Skip to content

[Snyk] Upgrade eslint from 8.50.0 to 9.27.0 #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

[Snyk] Upgrade eslint from 8.50.0 to 9.27.0 #25

wants to merge 1 commit into from

Conversation

nerdy-tech-com-gitub
Copy link
Owner

@nerdy-tech-com-gitub nerdy-tech-com-gitub commented Jun 14, 2025 •
edited by sourcery-ai bot
Loading

snyk-top-banner

Snyk has created this PR to upgrade eslint from 8.50.0 to 9.27.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 48 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230		 67 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-HTTPPROXYMIDDLEWARE-8229906		 67 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-8482416		 67 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-6147607		 67 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060		 67 No Known Exploit
medium severity Always-Incorrect Control Flow Implementation
SNYK-JS-HTTPPROXYMIDDLEWARE-9691387		 67 No Known Exploit
medium severity Improper Check for Unusual or Exceptional Conditions
SNYK-JS-HTTPPROXYMIDDLEWARE-9691389		 67 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085		 67 No Known Exploit
Release notes
Package name: eslint
  • 9.27.0 - 2025-05-16

    Features

    • d71e37f feat: Allow flags to be set in ESLINT_FLAGS env variable (#19717) (Nicholas C. Zakas)
    • ba456e0 feat: Externalize MCP server (#19699) (Nicholas C. Zakas)
    • 07c1a7e feat: add allowRegexCharacters to no-useless-escape (#19705) (sethamus)
    • 7bc6c71 feat: add no-unassigned-vars rule (#19618) (Jacob Bandes-Storch)
    • ee40364 feat: convert no-array-constructor suggestions to autofixes (#19621) (sethamus)
    • 32957cd feat: support TS syntax in max-params (#19557) (Nitin Kumar)

    Bug Fixes

    • 5687ce7 fix: correct mismatched removed rules (#19734) (루밀LuMir)
    • dc5ed33 fix: correct types and tighten type definitions in SourceCode class (#19731) (루밀LuMir)
    • de1b5de fix: correct service property name in Linter.ESLintParseResult type (#19713) (Francesco Trotta)
    • 60c3e2c fix: sort keys in eslint-suppressions.json to avoid git churn (#19711) (Ron Waldon-Howe)
    • 9da90ca fix: add allowReserved to Linter.ParserOptions type (#19710) (Francesco Trotta)
    • fbb8be9 fix: add info to ESLint.DeprecatedRuleUse type (#19701) (Francesco Trotta)

    Documentation

    • 25de550 docs: Update description of frozen rules to mention TypeScript (#19736) (Nicholas C. Zakas)
    • bd5def6 docs: Clean up configuration files docs (#19735) (Nicholas C. Zakas)
    • 4d0c60d docs: Add Neovim to editor integrations (#19729) (Maria José Solano)
    • 71317eb docs: Update README (GitHub Actions Bot)
    • 4c289e6 docs: Update README (GitHub Actions Bot)
    • f0f0d46 docs: clarify that unused suppressions cause non-zero exit code (#19698) (Milos Djermanovic)
    • 8ed3273 docs: fix internal usages of ConfigData type (#19688) (Francesco Trotta)
    • eb316a8 docs: add fmt and check sections to Package.json Conventions (#19686) (루밀LuMir)
    • a3a2559 docs: fix wording in Combine Configs (#19685) (Milos Djermanovic)
    • c8d17e1 docs: Update README (GitHub Actions Bot)

    Chores

    • f8f1560 chore: upgrade @ eslint/js@9.27.0 (#19739) (Milos Djermanovic)
    • ecaef73 chore: package.json update for @ eslint/js release (Jenkins)
    • 596fdc6 chore: update dependency @ arethetypeswrong/cli to ^0.18.0 (#19732) (renovate[bot])
    • f791da0 chore: remove unbalanced curly brace from .editorconfig (#19730) (Maria José Solano)
    • e86edee refactor: Consolidate Config helpers (#19675) (Nicholas C. Zakas)
    • cf36352 chore: remove shared types (#19718) (Francesco Trotta)
    • f60f276 refactor: Easier RuleContext creation (#19709) (Nicholas C. Zakas)
    • 58a171e chore: update dependency @ eslint/plugin-kit to ^0.3.1 (#19712) (renovate[bot])
    • 3a075a2 chore: update dependency @ eslint/core to ^0.14.0 (#19715) (renovate[bot])
    • 44bac9d ci: run tests in Node.js 24 (#19702) (Francesco Trotta)
    • 35304dd chore: add missing funding field to packages (#19684) (루밀LuMir)
    • f305beb test: mock process.emitWarning to prevent output disruption (#19687) (Francesco Trotta)
  • 9.26.0 - 2025-05-02

    Features

    • e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670) (sethamus)
    • 0fa2b7a feat: add suggestions for eqeqeq rule (#19640) (Nitin Kumar)
    • dcbdcc9 feat: Add MCP server (#19592) (Nicholas C. Zakas)
    • 2dfd83e feat: add ignoreDirectives option in no-unused-expressions (#19645) (sethamus)

    Bug Fixes

    • 96e84de fix: check cache file existence before deletion (#19648) (sethamus)
    • d683aeb fix: don't crash on tests with circular references in RuleTester (#19664) (Milos Djermanovic)
    • 9736d5d fix: add namespace to Plugin.meta type (#19661) (Milos Djermanovic)
    • 17bae69 fix: update RuleTester.run() type (#19634) (Nitin Kumar)

    Documentation

    • dd98d63 docs: Update README (GitHub Actions Bot)
    • c25e858 docs: Update README (GitHub Actions Bot)
    • b2397e9 docs: Update README (GitHub Actions Bot)
    • addd0a6 docs: fix formatting of unordered lists in Markdown (#19660) (Milos Djermanovic)
    • a21b38d docs: Update README (GitHub Actions Bot)
    • c0721a7 docs: fix double space in command (#19657) (CamWass)

    Chores

    • 5b247c8 chore: upgrade to @ eslint/js@9.26.0 (#19681) (Francesco Trotta)
    • d6fa4ac chore: package.json update for @ eslint/js release (Jenkins)
    • 0958690 chore: disambiguate internal types LanguageOptions and Rule (#19669) (Francesco Trotta)
    • f1c858e chore: fix internal type references to Plugin and Rule (#19665) (Francesco Trotta)
    • 40dd299 refactor: One-shot ESQuery selector analysis (#19652) (Nicholas C. Zakas)
    • 1cfd702 chore: update dependency @ eslint/json to ^0.12.0 (#19656) (renovate[bot])
  • 9.25.1 - 2025-04-21

    Bug Fixes

    • cdc8e8c fix: revert directive detection in no-unused-expressions (#19639) (sethamus)

    Chores

    • 1f2b057 chore: upgrade @ eslint/js@9.25.1 (#19642) (Milos Djermanovic)
    • 771317f chore: package.json update for @ eslint/js release (Jenkins)
  • 9.25.0 - 2025-04-18

    Features

    • dcd95aa feat: support TypeScript syntax in no-empty-function rule (#19551) (sethamus)
    • 77d6d5b feat: support TS syntax in no-unused-expressions (#19564) (Sweta Tanwar)
    • 90228e5 feat: support JSRuleDefinition type (#19604) (루밀LuMir)
    • 59ba6b7 feat: add allowObjects option to no-restricted-properties (#19607) (sethamus)
    • db650a0 feat: support TypeScript syntax in no-invalid-this rule (#19532) (Tanuj Kanti)
    • 9535cff feat: support TS syntax in no-loop-func (#19559) (Nitin Kumar)

    Bug Fixes

    • 910bd13 fix: nodeTypeKey not being used in NodeEventGenerator (#19631) (StyleShit)

    Documentation

    • ca7a735 docs: update no-undef-init when not to use section (#19624) (Tanuj Kanti)
    • 1b870c9 docs: use eslint-config-xo in the getting started guide (#19629) (Nitin Kumar)
    • 5d4af16 docs: add types for multiple rule options (#19616) (Tanuj Kanti)
    • e8f8d57 docs: Update README (GitHub Actions Bot)
    • a40348f docs: no-use-before-define tweaks (#19622) (Kirk Waiblinger)
    • 0ba3ae3 docs: Update README (GitHub Actions Bot)
    • 865dbfe docs: ensure "learn more" deprecation links point to useful resource (#19590) (Kirk Waiblinger)
    • f80b746 docs: add known limitations for no-self-compare (#19612) (Nitin Kumar)
    • 865aed6 docs: Update README (GitHub Actions Bot)

    Chores

    • 88dc196 chore: upgrade @ eslint/js@9.25.0 (#19636) (Milos Djermanovic)
    • 345288d chore: package.json update for @ eslint/js release (Jenkins)
    • affe6be chore: upgrade trunk (#19628) (sethamus)
    • dd20cf2 test: fix no-loop-func test with duplicate variable reports (#19610) (Milos Djermanovic)
    • bd05397 chore: upgrade @ eslint/* dependencies (#19606) (Milos Djermanovic)
    • 22ea18b chore: replace invalid int type with number inside JSDocs. (#19597) (Arya Emami)
  • 9.24.0 - 2025-04-04

    Features

    • 556c25b feat: support loading TS config files using --experimental-strip-types (#19401) (Arya Emami)
    • 72650ac feat: support TS syntax in init-declarations (#19540) (Nitin Kumar)
    • 03fb0bc feat: normalize patterns to handle "./" prefix in files and ignores (#19568) (Pixel998)
    • 071dcd3 feat: support TS syntax in no-dupe-class-members (#19558) (Nitin Kumar)
    • cd72bcc feat: Introduce a way to suppress violations (#19159) (Iacovos Constantinou)
    • 2a81578 feat: support TS syntax in no-loss-of-precision (#19560) (Nitin Kumar)
    • 30ae4ed feat: add new options to class-methods-use-this (#19527) (sethamus)
    • b79ade6 feat: support TypeScript syntax in no-array-constructor (#19493) (Tanuj Kanti)

    Bug Fixes

    • b23d1c5 fix: deduplicate variable names in no-loop-func error messages (#19595) (Nitin Kumar)
    • fb8cdb8 fix: use any[] type for context.options (#19584) (Francesco Trotta)

    Documentation

    • f857820 docs: update documentation for --experimental-strip-types (#19594) (Nikolas Schröter)
    • 803e4af docs: simplify gitignore path handling in includeIgnoreFile section (#19596) (Thomas Broyer)
    • 6d979cc docs: Update README (GitHub Actions Bot)
    • 82177e4 docs: Update README (GitHub Actions Bot)
    • e849dc0 docs: replace existing var with const (#19578) (Sweta Tanwar)
    • 0c65c62 docs: don't pass filename when linting rule examples (#19571) (Milos Djermanovic)
    • 6be36c9 docs: Update custom-rules.md code example of fixer (#19555) (Yifan Pan)

    Build Related

    • 366e369 build: re-enable Prettier formatting for package.json files (#19569) (Francesco Trotta)

    Chores

    • ef67420 chore: upgrade @ eslint/js@9.24.0 (#19602) (Milos Djermanovic)
    • 4946847 chore: package.json update for @ eslint/js release (Jenkins)
    • a995acb chore: correct 'flter'/'filter' typo in package script (#19587) (Josh Goldberg ✨)
    • b9a5efa test: skip symlink test on Windows (#19503) (fisker Cheung)
    • 46eea6d chore: remove Rule & FormatterFunction from shared/types.js (#19556) (Nitin Kumar)
    • bdcc91d chore: modify .editorconfig to keep parity with prettier config (#19577) (Sweta Tanwar)
    • 7790d83 chore: fix some typos in comment (#19576) (todaymoon)
    • 76064a6 test: ignore package-lock.json for eslint-webpack-plugin (#19572) (Francesco Trotta)
  • 9.23.0 - 2025-03-21

    Features

    • 557a0d2 feat: support TypeScript syntax in no-useless-constructor (#19535) (Josh Goldberg ✨)
    • 8320241 feat: support TypeScript syntax in default-param-last (#19431) (Josh Goldberg ✨)
    • 833c4a3 feat: defineConfig() supports "flat/" config prefix (#19533) (Nicholas C. Zakas)
    • 4a0df16 feat: circular autofix/conflicting rules detection (#19514) (Milos Djermanovic)
    • be56a68 feat: support TypeScript syntax in class-methods-use-this (#19498) (Josh Goldberg ✨)

    Bug Fixes

    • 0e20aa7 fix: move deprecated RuleContext methods to subtype (#19531) (Francesco Trotta)
    • cc3bd00 fix: reporting variable used in catch block in no-useless-assignment (#19423) (Tanuj Kanti)
    • d46ff83 fix: no-dupe-keys false positive with proto setter (#19508) (Milos Djermanovic)
    • e732773 fix: navigation of search results on pressing Enter (#19502) (Tanuj Kanti)
    • f4e9c5f fix: allow RuleTester to test files inside node_modules/ (#19499) (fisker Cheung)

    Documentation

    • 5405939 docs: show red underlines in TypeScript examples in rules docs (#19547) (Milos Djermanovic)
    • 48b53d6 docs: replace var with const in examples (#19539) (Nitin Kumar)
    • c39d7db docs: Update README (GitHub Actions Bot)
    • a4f8760 docs: revert accidental changes (#19542) (Francesco Trotta)
    • 280128f docs: add copy button (

@snyk-bot
feat: upgrade eslint from 8.50.0 to 9.27.0
0f8d9d6 
Snyk has created this PR to upgrade eslint from 8.50.0 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/aa77fd79-7d27-4ab0-9d41-5dd117531784?utm_source=github&utm_medium=referral&page=upgrade-pr
@sourcery-ai Sourcery AI
Copy link

sourcery-ai bot commented Jun 14, 2025 •
edited
Loading

Reviewer's Guide

This PR updates the ESLint dependency in the static output package.json from version 8.x to 9.27.0 to address security vulnerabilities and keep linting tools up to date.

Sequence Diagram: Snyk-driven ESLint Upgrade

sequenceDiagram
    actor Snyk
    participant Repo as "Project Repository"
    actor Dev as "Developer"
    participant CICD as "CI/CD Pipeline"

    Snyk->>Repo: Scans dependencies in package.json
    Snyk->>Repo: Creates PR (Upgrade eslint 8.50.0 to 9.27.0 in package.json)
    Dev->>Repo: Reviews & Merges PR
    CICD->>Repo: Fetches updated package.json
    CICD->>CICD: Installs/Uses eslint@9.27.0 for linting
Loading

File-Level Changes

Change Details Files
Bumped ESLint dependency to 9.27.0
  • Replaced the old ^8.x version string with ^9.27.0 in the dependencies block
 glances/outputs/static/package.json
Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@nerdy-tech-com-gitub @snyk-bot