This repository has been archived by the owner on Mar 25, 2020. It is now read-only.
Update dependency eslint to v6 [SECURITY] #30
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
This PR is being closed due to inactivity as part of a Pull Request Bankruptcy. If you feel it’s still useful or relevant please feel free to re-open it. |
Renovate Ignore NotificationAs this PR has been closed unmerged, Renovate will ignore this upgrade and you will not receive PRs for any future 6.x releases. However, if you upgrade to 6.x manually then Renovate will then reenable updates for minor and patch updates automatically. If this PR was closed by mistake or you changed your mind, you can simply rename this PR and you will soon get a fresh replacement PR opened. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^2.9.0->^6.0.0ℹ️ Find our documentation at https://github.com/Financial-Times/next/wiki/Renovate.
GitHub Vulnerability Alerts
GHSA-jcgq-xh2f-2hfm / WS-2018-0592
A vulnerability was descovered in eslint before 4.18.2. One of the regexes in eslint is vulnerable to catastrophic backtracking.
Release Notes
eslint/eslint
v6.5.1Compare Source
0d3d7d9Docs: fix typo in no-magic-numbers (#12345) (Josiah Rooney)447ac87Fix: no-useless-rename handles ExperimentalRestProperty (fixes #12335) (#12339) (Kai Cataldo)b6ff73cSponsors: Sync README with website (ESLint Jenkins)v6.5.0Compare Source
73596cbUpdate: Add enforceForSwitchCase option to use-isnan (#12106) (Milos Djermanovic)d592a24Fix: exclude\u000dso new line won't convert to text (fixes #12027) (#12031) (zamboney)e85d27aFix: no-regex-spaces false positives and invalid autofix (fixes #12226) (#12231) (Milos Djermanovic)b349bf7Fix: prefer-named-capture-group incorrect locations (fixes #12233) (#12247) (Milos Djermanovic)7dc1ea9Fix: no-useless-return autofix removes comments (#12292) (Milos Djermanovic)0e68677Fix: no-extra-bind autofix removes comments (#12293) (Milos Djermanovic)6ad7e86Fix: no-extra-label autofix removes comments (#12298) (Milos Djermanovic)acec201Fix: no-undef-init autofix removes comments (#12299) (Milos Djermanovic)d89390bFix: use async reading of stdin in bin/eslint.js (fixes #12212) (#12230) (Barrie Treloar)334ca7cUpdate: no-useless-rename also reports default values (fixes #12301) (#12322) (Kai Cataldo)41bfe91Update: Fix handling of chained new expressions in new-parens (#12303) (Milos Djermanovic)160b7c4Chore: add autofix npm script (#12330) (Kai Cataldo)04b6adbChore: enable eslint-plugin-jsdoc (refs #11146) (#12332) (Kai Cataldo)9b86167Docs: Add new ES environments to Configuring ESLint (#12289) (Milos Djermanovic)c9aeab2Docs: Add supported ECMAScript version to README (#12290) (Milos Djermanovic)8316e7bFix: no-useless-rename autofix removes comments (#12300) (Milos Djermanovic)29c12f1Chore: cache results in runtime-info (#12320) (Kai Cataldo)f5537b2Fix: prefer-numeric-literals autofix removes comments (#12313) (Milos Djermanovic)11ae6fcUpdate: Fix call, new and member expressions in no-extra-parens (#12302) (Milos Djermanovic)a7894ebNew: add --env-info flag to CLI (#12270) (Kai Cataldo)61392ffSponsors: Sync README with website (ESLint Jenkins)2c6bf8eDocs: English fix (#12306) (Daniel Nixon)6f11877Sponsors: Sync README with website (ESLint Jenkins)2e202caDocs: fix links in array-callback-return (#12288) (Milos Djermanovic)e39c631Docs: add example for CLIEngine#executeOnText 3rd arg (#12286) (Kai Cataldo)d4f9a16Update: add support for JSXFragments in indent rule (fixes #12208) (#12210) (Kai Cataldo)c6af95fSponsors: Sync README with website (ESLint Jenkins)8cadd52Sponsors: Sync README with website (ESLint Jenkins)f9fc695Chore: enable default-param-last (#12244) (薛定谔的猫)9984c3eDocs: Update README team and sponsors (ESLint Jenkins)v6.4.0Compare Source
e915fffDocs: Improve examples and clarify default option (#12067) (Yuping Zuo)540296fUpdate: enforceForClassMembers option to accessor-pairs (fixes #12063) (#12192) (Milos Djermanovic)d3c2334Update: flag nested block with declaration as error (#12193) (David Waller)b2498d2Update: Fix handling of property names in no-self-assign (#12105) (Milos Djermanovic)1ee61b0Update: enforceForClassMembers computed-property-spacing (fixes #12049) (#12214) (Milos Djermanovic)520c922Docs: Added naming convention details to plugin usage (#12202) (Henrique Barcelos)f826eabFix: Allow line comment exception in object-curly-spacing (fixes #11902) (#12216) (Milos Djermanovic)db2a29bUpdate: indentation of comment followed by semicolon (fixes #12232) (#12243) (Kai Cataldo)ae17d1cFix: no-sequences is reporting incorrect locations (#12241) (Milos Djermanovic)365331aFix: object-shorthand providing invalid fixes for typescript (#12260) (Brad Zacher)1c921c6New: add no-import-assign (fixes #12237) (#12252) (Toru Nagashima)3be04fdNew: Add prefer-regex-literals rule (fixes #12238) (#12254) (Milos Djermanovic)37c0fdeUpdate: Report global Atomics calls in no-obj-calls (fixes #12234) (#12258) (Milos Djermanovic)985c9e5Fix: space-before-function-paren autofix removes comments (fixes #12259) (#12264) (Milos Djermanovic)01da7d0Fix: eqeqeq rule reports incorrect locations (#12265) (Milos Djermanovic)319e4d8Docs: adding finally example (#12256) (Jens Melgaard)d52328fDocs: fix no-sequenceswithexamples (#12239) (Milos Djermanovic)a41fdc0Fix: Remove autofixer for no-unsafe-negation (#12157) (Milos Djermanovic)e38f5fdUpdate: fix no-octal-escape false negatives after \0 (#12079) (Milos Djermanovic)9418fbeSponsors: Sync README with website (ESLint Jenkins)acc5ec5Sponsors: Sync README with website (ESLint Jenkins)460c5adSponsors: Sync README with website (ESLint Jenkins)0313441New: add rule default-param-last (fixes #11361) (#12188) (Chiawen Chen)7621f5dUpdate: add more specific linting messages to space-in-parens (#11121) (Che Fisher)21eb904Fix: basePath of OverrideTester (fixes #12032) (#12205) (Toru Nagashima)86e5e65Sponsors: Sync README with website (ESLint Jenkins)2b1a13fFix: no-extra-boolean-cast reports wrong negation node (fixes #11324) (#12197) (Milos Djermanovic)ba8c2aaSponsors: Sync README with website (ESLint Jenkins)a0a9746Docs: Fix link in no-irregular-whitespace.md (#12196) (Timo Tijhof)e10eebaFix: quotes autofix produces syntax error with octal escape sequences (#12118) (Milos Djermanovic)v6.3.0Compare Source
0acdefbChore: refactor code (#12113) (James George)52e2cf5New: reportUnusedDisableDirectives in config (refs eslint/rfcs#22) (#12151) (Toru Nagashima)020f952Update: enforceForSequenceExpressions to no-extra-parens (fixes #11916) (#12142) (Milos Djermanovic)aab1b84Fix: reset to the default color (#12174) (Ricardo Gobbo de Souza)4009d39Fix: yoda rule produces invalid autofix with preceding yield (#12166) (Milos Djermanovic)febb660Fix: no-extra-boolean-cast invalid autofix with yield before negation (#12164) (Milos Djermanovic)4c0b70bNew: support TypeScript at config initializer (fixes #11789) (#12172) (Pig Fang)94e39d9Chore: use GitHub Actions (#12144) (Toru Nagashima)e88f305Chore: support es2020 in fuzz (#12180) (薛定谔的猫)00d2c5bDocs: corrected class extension example (#12176) (Marius M)31e5428Chore: Fix wrong error object keys in test files (#12162) (Milos Djermanovic)197f443Fix: func-name-matching crash on descriptor-like arguments (#12100) (Milos Djermanovic)644ce33Fix: no-self-assign false positive with rest and spread in array (#12099) (Milos Djermanovic)a81d263Fix: fix message of function-paren-newline (#12136) (Pig Fang)77f8ed1Chore: update blogpost template (#12154) (Toru Nagashima)6abc7b7Docs: Document the exception in no-unsafe-negation (#12161) (Milos Djermanovic)v6.2.2Compare Source
0e0b784Upgrade: espree@^6.1.1 (#12158) (Kevin Partington)04e859fSponsors: Sync README with website (ESLint Jenkins)34783d1Sponsors: Sync README with website (ESLint Jenkins)b809e72Docs: Update README team and sponsors (ESLint Jenkins)v6.2.1Compare Source
8c021b5Upgrade: eslint-utils 1.4.2 (#12131) (Toru Nagashima)e82388bSponsors: Sync README with website (ESLint Jenkins)4aeeeedDocs: update docs for ecmaVersion 2020 (#12120) (silverwind)6886148Docs: Add duplicate keys limitation to accessor-pairs (#12124) (Milos Djermanovic)v6.2.0Compare Source
fee6acbUpdate: support bigint and dynamic import (refs #11803) (#11983) (Toru Nagashima)afd8012New: noInlineConfig setting (refs eslint/rfcs#22) (#12091) (Toru Nagashima)3d12378Update: Fix accessor-pairs to enforce pairs per property in literals (#12062) (Milos Djermanovic)8cd00b3New: function-call-argument-newline (#12024) (finico)30ebf92Fix: prefer-template autofix produces syntax error with octal escapes (#12085) (Milos Djermanovic)13c3988Fix: Check literal type explicitly in dot-notation (#12095) (Milos Djermanovic)3e5cecaFix: Handle empty string property names in getFunctionNameWithKind (#12104) (Milos Djermanovic)9a043ffFix: no-duplicate-case false positives on Object.prototype keys (#12107) (Milos Djermanovic)fe631afChore: minor typo fix (#12112) (James George)4cb7877Fix: fix no-extra-parens ignores some nodes (#11909) (Pig Fang)2dc23b8Update: fix no-dupe-keys false negatives on empty string names (#12069) (Milos Djermanovic)19ab666Fix: yoda exceptRange false positives on empty string property names (#12071) (Milos Djermanovic)d642150Update: Check empty string property names in sort-keys (#12073) (Milos Djermanovic)acce6deFix: class-methods-use-this reports 'undefined' names (#12103) (Milos Djermanovic)92ec2cbFix: Allow bind call with a single spread element in no-extra-bind (#12088) (Milos Djermanovic)bfdb0c9Fix: no-extra-boolean-cast invalid autofix for Boolean() without args (#12076) (Milos Djermanovic)34ccc0cChore: Remove TDZ scope type condition from no-unused-vars (#12055) (Milos Djermanovic)01d38ceDocs: Remove TDZ scope from the scope manager interface documentation (#12054) (Milos Djermanovic)1aff8fcUpdate: warn about mixing ternary and logical operators (fixes #11704) (#12001) (Karthik Priyadarshan)11be2f8Docs: do not recommend global-installed usage (#12016) (薛定谔的猫)cf31dabFix: no-restricted-syntax - correct the schema (#12051) (Brad Zacher)fbec99eUpdate: fix class-methods-use-this false negatives with exceptMethods (#12077) (Milos Djermanovic)fb08b7cDocs: Remove readonly/writable global logic from no-undef (fixes #11963) (#12053) (Milos Djermanovic)5b5934bSponsors: Sync README with website (ESLint Jenkins)9156760Sponsors: Sync README with website (ESLint Jenkins)f5e0cc4Update: Check computed method keys in no-extra-parens (#11973) (Milos Djermanovic)d961438Docs: Fix Incorrect Documentation (#12045) (Michael Miceli)887d08cSponsors: Sync README with website (ESLint Jenkins)d90183fDocs: add a case to func-names (#12038) (Chiawen Chen)8a5b62dDocs: no use eslint.linter in code example (#12037) (薛定谔的猫)5831767Update: report location of func-names (fixes #12022) (#12028) (Pig Fang)v6.1.0Compare Source
8f86ccaUpgrade: eslint-scope@^5.0.0 (#12011) (Kevin Partington)d08683eFix: glob processing (fixes #11940) (#11986) (Toru Nagashima)bfcf8b2Fix: dot-location errors with parenthesized objects (fixes #11868) (#11933) (Milos Djermanovic)79e8d09Fix: add parens for sequence expr in arrow-body-style (fixes #11917) (#11918) (Pig Fang)105c098Docs: update docs for object-curly-spacing (fixes #11634) (#12009) (Chiawen Chen)c90a12cChore: update release script for new website repo (#12006) (Kai Cataldo)e2c08a9Sponsors: Sync README with website (ESLint Jenkins)b974fcbUpdate: Check computed property keys in no-extra-parens (#11952) (Milos Djermanovic)222d27cUpdate: Add for-in and for-of checks for props in no-param-reassign (#11941) (Milos Djermanovic)e4c450fFix: no-extra-parens autofix withinin a for-loop init (fixes #11706) (#11848) (Milos Djermanovic)2dafe2dFix: prefer-const produces invalid autofix (fixes #11699) (#11827) (Milos Djermanovic)cb475fdFix: Cache file error handling on read-only file system. (fixes #11945) (#11946) (Cuki)89412c3Docs: Fixed a typo (fixes #11999) (#12000) (Eddie Olson)6669f78Fix: --init with Vue.js failed (fixes #11970) (#11985) (Toru Nagashima)93633c2Upgrade: Upgrade lodash dependency (fixes #11992) (#11994) (Cyd La Luz)776dae7Docs: fix wrong Node.js version in getting started (#11993) (Toru Nagashima)4448261Docs: some typos and optimization points (#11960) (Jason Lee)2a10856Chore: Add temporary test files to .gitignore (#11978) (Milos Djermanovic)d83b233Chore: update path for release bundles (#11977) (Kai Cataldo)1fb3620Fix: creating of enabledGlobals object without prototype (fixes #11929) (#11935) (finico)c2f2db9Docs: Replace global true and false with writable and readonly in rules (#11956) (Milos Djermanovic)19335b8Fix: actual messageId and expected messageId are switched in rule tester (#11928) (Milos Djermanovic)8b216e0Docs: Fix incorrect example comments for unicode-bom rule (fixes #11937) (#11938) (Brandon Yeager)cc3885bChore: add v8-compile-cache to speed up instantiation time (#11921) (薛定谔的猫)d8f2688Upgrade: deps (#11904) (薛定谔的猫)e5f1cccDocs: add 'stricter rule config validating' in migrating docs (#11905) (薛定谔的猫)v6.0.1Compare Source
b5bde06Fix: --rulesdir option didn't work (fixes #11888) (#11890) (Toru Nagashima)13f0418Fix: improve error message on --print-config (fixes #11874) (#11885) (Toru Nagashima)056c2aaFix: improve diagnostics for shareable-config-missing errors (#11880) (Teddy Katz)566b7aaDocs: Update no-confusing-arrow with the new default option (#11886) (Yuping Zuo)d07f3faFix: CLIEngine#getRules() contains plugin rules (fixes #11871) (#11872) (Toru Nagashima)21f4a80Docs: Fix inconsistent linking in migration guide (#11881) (Teddy Katz)f3a0774Docs: Fix typo in 6.0.0 migration guide (#11870) (Kevin Partington)v6.0.0Compare Source
81aa06bUpgrade: [email protected] (#11869) (Teddy Katz)5f022bcFix: no-else-return autofix produces name collisions (fixes #11069) (#11867) (Milos Djermanovic)ded9548Fix: multiline-comment-style incorrect message (#11864) (golopot)cad074dDocs: Add JSHint W047 compat to no-floating-decimal (#11861) (Timo Tijhof)41f6304Upgrade: sinon (#11855) (Toru Nagashima)167ce87Chore: remove unuseable profile command (#11854) (Toru Nagashima)c844c6fFix: max-len properly ignore trailing comments (fixes #11838) (#11841) (ZYSzys)1b5661aFix: no-var should not fix variables named 'let' (fixes #11830) (#11832) (Milos Djermanovic)4d75956Build: CI with Azure Pipelines (#11845) (Toru Nagashima)1db3462Chore: rm superfluous argument & fix perf-multifiles-targets (#11834) (薛定谔的猫)c57a4a4Upgrade: @babel/polyfill => core-js v3 (#11833) (薛定谔的猫)65faa04Docs: Clarify prefer-destructuring array/object difference (fixes #9970) (#11851) (Oliver Sieweke)81c3823Fix: require-atomic-updates reports parameters (fixes #11723) (#11774) (Toru Nagashima)aef8ea1Sponsors: Sync README with website (ESLint Jenkins)v5.16.0Compare Source
dfef227Build: gensite passes rulesMeta to formatter rendering (#11567) (Kevin Partington)c06d38cFix: Allow HTML formatter to handle no meta data (#11566) (Ilya Volodin)87a5c03Docs:func-style: clarify whenallowArrowFunctionsis used (#11548) (Oliver Joseph Ash)bc3e427Update: pass rule meta to formatters RFC 10 (#11551) (Chris Meyer)b452f27Chore: Update README to pull in reviewer data (#11506) (Nicholas C. Zakas)afe3d25Upgrade: Bump js-yaml dependency to fix Denial of Service vulnerability (#11550) (Vernon de Goede)4fe7eb7Chore: use nyc instead of istanbul (#11532) (Toru Nagashima)f16af43Chore: fix formatters/table test (#11534) (Toru Nagashima)78358a8Docs: fix duplicate punctuation in CLI docs (#11528) (Teddy Katz)v5.15.3Compare Source
71adc66Fix: avoid moving comments in implicit-arrow-linebreak (fixes #11521) (#11522) (Teddy Katz)1f715a2Chore: make test-case-property-ordering reasonable (#11511) (Toru Nagashima)v5.15.2Compare Source
29dbca7Fix: implicit-arrow-linebreak adds extra characters (fixes #11268) (#11407) (Mark de Dios)5d2083fUpgrade: [email protected] (#11513) (Teddy Katz)a5dae7cFix: Empty glob pattern incorrectly expands to "/**" (#11476) (Ben Chauvette)448e8daChore: improve crash reporting (fixes #11304) (#11463) (Alex Zherdev)0f56dc6Chore: make config validator params more consistent (#11435) (薛定谔的猫)d6c1122Docs: Add working groups to maintainer guide (#11400) (Nicholas C. Zakas)5fdb4d3Build: compile deps to ES5 when generating browser file (fixes #11504) (#11505) (Teddy Katz)06fa165Build: update CI testing configuration (#11500) (Reece Dunham)956e883Docs: Fix example in no-restricted-modules docs (#11454) (Paul O’Shannessy)2c7431dDocs: fix json schema example dead link (#11498) (kazuya kawaguchi)e7266c2Docs: Fix invalid JSON in "Specifying Parser Options" (#11492) (Mihira Jayasekera)6693161Sponsors: Sync README with website (ESLint Jenkins)62fee4aChore: eslint-config-eslint enable comma-dangle functions: "never" (#11434) (薛定谔的猫)34a5382Build: copy bundled espree to website directory (#11478) (Pig Fang)f078f9aChore: use "file:" dependencies for internal rules/config (#11465) (Teddy Katz)0756128Docs: Addvisualstudioto formatter list (#11480) (Patrick Eriksson)44de9d7Docs: Fix typo in func-name-matching rule docs (#11484) (Iulian Onofrei)v5.15.1Compare Source
fe1a892Build: bundle espree (fixes eslint/eslint.github.io#546) (#11467) (薛定谔的猫)458053bFix: avoid creating invalid regex in no-warning-comments (fixes #11471) (#11472) (Teddy Katz)v5.15.0Compare Source
4088c6cBuild: Remove path.resolve in webpack build (#11462) (Kevin Partington)ec59ec0New: add rule "prefer-named-capture-group" (fixes #11381) (#11392) (Pig Fang)a44f750Upgrade: [email protected] (#11461) (Teddy Katz)d3ce611Sponsors: Sync README with website (ESLint Jenkins)ee88475Chore: add utils for rule tests (#11453) (薛定谔的猫)d4824e4Sponsors: Sync README with website (ESLint Jenkins)6489518Fix: no-extra-parens crash when code is "((let))" (#11444) (Teddy Katz)9d20de2Sponsors: Sync README with website (ESLint Jenkins)3f14de4Sponsors: Sync README with website (ESLint Jenkins)3d6c770Sponsors: Sync README with website (ESLint Jenkins)de5cbc5Update: remove invalid defaults from core rules (fixes #11415) (#11427) (Teddy Katz)eb0650bBuild: fix linting errors on master (#11428) (Teddy Katz)5018378Chore: enable require-unicode-regexp on ESLint codebase (#11422) (Teddy Katz)f6ba633Chore: lint all files in the repo at the same time (#11425) (Teddy Katz)8f3d717Docs: Add non-attending TSC member info (#11411) (Nicholas C. Zakas)ce0777dDocs: use more common spelling (#11417) (薛定谔的猫)b9aabe3Chore: run fuzzer along with unit tests (#11404) (Teddy Katz)db0c5e2Build: switch from browserify to webpack (fixes #11366) (#11398) (Pig Fang)v5.14.1Compare Source
1d6e639Fix: sort-keys throws Error at SpreadElement (fixes #11402) (#11403) (Krist Wongsuphasawat)v5.14.0Compare Source
85a04b3Fix: adds conditional for separateRequires in one-var (fixes #10179) (#10980) (Scott Stern)0c02932Upgrade: [email protected] (#11401) (Ilya Volodin)104ae88Docs: Update governance doc with reviewers status (#11399) (Nicholas C. Zakas)ab8ac6aFix: Support boundary spread elements in sort-keys (#11158) (Jakub Rożek)a23d197New: add allowSingleLineBlocks opt. to padded-blocks rule (fixes #7145) (#11243) (richie3366)e25e7aaFix: comma-spacing ignore comma before closing paren (fixes #11295) (#11374) (Pig Fang)a1f7c44Docs: fix space-before-blocks correct code for "classes": "never" (#11391) (PoziWorld)14f58a2Docs: fix grammar in object-curly-spacing docs (#11389) (PoziWorld)d3e9a27Docs: fix grammar in “those who says” (#11390) (PoziWorld)ea8e804Docs: Add note about support for object spread (fixes #11136) (#11395) (Steven Thomas)95aa3fdDocs: Update README team and sponsors (ESLint Jenkins)51c4972Update: Behavior of --init (fixes #11105) (#11332) (Nicholas C. Zakas)ad7a380Docs: Update README team and sponsors (ESLint Jenkins)550de1eUpdate: usedefaultkeyword in JSON schema (fixes #9929) (#11288) (Pig Fang)983c520Update: Use 'readonly' and 'writable' for globals (fixes #11359) (#11384) (Nicholas C. Zakas)f1d3a7eUpgrade: some deps (fixes #11372) (#11373) (薛定谔的猫)3e0c417Docs: Fix grammar in “there’s nothing prevent you” (#11385) (PoziWorld)de988bcDocs: Fix grammar: Spacing improve -> Spacing improves (#11386) (PoziWorld)1309dfdRRenovate configuration
📅 Schedule: "" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️ Rebasing: Whenever PR becomes conflicted, or if you modify the PR title to begin with "
rebase!".🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot. View repository job log here.