[bot])
  • 9.33.0 - 2025-08-08

    Features

    • e07820e feat: add global object access detection to no-restricted-globals (#19939) (sethamus)
    • 90b050e feat: support explicit resource management in one-var (#19941) (Sweta Tanwar)

    Bug Fixes

    • 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)
    • e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#19975) (諏訪原慶斗)

    Documentation

    • 34f0723 docs: playground button for TypeScript code example (#19671) (Tanuj Kanti)
    • dc942a4 docs: Update README (GitHub Actions Bot)
    • 5a4b6f7 docs: Update no-multi-assign.md (#19979) (Yuki Takada (Yukinosuke Takada))
    • 247e156 docs: add missing let declarations in no-plusplus (#19980) (Yuki Takada (Yukinosuke Takada))
    • 0d17242 docs: Update README (GitHub Actions Bot)
    • fa20b9d docs: Clarify when to open an issue for a PR (#19974) (Nicholas C. Zakas)

    Build Related

    • 27fa865 build: use ESLint class to generate formatter examples (#19972) (Milos Djermanovic)

    Chores

    • 4258046 chore: update dependency @ eslint/js to v9.33.0 (#19998) (renovate[bot])
    • ad28371 chore: package.json update for @ eslint/js release (Jenkins)
    • 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
    • 54920ed test: switch to Linter.Config in ESLintRules type tests (#19977) (Francesco Trotta)
  • 9.32.0 - 2025-07-25

    Features

    • 1245000 feat: support explicit resource management in core rules (#19828) (fnx)
    • 0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)

    Bug Fixes

    • 960fd40 fix: Upgrade @ eslint/js (#19971) (Nicholas C. Zakas)
    • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
    • d498887 fix: bump @ eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
    • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
    • 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)
    • 3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

    Documentation

    • 86e7426 docs: Update README (GitHub Actions Bot)

    Chores

    • 50de1ce chore: package.json update for @ eslint/js release (Jenkins)
    • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
    • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
    • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
    • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
    • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)
    • e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)
    • 2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)
    • c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)
  • 9.31.0 - 2025-07-11

    Features

    • 35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)
    • a6a6325 feat: support explicit resource management in no-loop-func (#19895) (Milos Djermanovic)
    • 4682cdc feat: support explicit resource management in no-undef-init (#19894) (Milos Djermanovic)
    • 5848216 feat: support explicit resource management in init-declarations (#19893) (Milos Djermanovic)
    • bb370b8 feat: support explicit resource management in no-const-assign (#19892) (Milos Djermanovic)

    Bug Fixes

    • 07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)
    • 28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)

    Documentation

    • 664cb44 docs: Update README (GitHub Actions Bot)
    • 40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)
    • 5a0069d docs: Update README (GitHub Actions Bot)
    • fef04b5 docs: Update working on issues info (#19902) (Nicholas C. Zakas)

    Chores

  • 9.30.1 - 2025-07-01

    Bug Fixes

    • e91bb87 fix: allow separate default and named type imports (#19899) (xbinaryx)

    Documentation

    • ab7c625 docs: Update README (GitHub Actions Bot)
    • dae1e5b docs: update jsdoc's link (#19896) (JamesVanWaza)

    Chores

  • 9.30.0 - 2025-06-27

    Features

    • 52a5fca feat: Support basePath property in config objects (#19879) (Milos Djermanovic)
    • 4ab4482 feat: add allowSeparateTypeImports option to no-duplicate-imports (#19872) (sethamus)
    • b8a7e7a feat: throw error when column is negative in getIndexFromLoc (#19831) (루밀LuMir)

    Bug Fixes

    • 6a0f164 fix: handle null type loc in getIndexFromLoc method (#19862) (루밀LuMir)
    • 3fbcd70 fix: update error message for no-restricted-properties (#19855) (Tanuj Kanti)
    • 7ef4cf7 fix: remove unnecessary semicolon from fixes (#19857) (Francesco Trotta)
    • 7dabc38 fix: use process.version in --env-info (#19865) (TKDev7)

