Skip to content

Conversation

@ManuelDevWeb
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade eslint-plugin-import from 2.22.1 to 2.29.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 24 versions ahead of your current version.
  • The recommended version was released 3 months ago, on 2023-12-14.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-JSON5-3182856
427/1000
Why? Proof of Concept exploit, CVSS 6.4
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
427/1000
Why? Proof of Concept exploit, CVSS 6.4
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
427/1000
Why? Proof of Concept exploit, CVSS 6.4
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: eslint-plugin-import
  • 2.29.1 - 2023-12-14

    Full Changelog: v2.29.0...v2.29.1

  • 2.29.0 - 2023-10-23

    Full Changelog: v2.28.1...v2.29.0

  • 2.28.1 - 2023-08-18

    Full Changelog: v2.28.0...v2.28.1

  • 2.28.0 - 2023-07-28
  • 2.27.5 - 2023-01-16
  • 2.27.4 - 2023-01-12
  • 2.27.3 - 2023-01-12
  • 2.27.2 - 2023-01-12
  • 2.27.1 - 2023-01-12
  • 2.27.0 - 2023-01-11
  • 2.26.0 - 2022-04-05
  • 2.25.4 - 2022-01-02
  • 2.25.3 - 2021-11-10
  • 2.25.2 - 2021-10-12
  • 2.25.1 - 2021-10-12
  • 2.25.0 - 2021-10-12
  • 2.24.2 - 2021-08-24
  • 2.24.1 - 2021-08-19
  • 2.24.0 - 2021-08-08
  • 2.23.4 - 2021-05-29
  • 2.23.3 - 2021-05-21
  • 2.23.2 - 2021-05-15
  • 2.23.1 - 2021-05-15
  • 2.23.0 - 2021-05-14
  • 2.22.1 - 2020-09-27
from eslint-plugin-import GitHub release notes
Commit messages
Package name: eslint-plugin-import
  • ee5fade Bump to 2.29.1
  • 48fec35 [Deps] update `tsconfig-paths`
  • 80aee73 [Dev Deps] update `chai`, `eslint-doc-generator`, `markdownlint-cli`
  • 8c83eaf [Tests] node v21.3 has a broken `fs.writeFile`
  • e67259e [Fix] `no-unused-modules`: support export patterns with array destructuring
  • 9fd3c42 [Tests] `no-duplicates`: add passing test
  • 12f0300 [Fix] `no-extraneous-dependencies`: ignore `export type { ... } from '...'` when `includeTypes` is false
  • 6d34c88 Bump to 2.29.0
  • ec6a8ea [Refactor] use `hasown` instead of `has`
  • 78f50b8 [Deps] update `array-includes`, `array.prototype.findlastindex`, `array.prototype.flat`, `array.prototype.flatmap`, `eslint-import-resolver-node`, `is-core-module`, `object.fromentries`, `object.groupby`, `object.values`
  • 6d2540f [resolvers/webpack] v0.13.8
  • 30d61b6 [resolvers/webpack] [deps] update `array.prototype.find`, `is-core-module`, `resolve`
  • 2c281d1 [resolvers/webpack] [refactor] use `hasown` instead of `has`
  • 66cb10f [Fix] `newline-after-import`: fix `exactCount` with `considerComments` false positive, when there is a leading comment
  • 8705121 [New] `newline-after-import`: new option `exactCount` and docs update
  • 6b95a02 [resolvers/webpack] v0.13.7
  • 04e68a2 [resolvers/webpack] [fix] use the `dirname` of the `configPath` as `basedir`
  • 4d32d68 [New] TypeScript config: add .cts and .mts extensions
  • cd95728 Bump to 2.28.1
  • 0847443 Revert 1fa2971 (breaking group change in `order`)
  • e9de30a [resolvers/webpack] v0.13.6
  • cd1dff7 Revert "[resolvers/webpack] [refactor] replace `lodash/isEqual` usage with `deep-equal`"
  • da71746 [resolvers/webpack] v0.13.5
  • 22a0802 [resolvers/webpack] [deps] update `resolve`

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants