Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency eslint to v4.18.2 [SECURITY] #4

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Feb 7, 2020

This PR contains the following updates:

Package Type Update Change
eslint (source) devDependencies minor 4.15.0 -> 4.18.2

GitHub Vulnerability Alerts

GHSA-jcgq-xh2f-2hfm / WS-2018-0592

A vulnerability was descovered in eslint before 4.18.2. One of the regexes in eslint is vulnerable to catastrophic backtracking.


Release Notes

eslint/eslint

v4.18.2

Compare Source

  • 6b71fd0 Fix: table@4.0.2, because 4.0.3 needs "ajv": "^6.0.1" (#​10022) (Mathieu Seiler)
  • 3c697de Chore: fix incorrect comment about linter.verify return value (#​10030) (Teddy Katz)
  • 9df8653 Chore: refactor parser-loading out of linter.verify (#​10028) (Teddy Katz)
  • f6901d0 Fix: remove catastrophic backtracking vulnerability (fixes #​10002) (#​10019) (Jamie Davis)
  • e4f52ce Chore: Simplify dataflow in linter.verify (#​10020) (Teddy Katz)
  • 33177cd Chore: make library files non-executable (#​10021) (Teddy Katz)
  • 558ccba Chore: refactor directive comment processing (#​10007) (Teddy Katz)
  • 18e15d9 Chore: avoid useless catch clauses that just rethrow errors (#​10010) (Teddy Katz)
  • a1c3759 Chore: refactor populating configs with defaults in linter (#​10006) (Teddy Katz)
  • aea07dc Fix: Make max-len ignoreStrings ignore JSXText (fixes #​9954) (#​9985) (Rachael Sim)

v4.18.1

Compare Source

v4.18.0

Compare Source

v4.17.0

Compare Source

  • 1da1ada Update: Add "multiline" type to padding-line-between-statements (#​8668) (Matthew Bennett)
  • bb213dc Chore: Use messageIds in some of the core rules (#​9648) (Jed Fox)
  • 1aa1970 Docs: remove outdated rule naming convention (#​9925) (Teddy Katz)
  • 3afaff6 Docs: Add prefer-destructuring variable reassignment example (#​9873) (LePirlouit)
  • d20f6b4 Fix: Typo in error message when running npm (#​9866) (Maciej Kasprzyk)
  • 51ec6a7 Docs: Use GitHub Multiple PR/Issue templates (#​9911) (Kai Cataldo)
  • dc80487 Update: space-unary-ops uses astUtils.canTokensBeAdjacent (fixes #​9907) (#​9906) (Kevin Partington)
  • 084351b Docs: Fix the messageId example (fixes #​9889) (#​9892) (Jed Fox)
  • 9cbb487 Docs: Mention the globals key in the no-undef docs (#​9867) (Dan Dascalescu)

v4.16.0

Compare Source

  • e26a25f Update: allow continue instead of if wrap in guard-for-in (fixes #​7567) (#​9796) (Michael Ficarra)
  • af043eb Update: Add NewExpression support to comma-style (#​9591) (Frazer McLean)
  • 4f898c7 Build: Fix JSDoc syntax errors (#​9813) (Matija Marohnić)
  • 13bcf3c Fix: Removing curly quotes in no-eq-null report message (#​9852) (Kevin Partington)
  • b96fb31 Docs: configuration hierarchy for CLIEngine options (fixes #​9526) (#​9855) (PiIsFour)
  • 8ccbdda Docs: Clarify that -c configs merge with .eslintrc.* (fixes #​9535) (#​9847) (Kevin Partington)
  • 978574f Docs: Fix examples for no-useless-escape (#​9853) (Toru Kobayashi)
  • cd5681d Chore: Deactivate consistent-docs-url in internal rules folder (#​9815) (Kevin Partington)
  • 2e87ddd Docs: Sync messageId examples' style with other examples (#​9816) (Kevin Partington)
  • 1d61930 Update: use doctrine range information in valid-jsdoc (#​9831) (Teddy Katz)
  • 133336e Update: fix indent behavior on template literal arguments (fixes #​9061) (#​9820) (Teddy Katz)
  • ea1b15d Fix: avoid crashing on malformed configuration comments (fixes #​9373) (#​9819) (Teddy Katz)
  • add1e70 Update: fix indent bug on comments in ternary expressions (fixes #​9729) (#​9818) (Teddy Katz)
  • 6a5cd32 Fix: prefer-destructuring error with computed properties (fixes #​9784) (#​9817) (Teddy Katz)
  • 601f851 Docs: Minor modification to code comments for clarity (#​9821) (rgovind92)
  • b9da067 Docs: fix misleading info about RuleTester column numbers (#​9830) (Teddy Katz)
  • 2cf4522 Update: Rename and deprecate object-property-newline option (#​9570) (Jonathan Pool)
  • acde640 Docs: Add ES 2018 to Configuring ESLint (#​9829) (Kai Cataldo)
  • ccfce15 Docs: Minor tweaks to working with rules page (#​9824) (Kevin Partington)
  • 54b329a Docs: fix substitution of {{ name }} (#​9822) (Andres Kalle)

Renovate configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or if you tick the rebase/retry checkbox below.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

@renovate renovate bot force-pushed the renovate/npm-eslint-vulnerability branch from 86403f8 to c81696b Compare February 12, 2020 18:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant