[Snyk] Upgrade eslint-plugin-import from 2.22.1 to 2.23.2

[snyk-bot]

Snyk has created this PR to upgrade eslint-plugin-import from 2.22.1 to 2.23.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2021-05-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: eslint-plugin-import

• 2.23.2 - 2021-05-15
  

  v2.23.2

• 2.23.1 - 2021-05-15
  

  v2.23.1

• 2.23.0 - 2021-05-14
  

  https://github.com/benmosher/eslint-plugin-import/blob/v2.23.0/CHANGELOG.md#2230---2021-05-13

• 2.22.1 - 2020-09-27
  

  https://github.com/benmosher/eslint-plugin-import/blob/v2.22.1/CHANGELOG.md#2221---2020-09-27

from eslint-plugin-import GitHub release notes

Commit messages

Package name: eslint-plugin-import

• a332f20 Bump to v2.23.2
• 5af181f [meta] add `safe-publish-latest`; use `prepublishOnly` script for npm 7+
• 8431b46 Bump to v2.23.1
• 83f3c3e [Fix] `order`: fix alphabetical sorting
• 8213543 [Tests] add missing fixture from d903477f4e31be71e016f8af56cbe2a8d4f11c9c
• d903477 [Fix] ExportMap: do not crash when tsconfig lacks `.compilerOptions`
• dd0e8cb [meta] correct Remove 'invariant' calls from 'stripIgnoredCharacters' tests graphql/graphql-js#2065 -> #2056
• 8d7ec17 [Fix] `newline-after-import`: fix crash with `export {}` syntax
• e9e755d Bump to v2.23.0
• 7b264c0 [resolvers/webpack] v0.13.1
• aa37904 [deps] update `eslint-module-utils`
• 6417cfd utils: v2.6.1
• 4d47169 [resolvers/webpack] [deps] update `debug`, `interpret`, `is-core-module`, `lodash`, `resolve`
• be24ab8 [resolvers/*] [dev deps] update `coveralls`
• 36407c4 [resolvers/node] [deps] update `debug`, `resolve`
• 5eb0dca [utils] [deps] update `debug`
• 7c1e8e4 [Docs] Add import/recommended ruleset to README
• a943fd0 [New] `order`: Add `warnOnUnassignedImports` option to enable warnings for out of order unassigned imports
• ad2a619 [Tests] `no-unresolved`: add tests for `import()`
• 96ed3c7 [Fix] `no-unresolved`: check import()
• ab82094 [Tests] skip webpack 5 `async function` test on node <7
• 3f9dd99 [Tests] skip coveralls on packages tests
• 9539a5d [Tests] temporarily disable node 4 and 5 tests
• dd2f087 [actions] use `node/install` instead of `node/run`

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mistaken-pull-closer]

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

[pull-dog]

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

• docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
ff8670e0-c656-11eb-8485-2718b3f64fdc

[guardrails]

⚠️ We detected 3 security issues in this pull request:

Mode: paranoid | Total findings: 3 | Considered vulnerability: 3

Vulnerable Libraries (3)

Severity	Details
Medium	browserslist@4.16.1 upgrade to >4.16.4
High	lodash@4.17.20 upgrade to >=4.17.21
High	y18n@4.0.0 upgrade to >=5.0.5

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.