    Documentation

    • 8662ed1 docs: adopt eslint-stylistic sub packages related changes (#19887) (ntnyq)
    • 20158b0 docs: typo in comment for unused variables handling (#19870) (leopardracer)
    • ebfb5b4 docs: Fixed Typo in configuration-files.md (#19873) (0-20)
    • 4112fd0 docs: clarify that boolean is still allowed for rule meta.deprecated (#19866) (Bryan Mishkin)

    Chores

  • 9.29.0 - 2025-06-13

    Features

    • f686fcb feat: add ecmaVersion: 2026, parsing using and await using (#19832) (Milos Djermanovic)
    • 19cdd22 feat: prune suppressions for non-existent files (#19825) (TKDev7)
    • b3d720f feat: add ES2025 globals (#19835) (fisker Cheung)
    • 677a283 feat: add auto-accessor fields support to class-methods-use-this (#19789) (sethamus)
    • dbba058 feat: allow global type declaration in no-var (#19714) (Remco Haszing)
    • 342bd29 feat: ignore type annotations in no-restricted-globals (#19781) (sethamus)
    • 786bcd1 feat: add allowProperties option to no-restricted-properties (#19772) (sethamus)
    • 05b66d0 feat: add sourceCode.isGlobalReference(node) method (#19695) (Nitin Kumar)

    Bug Fixes

    • 85c082c fix: explicit matching behavior with negated patterns and arrays (#19845) (Milos Djermanovic)
    • 9bda4a9 fix: fix LintOptions.filterCodeBlock types (#19837) (ntnyq)
    • 7ab77a2 fix: correct breaking deprecation of FlatConfig type (#19826) (Logicer)
    • 1ba3318 fix: add language and dialects to no-use-before-define (#19808) (Francesco Trotta)

    Documentation

    • 00e3e6a docs: add support for custom name parameter to includeIgnoreFile (#19795) (루밀LuMir)
    • 3aed075 docs: Update README (GitHub Actions Bot)
    • a2f888d docs: enhance documentation with links and fix typos (#19761) (루밀LuMir)
    • 53c3235 docs: update to clarify prompt usage (#19748) (Jennifer Davis)

    Chores

    • 5c114c9 chore: upgrade @ eslint/[email protected] (#19851) (Milos Djermanovic)
    • acf2201 chore: package.json update for @ eslint/js release (Jenkins)
    • a806994 refactor: Remove eslintrc from flat config functionality (#19833) (Nicholas C. Zakas)
    • 152ed51 test: switch to flat config mode in code path analysis tests (#19824) (Milos Djermanovic)
    • b647239 chore: Update first-party dependencies faster with Renovate (#19822) (Nicholas C. Zakas)
    • 7abe42e refactor: SafeEmitter -> SourceCodeVisitor (#19708) (Nicholas C. Zakas)
    • e392895 perf: improve time complexity of getLocFromIndex (#19782) (루밀LuMir)
    • 0ed289c chore: remove accidentally committed file (#19807) (Francesco Trotta)
  • 9.28.0 - 2025-05-30

    Features

    • b0674be feat: Customization of serialization for languageOptions (#19760) (Nicholas C. Zakas)
    • a95721f feat: Add --pass-on-unpruned-suppressions CLI option (#19773) (Milos Djermanovic)
    • bfd0e7a feat: support TypeScript syntax in no-use-before-define (#19566) (Tanuj Kanti)
    • 68c61c0 feat: support TS syntax in no-shadow (#19565) (Nitin Kumar)
    • 0f773ef feat: support TS syntax in no-magic-numbers (#19561) (Nitin Kumar)
    • c4a6b60 feat: add allowTypeAnnotation to func-style (#19754) (sethamus)
    • b03ad17 feat: add TypeScript support to prefer-arrow-callback (#19678) (Tanuj Kanti)
    • bc3c331 feat: ignore overloaded function declarations in func-style rule (#19755) (sethamus)

    Bug Fixes

Snyk has created this PR to upgrade eslint from 8.50.0 to 9.34.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/aa77fd79-7d27-4ab0-9d41-5dd117531784?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants