Skip to content

[Snyk] Upgrade eslint-config-next from 13.0.3 to 15.4.2 #1013

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

nerdy-tech-com-gitub
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade eslint-config-next from 13.0.3 to 15.4.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 1587 versions ahead of your current version.

  • The recommended version was released 22 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727
140 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
140 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
140 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
140 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIME-10044504
140 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIMECOREJS3-9397696
140 Proof of Concept
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
140 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
140 Proof of Concept
Release notes
Package name: eslint-config-next
  • 15.4.2 - 2025-07-18
  • 15.4.2-canary.35 - 2025-08-09
  • 15.4.2-canary.34 - 2025-08-08
  • 15.4.2-canary.33 - 2025-08-07
  • 15.4.2-canary.32 - 2025-08-06
  • 15.4.2-canary.31 - 2025-08-05
  • 15.4.2-canary.30 - 2025-08-04
  • 15.4.2-canary.29 - 2025-08-03
  • 15.4.2-canary.28 - 2025-08-02
  • 15.4.2-canary.27 - 2025-08-01
  • 15.4.2-canary.26 - 2025-08-01
  • 15.4.2-canary.25 - 2025-07-31
  • 15.4.2-canary.24 - 2025-07-31
  • 15.4.2-canary.23 - 2025-07-31
  • 15.4.2-canary.22 - 2025-07-30
  • 15.4.2-canary.21 - 2025-07-30
  • 15.4.2-canary.20 - 2025-07-29
  • 15.4.2-canary.19 - 2025-07-28
  • 15.4.2-canary.18 - 2025-07-26
  • 15.4.2-canary.17 - 2025-07-25
  • 15.4.2-canary.16 - 2025-07-24
  • 15.4.2-canary.15 - 2025-07-23
  • 15.4.2-canary.14 - 2025-07-22
  • 15.4.2-canary.13 - 2025-07-22
  • 15.4.2-canary.12 - 2025-07-21
  • 15.4.2-canary.11 - 2025-07-21
  • 15.4.2-canary.10 - 2025-07-19
  • 15.4.2-canary.9 - 2025-07-18
  • 15.4.2-canary.8 - 2025-07-18

    Core Changes

    • [devtool] move font styling to global.css: #81782
    • [devtool] copy decoded info of error details: #81735
    • fix(build): add sourcePage context for PPR dynamic route lambda creation: #81781
    • refactor: rename experimental.dynamicIO to experimental.cacheComponents: #81562
    • Properly handle hanging promise rejections during prerendering: #81754
    • Upgrade React from d85ec5f5-20250716 to dffacc7b-20250717: #81767
    • Refactor: Get rid of overly generic getExpectedRequestStore function: #81791

    Misc Changes

    • Update Rspack production test manifest: #81746
    • Update Rspack development test manifest: #81747
    • Turbopack: Split DynamicEqHash trait into smaller traits in a separate re-usable crate: #81741
    • [turbopack] Reuse shared Promise for loaded chunks: #81755
    • Add VSCode tasks to show TypeScript compilation errors in problems view: #81799
    • Turbopack: remove unneeded manifests for API routes: #81536

    Credits

    Huge thanks to @ vercel-release-bot, @ huozhi, @ bgw, @ wyattjoh, @ unstubbable, @ eps1lon, and @ mischnic for helping!

  • 15.4.2-canary.7 - 2025-07-17

    Core Changes

    • bugfix: static resources staleTime should be renewed once refetched: #81771

    Misc Changes

    • fix(turbopack) Adjust the way catchall routes are handled when a more specific parallel route exists: #81634
    • Add trigger for v0 sync workflow: #81645

    Credits

    Huge thanks to @ ztanner, @ Cy-Tek, and @ padmaia for helping!

  • 15.4.2-canary.6 - 2025-07-17

    Core Changes

    • [devtool] enable segment explorer by default: #81737
    • [turbopack] Stop exposing globals from Turbopack runtime: #81727
    • Remove unnecessary await: #81761
    • [chore] bump zod to latest v3: #81757
    • feat(turbopack): Log anonymized internal error (panic) information to telemetry: #81272
    • fix: revert client segment route changes for sub shell generation: #81740

    Misc Changes

    • Turbopack: consistently name runtime chunk: #81769
    • Turbopack: include more details in panic: #81773

    Credits

    Huge thanks to @ huozhi, @ eps1lon, @ mischnic, @ bgw, and @ wyattjoh for helping!

  • 15.4.2-canary.5 - 2025-07-16

    Core Changes

    • fix: pages router metadata bugs with React 19: #81733
    • Improve error handling for headers/cookies/draftMode in 'use cache': #81716
    • [devtool] fix duplicate rendered indicator on server: #81729

    Misc Changes

    • chore: update username from 'nebrelbug' to 'bgub': #81734

    Credits

    Huge thanks to @ bgub, @ ztanner, @ unstubbable, and @ huozhi for helping!

  • 15.4.2-canary.4 - 2025-07-16

    Core Changes

    • [Segment Cache] Support dynamic head prefetching: #81677
    • [sourcemaps] Consistent cursor columns: #81375
    • fix: revert client segment route changes for sub shell generation: #81731

    Misc Changes

    • Fix: createRouterAct "reject" config: #81720
    • Update Rspack development test manifest: #81702
    • Update Rspack production test manifest: #81701
    • Add an e2e test for the css serving issue: #81683

    Credits

    Huge thanks to @ acdlite, @ vercel-release-bot, @ lukesandberg, @ eps1lon, and @ wyattjoh for helping!

  • 15.4.2-canary.3 - 2025-07-16

    Misc Changes

    • [test] Fix app-static deploy test: #81712

    Credits

    Huge thanks to @ eps1lon for helping!

  • 15.4.2-canary.2 - 2025-07-16

    Core Changes

    • feat(next/image): warn when images.qualities is undefined: #81690
    • feat(build): optimize filterUniqueParamsCombinations to generate sub-combinations: #81321
    • Update NextAdapter type and re-export: #81692
    • upgrade to [email protected]: #80123
    • [metadata] replace for initial body icon case: #81688
    • [segment explorer] remove dev panel ui flag: #81670
    • Simplify running test apps locally with ppr or dynamicIO enabled: #81668
    • [turbopack] Return cached Promise from __turbopack_load_by_url__ : #81663
    • Upgrade React from 97cdd5d3-20250710 to 2f0e7e57-20250715: #81678
    • Delete unused renderToString function: #81707
    • Discard prerendered route handler data from FS cache after revalidation: #81611
    • Upgrade React from 2f0e7e57-20250715 to d85ec5f5-20250716: #81708
    • Ignore pending revalidations during prerendering: #81621
    • [turbopack] Clear chunk cache on HMR instead of creating new next-server VM: #81664
    • fix: rootParams should throw in client when fallbackParams are not present: #81711
    • perf(build): optimize buildAppStaticPaths performance and add helper function: #81386
    • Turbopack: Support string without options for @ next/mdx: #81713

    Misc Changes

    • docs: Update redirects i18n documentation for App Router: #81347
    • Include use-cache test suite in the Cache Components tests: #81610
    • Improve error message for sync server functions: #81705
    • [lint] keep lint-stage use faster linting: #81710

    Credits

    Huge thanks to @ styfle, @ wyattjoh, @ ijjk, @ ztanner, @ huozhi, @ prateekkish, @ unstubbable, @ eps1lon, @ lubieowoce, and @ timneutkens for helping!

  • 15.4.2-canary.1 - 2025-07-15

    Core Changes

    • Enable @ typescript-eslint/switch-exhaustiveness-check rule: #81583
    • [dynamicIO] use RSC dynamicness to control partial vs complete PPR result: #81627
    • [dynamicIO] Do not use React.unstable_postpone(): #81652
    • feat: new detachable panel UI: #81483
    • Turbopack: content-hash PageLoaderAsset: #81450
    • [segment explorer] fix content overflow styling: #81649
    • Improve reliability of owner stacks for async I/O errors: #81501
    • fix(router): Prevent redirect loop on root data requests with basePath: #81096
    • Ensure custom NextServer config is honored: #81681
    • Fix before interactive incorrectly render css: #81146
    • perf: memorize exclude function in webpack config: #81525
    • Also enforce experimental features when there's no next config file: #81679

    Example Changes

    • Add Prisma ORM example to Next.js examples: #75290
    • chore: Update with-supabase example to use getClaims(): #81383

    Misc Changes

    • Update Rspack development test manifest: #81603
    • Allow beforePageLoad to be async: #81650
    • Docs: POC: #81419
    • chore(bot): update comment: #81672
    • Fix build-native.ts on Windows: #81673
    • Update Rspack development test manifest: #81660
    • Update Rspack production test manifest: #81661
    • Add create release branch workflow: #81687
    • fix patch-next by adding missing script: #81430
    • Turbopack: Generalize ImportedBinding effect creation to avoid as much special-casing of SimpleAssignTarget: #81653

    Credits

    Huge thanks to @ unstubbable, @ vercel-release-bot, @ gnoff, @ RobPruzan, @ mischnic, @ huozhi, @ delbaoliveira, @ styfle, @ ankur-arch, @ skt-t1-byungi, @ ijjk, @ Han5991, @ SyMind, @ Anas-github-acc, @ hf, and @ bgw for helping!

  • 15.4.2-canary.0 - 2025-07-14

    Core Changes

    • Use and enforce exhaustive switch statements for work unit store: #81577

    Credits

    Huge thanks to @ unstubbable for helping!

  • 15.4.1 - 2025-07-14

    Tip

    Check out our Next v15.4 Blog Post to learn more about this release.

    Core Changes

    • [next-server] fix params duplicate in query after rewrite: #77939
    • [next-server] preserve rsc query for rsc redirects: #77963
    • Turbopack: fix a bug where marking a task a completed causes a panic when reading the output: #77922
    • Turbopack warning spelling fix: #77999
    • Allow URL schemes that include +, - or .: #77932
    • [dev-overlay] Remove unused hydration error related code: #77929
    • [dev-overlay] Unify error deduplication logic: #78017
    • fix: use the match result after matching using the matched path header: #77994
    • Upgrade React from 3fbfb9ba-20250409 to c44e4a25-20250409: #78031
    • Move unhandled rejection handling to shared path: #77997
    • fix: ensure app router not found works when deployed with pages i18n config: #77905
    • Uninstall existing uncaughtException listeners to prevent the process from crashing: #78042
    • Experimental bfcache: Restore state w/ : #77992
    • Add graceful error fallback for bots requests: #77916
    • Upgrade React from c44e4a25-20250409 to 1d6c8168-20250411: #78067
    • [next-server] remove unnecessary query shallow copy: #78003
    • [dev-overlay] disable copy button when clipboard is not available: #78101
    • [dev-overlay] Stop stashing React error details on error instances: #77975
    • [dynamicIO] Model invalid dynamic on empty shells: #77270
    • fix: bump [email protected]: #78149
    • Handle graceful fallback for custom error boundaries:

Snyk has created this PR to upgrade eslint-config-next from 13.0.3 to 15.4.2.

See this package in npm:
eslint-config-next

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/a354ad92-7c9d-4805-b67a-3028136e2c7d?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants