From 95f3ee023d48ab9dd5972193d9d5fdc39afa6792 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 17 Nov 2024 22:08:52 -0800
Subject: [PATCH 01/11] Bump the dependencies group across 1 directory with 2
updates (#917)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps the dependencies group with 2 updates in the / directory:
[github/codeql-action](https://github.com/github/codeql-action) and
[slackapi/slack-github-action](https://github.com/slackapi/slack-github-action).
Updates `github/codeql-action` from 3.27.1 to 3.27.4
Release notes
Sourced from github/codeql-action's
releases.
v3.27.4
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
3.27.4 - 14 Nov 2024
No user facing changes.
See the full CHANGELOG.md
for more information.
v3.27.3
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
3.27.3 - 12 Nov 2024
No user facing changes.
See the full CHANGELOG.md
for more information.
v3.27.2
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message "Invalid value 'undefined' for header
'authorization'". #2590
See the full CHANGELOG.md
for more information.
Changelog
Sourced from github/codeql-action's
changelog.
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
[UNRELEASED]
No user facing changes.
3.27.4 - 14 Nov 2024
No user facing changes.
3.27.3 - 12 Nov 2024
No user facing changes.
3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message "Invalid value 'undefined' for header
'authorization'". #2590
3.27.1 - 08 Nov 2024
- The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. #2573
- Update default CodeQL bundle version to 2.19.3. #2576
3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail
with "upload-sarif post-action step failed: Input required and not
supplied: token" when called in a composite Action that had a
different set of inputs to the ones expected by the
upload-sarif
Action. #2557
- Update default CodeQL bundle version to 2.19.2. #2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
-
Upcoming breaking change: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. #2520
-
If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.
-
Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
github/codeql-action/*@v3
by
github/codeql-action/*@v3.26.11
and
github/codeql-action/*@v2
by
github/codeql-action/*@v2.26.11
in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.
3.26.11 - 03 Oct 2024
-
Upcoming breaking change: Add support for using
actions/download-artifact@v4
to programmatically consume
CodeQL Action debug artifacts.
Starting November 30, 2024, GitHub.com customers will no
longer be able to use actions/download-artifact@v3
.
Therefore, to avoid breakage, customers who programmatically download
the CodeQL Action debug artifacts should set the
CODEQL_ACTION_ARTIFACT_V4_UPGRADE
environment variable to
true
and bump actions/download-artifact@v3
to
actions/download-artifact@v4
in their workflows. The CodeQL
Action will enable this behavior by default in early November and
workflows that have not yet bumped to
actions/download-artifact@v3
to
actions/download-artifact@v4
will begin failing then.
... (truncated)
Commits
ea9e4e3
Merge pull request #2605
from github/update-v3.27.4-3ab67a219
845ea92
Update changelog for v3.27.4
3ab67a2
Merge pull request #2597
from github/mbg/caching/output-improvements
6e3a010
Merge pull request #2583
from jsoref/use-artifact-4
1c83cd1
Upgrade actions/upload-artifact to v4
024283f
Merge pull request #2602
from github/mergeback/v3.27.3-to-main-396bb3e4
613fe96
Update checked-in dependencies
e35d4aa
Update changelog and version after v3.27.3
396bb3e
Merge pull request #2601
from github/update-v3.27.3-f04790367
2b13194
Update changelog for v3.27.3
- Additional commits viewable in compare
view
Updates `slackapi/slack-github-action` from 1.27.0 to 2.0.0
Release notes
Sourced from slackapi/slack-github-action's
releases.
Slack Send v2.0.0
YAML! And more API methods! With improved erroring! And
more!
Sending data to Slack can now be done with the YAML format, and that
data can be sent to [a Slack API method][methods] or technique
of choice with the provided payload. And additional configurations
can improve error handling or customize values between steps.
Breaking changes happen with this update and recommended migration
strategies are detailed below. Adding this step to new workflows might
prefer to follow the README
instead :books:
What's changed
Both inputs of payload variables, techniques for sending the payload,
additional configurations, and expected outputs were changed:
- Sending variables
- Breaking changes
- Enhancements
- Sending techniques
- Technique 1: Slack Workflow Builder
- Breaking changes
- Enhancements
- Technique 2: Slack API method
- Technique 3: Slack incoming webhook
- Breaking changes
- Enhancements
- Additional configurations
- Expected outputs
- Breaking changes
- Enhancements
... (truncated)
Commits
485a9d4
Release
e598089
chore(release): tag version 2.0.0
e9b3a6b
feat!: wrap payloads to send to a "method" with
"token" or "webhook" (#333)
74ae656
chore(release): tag version 1.27.1
bd0e281
build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 (#355)
e127529
build(deps): bump @actions/core
from 1.10.1 to 1.11.1 (#354)
6b51022
build(deps-dev): bump eslint-plugin-jsdoc from 50.3.1 to 50.4.3 (#353)
555e4ad
build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 (#352)
8d4500e
build(deps): bump @slack/web-api
from 7.5.0 to 7.7.0 (#351)
d0dece6
build(deps-dev): bump mocha from 10.7.3 to 10.8.2 (#350)
- Additional commits viewable in compare
view
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore ` will
remove the ignore condition of the specified dependency and ignore
conditions
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/codeql.yml | 6 +++---
.github/workflows/scorecard.yml | 2 +-
.github/workflows/upload_results.reusable.yaml | 8 ++++----
3 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4c9909926..cddb646fd 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -34,7 +34,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+ uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
# Override language selection by uncommenting this and choosing your languages
with:
languages: javascript
@@ -42,7 +42,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
# If this step fails, then you should remove it and run the build manually (see below).
- name: Autobuild
- uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+ uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
# ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -56,4 +56,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+ uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 214b67ac4..b21157c95 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: Upload to code-scanning
- uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+ uses: github/codeql-action/upload-sarif@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
with:
sarif_file: results.sarif
diff --git a/.github/workflows/upload_results.reusable.yaml b/.github/workflows/upload_results.reusable.yaml
index 728a403b4..0593f737c 100644
--- a/.github/workflows/upload_results.reusable.yaml
+++ b/.github/workflows/upload_results.reusable.yaml
@@ -98,7 +98,7 @@ jobs:
echo "::endgroup::"
- name: Slack Notification For Missing Artifacts
- uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0
+ uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
if:
steps.download-ubuntu.outcome == 'failure' || steps.download-macos.outcome == 'failure' ||
steps.download-windows.outcome == 'failure'
@@ -181,7 +181,7 @@ jobs:
# Slack notifications
- name: Slack Notification For Failures
- uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0
+ uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
if: always() && steps.parse.outputs.failures == 'true'
with:
channel-id: ${{ env.SLACK_CHANNEL_ID }}
@@ -190,7 +190,7 @@ jobs:
SLACK_BOT_TOKEN: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
- name: Slack Notification For Staging Upload Failure
- uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0
+ uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
if: inputs.upload-validated-versions == true && steps.upload-staging.outcome == 'failure'
with:
channel-id: ${{ env.SLACK_CHANNEL_ID }}
@@ -211,7 +211,7 @@ jobs:
SLACK_BOT_TOKEN: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
- name: Slack Notification For Prod Upload Failure
- uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0
+ uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
if: inputs.upload-validated-versions == true && steps.upload-prod.outcome == 'failure'
with:
channel-id: ${{ env.SLACK_CHANNEL_ID }}
From cc2d9d9875fd6cb33ce5bf33cbe33e01b48c01fa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 17 Nov 2024 22:09:00 -0800
Subject: [PATCH 02/11] Bump the dependencies group across 1 directory with 6
updates (#918)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps the dependencies group with 6 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.13.0` | `8.14.0` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.13.0` | `8.14.0` |
| [eslint](https://github.com/eslint/eslint) | `8.57.0` | `9.15.0` |
|
[eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x)
| `4.4.0` | `4.4.2` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n)
| `17.13.1` | `17.13.2` |
|
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
| `8.13.0` | `8.14.0` |
Updates `@typescript-eslint/eslint-plugin` from 8.13.0 to 8.14.0
Release notes
Sourced from @typescript-eslint/eslint-plugin
's
releases.
v8.14.0
8.14.0 (2024-11-11)
🚀 Features
- eslint-plugin: [no-confusing-void-expression] add
an option to ignore voidvoid (#10067)
- eslint-plugin: [await-thenable] report unnecessary
await using
statements (#10209)
🩹 Fixes
- deps: update dependency eslint to v9.14.0 (#10309)
- deps: update docusaurus monorepo to v3.6.0 (#10319)
- eslint-plugin: [no-unnecessary-condition] improve
error message for literal comparisons (#10194)
- eslint-plugin: [no-misused-promises] improve report
loc for methods (#10216)
- scope-manager: fix asserted increments not being
marked as write references (#10271)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Changelog
Sourced from @typescript-eslint/eslint-plugin
's
changelog.
8.14.0 (2024-11-11)
🚀 Features
- eslint-plugin: [await-thenable] report unnecessary
await using
statements (#10209)
- eslint-plugin: [no-confusing-void-expression] add
an option to ignore voidvoid (#10067)
🩹 Fixes
- scope-manager: fix asserted increments not being
marked as write references (#10271)
- eslint-plugin: [no-misused-promises] improve report
loc for methods (#10216)
- eslint-plugin: [no-unnecessary-condition] improve
error message for literal comparisons (#10194)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Commits
16fba0a
chore(release): publish 8.14.0
42d275c
fix(scope-manager): fix asserted increments not being marked as write
referen...
d27a9ac
fix(eslint-plugin): [no-misused-promises] improve report loc for methods
(#10...
c13b6b4
chore: fix lint and build website errors (#10288)
5b2ebcd
feat(eslint-plugin): [await-thenable] report unnecessary await
using
statem...
22f7f25
fix(eslint-plugin): [no-unnecessary-condition] improve error message for
lite...
e2e9ffc
feat(eslint-plugin): [no-confusing-void-expression] add an option to
ignore v...
- See full diff in compare
view
Updates `@typescript-eslint/parser` from 8.13.0 to 8.14.0
Release notes
Sourced from @typescript-eslint/parser
's
releases.
v8.14.0
8.14.0 (2024-11-11)
🚀 Features
- eslint-plugin: [no-confusing-void-expression] add
an option to ignore voidvoid (#10067)
- eslint-plugin: [await-thenable] report unnecessary
await using
statements (#10209)
🩹 Fixes
- deps: update dependency eslint to v9.14.0 (#10309)
- deps: update docusaurus monorepo to v3.6.0 (#10319)
- eslint-plugin: [no-unnecessary-condition] improve
error message for literal comparisons (#10194)
- eslint-plugin: [no-misused-promises] improve report
loc for methods (#10216)
- scope-manager: fix asserted increments not being
marked as write references (#10271)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Changelog
Sourced from @typescript-eslint/parser
's
changelog.
8.14.0 (2024-11-11)
This was a version bump only for parser to align it with other
projects, there were no code changes.
You can read about our versioning
strategy and releases
on our website.
Commits
Updates `eslint` from 8.57.0 to 9.15.0
Release notes
Sourced from eslint's
releases.
v9.15.0
Features
01557ce
feat: Implement Language#normalizeLanguageOptions() (#19104)
(Nicholas C. Zakas)
2edc0e2
feat: add meta.defaultOptions (#17656)
(Josh Goldberg ✨)
bdec50e
feat: fix no-useless-computed-key
false negative with
__proto__
(#19123)
(Milos Djermanovic)
3087c9e
feat: add meta
object to @eslint/js
plugin (#19095)
(Francesco Trotta)
Bug Fixes
fd33f13
fix: update types for no-restricted-imports
rule (#19060)
(Nitin Kumar)
bd35098
fix: switch away from Node.js node:assert and AssertionError (#19082)
(Josh Goldberg ✨)
9db5b15
fix: unsafe report for no-lonely-if
(#19087)
(Abraham Guo)
68fa497
fix: ignore files on a different drive on Windows (#19069)
(Francesco Trotta)
4ce625a
fix: upgrade @humanwhocodes/retry
@0
.4.1 to avoid debug logs
(#19102)
(Milos Djermanovic)
Documentation
d927920
docs: fix styles in no-js mode (#18916)
(Tanuj Kanti)
09bc2a8
docs: Update README (GitHub Actions Bot)
39089c8
docs: add no-useless-computed-key
examples with object
patterns (#19109)
(Milos Djermanovic)
895c60f
docs: add missing messageId property and suggestion properties (#19122)
(fnx)
298625e
docs: Change CLI -c to use flat config (#19103)
(Nicholas C. Zakas)
522d8a3
docs: add deprecation on indent
, quotes
and
semi
rule types (#19090)
(Marco Pasqualetti)
Chores
2967d91
chore: upgrade @eslint/js
@9
.15.0 (#19133)
(Milos Djermanovic)
b441bee
chore: package.json update for @eslint/js
release
(Jenkins)
7d6bf4a
chore: upgrade @eslint/core
@0
.9.0 (#19131)
(Milos Djermanovic)
902e707
chore: upgrade @eslint/plugin-kit
@0
.2.3 (#19130)
(Milos Djermanovic)
5ff6c1d
chore: bump cross-spawn (#19125)
(Ian Bobinac)
cceccc7
chore: update dependency @eslint/json
to ^0.6.0 (#19117)
(renovate[bot])
0da3f73
chore: update algolia referrer (#19114)
(Strek)
4f08332
ci: unpin trunk-io/trunk-action
(#19108)
(Francesco Trotta)
6b75683
perf: optimize text-table
by replacing regex with
trimEnd
(#19061)
(Nitin Kumar)
v9.14.0
Features
3fa009f
feat: add support for Import Attributes and RegExp Modifiers (#19076)
(Milos Djermanovic)
b0faee3
feat: add types for the @eslint/js
package (#19010)
(Nitin Kumar)
Bug Fixes
24d0172
fix: enable retry concurrency limit for readFile() (#19077)
(Nicholas C. Zakas)
b442067
fix: Don't crash when directory is deleted during traversal. (#19067)
(Nicholas C. Zakas)
d474443
fix: avoid call stack overflow while processing globs (#19035)
(Livia Medeiros)
Documentation
151c965
docs: update context.languageOptions.parser
description (#19084)
(Nitin Kumar)
dc34f94
docs: Update README (GitHub Actions Bot)
f16e846
docs: Update README (GitHub Actions Bot)
ee0a77e
docs: change link from @types/eslint
to lib/types (#19049)
(Karl Horky)
50f03a1
docs: Clarify global ignores in config migration guide (#19032)
(Milos Djermanovic)
... (truncated)
Changelog
Sourced from eslint's
changelog.
v9.15.0 - November 15, 2024
2967d91
chore: upgrade @eslint/js
@9
.15.0 (#19133)
(Milos Djermanovic)
b441bee
chore: package.json update for @eslint/js
release
(Jenkins)
7d6bf4a
chore: upgrade @eslint/core
@0
.9.0 (#19131)
(Milos Djermanovic)
01557ce
feat: Implement Language#normalizeLanguageOptions() (#19104)
(Nicholas C. Zakas)
902e707
chore: upgrade @eslint/plugin-kit
@0
.2.3 (#19130)
(Milos Djermanovic)
2edc0e2
feat: add meta.defaultOptions (#17656)
(Josh Goldberg ✨)
fd33f13
fix: update types for no-restricted-imports
rule (#19060)
(Nitin Kumar)
5ff6c1d
chore: bump cross-spawn (#19125)
(Ian Bobinac)
d927920
docs: fix styles in no-js mode (#18916)
(Tanuj Kanti)
bdec50e
feat: fix no-useless-computed-key
false negative with
__proto__
(#19123)
(Milos Djermanovic)
09bc2a8
docs: Update README (GitHub Actions Bot)
bd35098
fix: switch away from Node.js node:assert and AssertionError (#19082)
(Josh Goldberg ✨)
39089c8
docs: add no-useless-computed-key
examples with object
patterns (#19109)
(Milos Djermanovic)
895c60f
docs: add missing messageId property and suggestion properties (#19122)
(fnx)
cceccc7
chore: update dependency @eslint/json
to ^0.6.0 (#19117)
(renovate[bot])
0da3f73
chore: update algolia referrer (#19114)
(Strek)
9db5b15
fix: unsafe report for no-lonely-if
(#19087)
(Abraham Guo)
68fa497
fix: ignore files on a different drive on Windows (#19069)
(Francesco Trotta)
4f08332
ci: unpin trunk-io/trunk-action
(#19108)
(Francesco Trotta)
3087c9e
feat: add meta
object to @eslint/js
plugin (#19095)
(Francesco Trotta)
298625e
docs: Change CLI -c to use flat config (#19103)
(Nicholas C. Zakas)
4ce625a
fix: upgrade @humanwhocodes/retry
@0
.4.1 to avoid debug logs
(#19102)
(Milos Djermanovic)
522d8a3
docs: add deprecation on indent
, quotes
and
semi
rule types (#19090)
(Marco Pasqualetti)
6b75683
perf: optimize text-table
by replacing regex with
trimEnd
(#19061)
(Nitin Kumar)
v9.14.0 - November 1, 2024
f36cb16
chore: upgrade @eslint/js
@9
.14.0 (#19086)
(Milos Djermanovic)
28be447
chore: package.json update for @eslint/js
release
(Jenkins)
24d0172
fix: enable retry concurrency limit for readFile() (#19077)
(Nicholas C. Zakas)
3fa009f
feat: add support for Import Attributes and RegExp Modifiers (#19076)
(Milos Djermanovic)
b0faee3
feat: add types for the @eslint/js
package (#19010)
(Nitin Kumar)
151c965
docs: update context.languageOptions.parser
description (#19084)
(Nitin Kumar)
dc34f94
docs: Update README (GitHub Actions Bot)
f48a2a0
test: add no-invalid-regexp
tests with RegExp Modifiers (#19075)
(Milos Djermanovic)
37c9177
build: update @wdio/*
dependencies (#19068)
(Francesco Trotta)
b442067
fix: Don't crash when directory is deleted during traversal. (#19067)
(Nicholas C. Zakas)
35a8858
build: exclude flawed dendency versions (#19065)
(Francesco Trotta)
425202e
perf: Fix caching in config loaders (#19042)
(Milos Djermanovic)
3d44b3c
ci: run tests in Node.js 23 (#19055)
(Francesco Trotta)
f16e846
docs: Update README (GitHub Actions Bot)
ee0a77e
docs: change link from @types/eslint
to lib/types (#19049)
(Karl Horky)
d474443
fix: avoid call stack overflow while processing globs (#19035)
(Livia Medeiros)
7259627
test: ensure tmp directory cleanup in
check-emfile-handling.js
(#19036)
(Livia Medeiros)
50f03a1
docs: Clarify global ignores in config migration guide (#19032)
(Milos Djermanovic)
v9.13.0 - October 18, 2024
... (truncated)
Commits
Updates `eslint-plugin-import-x` from 4.4.0 to 4.4.2
Release notes
Sourced from eslint-plugin-import-x's
releases.
v4.4.2
Patch Changes
- #181
cc4ee65
Thanks @SukkaW
! -
Fix #144,
read proper sourceType
for both eslint flat config and
legacy eslintrc config.
Changelog
Sourced from eslint-plugin-import-x's
changelog.
4.4.2
Patch Changes
- #181
cc4ee65
Thanks @SukkaW
! -
Fix #144,
read proper sourceType
for both eslint flat config and
legacy eslintrc config.
4.4.1
Patch Changes
Commits
Updates `eslint-plugin-n` from 17.13.1 to 17.13.2
Release notes
Sourced from eslint-plugin-n's
releases.
v17.13.2
🩹 Fixes
- no-missing-require: handle multiple resolvePaths
(#383)
(df6ad2a)
Changelog
Sourced from eslint-plugin-n's
changelog.
🩹 Fixes
- no-missing-require: handle multiple resolvePaths
(#383)
(df6ad2a)
Commits
Updates `typescript-eslint` from 8.13.0 to 8.14.0
Release notes
Sourced from typescript-eslint's
releases.
v8.14.0
8.14.0 (2024-11-11)
🚀 Features
- eslint-plugin: [no-confusing-void-expression] add
an option to ignore voidvoid (#10067)
- eslint-plugin: [await-thenable] report unnecessary
await using
statements (#10209)
🩹 Fixes
- deps: update dependency eslint to v9.14.0 (#10309)
- deps: update docusaurus monorepo to v3.6.0 (#10319)
- eslint-plugin: [no-unnecessary-condition] improve
error message for literal comparisons (#10194)
- eslint-plugin: [no-misused-promises] improve report
loc for methods (#10216)
- scope-manager: fix asserted increments not being
marked as write references (#10271)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Changelog
Sourced from typescript-eslint's
changelog.
8.14.0 (2024-11-11)
This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.
You can read about our versioning
strategy and releases
on our website.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore ` will
remove the ignore condition of the specified dependency and ignore
conditions
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
package-lock.json | 517 +++++++++++++++++++++++++++-------------------
package.json | 12 +-
2 files changed, 310 insertions(+), 219 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index ae9be6871..2f46c2a59 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,17 +18,17 @@
"@types/jest-specific-snapshot": "^0.5.9",
"@types/node": "^22.9.0",
"@types/semver": "^7.5.8",
- "@typescript-eslint/eslint-plugin": "^8.13.0",
- "@typescript-eslint/parser": "^8.13.0",
+ "@typescript-eslint/eslint-plugin": "^8.14.0",
+ "@typescript-eslint/parser": "^8.14.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "^8.57.0",
+ "eslint": "^9.15.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
- "eslint-plugin-import-x": "^4.4.0",
+ "eslint-plugin-import-x": "^4.4.2",
"eslint-plugin-jest": "^28.9.0",
- "eslint-plugin-n": "^17.13.1",
+ "eslint-plugin-n": "^17.13.2",
"eslint-plugin-prettier": "^5.2.1",
"eslint-plugin-simple-import-sort": "^12.1.1",
"fast-sort": "^3.4.1",
@@ -41,7 +41,7 @@
"ts-node": "^10.9.2",
"tsconfig-paths": "^4.1.2",
"typescript": "^5.6.3",
- "typescript-eslint": "^8.13.0",
+ "typescript-eslint": "^8.14.0",
"yaml": "^2.6.0"
},
"engines": {
@@ -657,15 +657,39 @@
"node": "^12.0.0 || ^14.0.0 || >=16.0.0"
}
},
+ "node_modules/@eslint/config-array": {
+ "version": "0.19.0",
+ "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.0.tgz",
+ "integrity": "sha512-zdHg2FPIFNKPdcHWtiNT+jEFCHYVplAXRDlQDyqy0zGx/q2parwh7brGJSiTxRk/TSMkbM//zt/f5CHgyTyaSQ==",
+ "dev": true,
+ "dependencies": {
+ "@eslint/object-schema": "^2.1.4",
+ "debug": "^4.3.1",
+ "minimatch": "^3.1.2"
+ },
+ "engines": {
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+ }
+ },
+ "node_modules/@eslint/core": {
+ "version": "0.9.0",
+ "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.9.0.tgz",
+ "integrity": "sha512-7ATR9F0e4W85D/0w7cU0SNj7qkAexMG+bAHEZOjo9akvGuhHE2m7umzWzfnpa0XAg5Kxc1BWmtPMV67jJ+9VUg==",
+ "dev": true,
+ "engines": {
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+ }
+ },
"node_modules/@eslint/eslintrc": {
- "version": "2.1.4",
+ "version": "3.2.0",
+ "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.2.0.tgz",
+ "integrity": "sha512-grOjVNN8P3hjJn/eIETF1wwd12DdnwFDoyceUJLYYdkpbwq3nLi+4fqrTAONx7XDALqlL220wC/RHSC/QTI/0w==",
"dev": true,
- "license": "MIT",
"dependencies": {
"ajv": "^6.12.4",
"debug": "^4.3.2",
- "espree": "^9.6.0",
- "globals": "^13.19.0",
+ "espree": "^10.0.1",
+ "globals": "^14.0.0",
"ignore": "^5.2.0",
"import-fresh": "^3.2.1",
"js-yaml": "^4.1.0",
@@ -673,31 +697,75 @@
"strip-json-comments": "^3.1.1"
},
"engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
},
"funding": {
"url": "https://opencollective.com/eslint"
}
},
"node_modules/@eslint/js": {
- "version": "8.57.0",
+ "version": "9.15.0",
+ "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.15.0.tgz",
+ "integrity": "sha512-tMTqrY+EzbXmKJR5ToI8lxu7jaN5EdmrBFJpQk5JmSlyLsx6o4t27r883K5xsLuCYCpfKBCGswMSWXsM+jB7lg==",
"dev": true,
- "license": "MIT",
"engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
}
},
- "node_modules/@humanwhocodes/config-array": {
- "version": "0.11.14",
+ "node_modules/@eslint/object-schema": {
+ "version": "2.1.4",
+ "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.4.tgz",
+ "integrity": "sha512-BsWiH1yFGjXXS2yvrf5LyuoSIIbPrGUWob917o+BTKuZ7qJdxX8aJLRxs1fS9n6r7vESrq1OUqb68dANcFXuQQ==",
+ "dev": true,
+ "engines": {
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+ }
+ },
+ "node_modules/@eslint/plugin-kit": {
+ "version": "0.2.3",
+ "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.3.tgz",
+ "integrity": "sha512-2b/g5hRmpbb1o4GnTZax9N9m0FXzz9OV42ZzI4rDDMDuHUqigAiQCEWChBWCY4ztAGVRjoWT19v0yMmc5/L5kA==",
"dev": true,
- "license": "Apache-2.0",
"dependencies": {
- "@humanwhocodes/object-schema": "^2.0.2",
- "debug": "^4.3.1",
- "minimatch": "^3.0.5"
+ "levn": "^0.4.1"
},
"engines": {
- "node": ">=10.10.0"
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+ }
+ },
+ "node_modules/@humanfs/core": {
+ "version": "0.19.1",
+ "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.1.tgz",
+ "integrity": "sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==",
+ "dev": true,
+ "engines": {
+ "node": ">=18.18.0"
+ }
+ },
+ "node_modules/@humanfs/node": {
+ "version": "0.16.6",
+ "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.6.tgz",
+ "integrity": "sha512-YuI2ZHQL78Q5HbhDiBA1X4LmYdXCKCMQIfw0pw7piHJwyREFebJUvrQN4cMssyES6x+vfUbx1CIpaQUKYdQZOw==",
+ "dev": true,
+ "dependencies": {
+ "@humanfs/core": "^0.19.1",
+ "@humanwhocodes/retry": "^0.3.0"
+ },
+ "engines": {
+ "node": ">=18.18.0"
+ }
+ },
+ "node_modules/@humanfs/node/node_modules/@humanwhocodes/retry": {
+ "version": "0.3.1",
+ "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.3.1.tgz",
+ "integrity": "sha512-JBxkERygn7Bv/GbN5Rv8Ul6LVknS+5Bp6RgDC/O8gEBU/yeH5Ui5C/OlWrTb6qct7LjjfT6Re2NxB0ln0yYybA==",
+ "dev": true,
+ "engines": {
+ "node": ">=18.18"
+ },
+ "funding": {
+ "type": "github",
+ "url": "https://github.com/sponsors/nzakas"
}
},
"node_modules/@humanwhocodes/module-importer": {
@@ -712,10 +780,18 @@
"url": "https://github.com/sponsors/nzakas"
}
},
- "node_modules/@humanwhocodes/object-schema": {
- "version": "2.0.2",
+ "node_modules/@humanwhocodes/retry": {
+ "version": "0.4.1",
+ "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.1.tgz",
+ "integrity": "sha512-c7hNEllBlenFTHBky65mhq8WD2kbN9Q6gk0bTk8lSBvc554jpXSkST1iePudpt7+A/AQvuHs9EMqjHDXMY1lrA==",
"dev": true,
- "license": "BSD-3-Clause"
+ "engines": {
+ "node": ">=18.18"
+ },
+ "funding": {
+ "type": "github",
+ "url": "https://github.com/sponsors/nzakas"
+ }
},
"node_modules/@istanbuljs/load-nyc-config": {
"version": "1.1.0",
@@ -1317,6 +1393,12 @@
"@types/ms": "*"
}
},
+ "node_modules/@types/estree": {
+ "version": "1.0.6",
+ "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.6.tgz",
+ "integrity": "sha512-AYnb1nQyY49te+VRAVgmzfcgjYS91mY5P0TKUDCLEM+gNnA+3T6rWITXRLYCpahpqSQbN5cE+gHpnPyXjHWxcw==",
+ "dev": true
+ },
"node_modules/@types/graceful-fs": {
"version": "4.1.5",
"dev": true,
@@ -1364,6 +1446,12 @@
"@types/jest": "*"
}
},
+ "node_modules/@types/json-schema": {
+ "version": "7.0.15",
+ "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
+ "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==",
+ "dev": true
+ },
"node_modules/@types/json5": {
"version": "0.0.29",
"dev": true,
@@ -1408,16 +1496,16 @@
"license": "MIT"
},
"node_modules/@typescript-eslint/eslint-plugin": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.13.0.tgz",
- "integrity": "sha512-nQtBLiZYMUPkclSeC3id+x4uVd1SGtHuElTxL++SfP47jR0zfkZBJHc+gL4qPsgTuypz0k8Y2GheaDYn6Gy3rg==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.14.0.tgz",
+ "integrity": "sha512-tqp8H7UWFaZj0yNO6bycd5YjMwxa6wIHOLZvWPkidwbgLCsBMetQoGj7DPuAlWa2yGO3H48xmPwjhsSPPCGU5w==",
"dev": true,
"dependencies": {
"@eslint-community/regexpp": "^4.10.0",
- "@typescript-eslint/scope-manager": "8.13.0",
- "@typescript-eslint/type-utils": "8.13.0",
- "@typescript-eslint/utils": "8.13.0",
- "@typescript-eslint/visitor-keys": "8.13.0",
+ "@typescript-eslint/scope-manager": "8.14.0",
+ "@typescript-eslint/type-utils": "8.14.0",
+ "@typescript-eslint/utils": "8.14.0",
+ "@typescript-eslint/visitor-keys": "8.14.0",
"graphemer": "^1.4.0",
"ignore": "^5.3.1",
"natural-compare": "^1.4.0",
@@ -1441,15 +1529,15 @@
}
},
"node_modules/@typescript-eslint/parser": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.13.0.tgz",
- "integrity": "sha512-w0xp+xGg8u/nONcGw1UXAr6cjCPU1w0XVyBs6Zqaj5eLmxkKQAByTdV/uGgNN5tVvN/kKpoQlP2cL7R+ajZZIQ==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.14.0.tgz",
+ "integrity": "sha512-2p82Yn9juUJq0XynBXtFCyrBDb6/dJombnz6vbo6mgQEtWHfvHbQuEa9kAOVIt1c9YFwi7H6WxtPj1kg+80+RA==",
"dev": true,
"dependencies": {
- "@typescript-eslint/scope-manager": "8.13.0",
- "@typescript-eslint/types": "8.13.0",
- "@typescript-eslint/typescript-estree": "8.13.0",
- "@typescript-eslint/visitor-keys": "8.13.0",
+ "@typescript-eslint/scope-manager": "8.14.0",
+ "@typescript-eslint/types": "8.14.0",
+ "@typescript-eslint/typescript-estree": "8.14.0",
+ "@typescript-eslint/visitor-keys": "8.14.0",
"debug": "^4.3.4"
},
"engines": {
@@ -1469,13 +1557,13 @@
}
},
"node_modules/@typescript-eslint/scope-manager": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.13.0.tgz",
- "integrity": "sha512-XsGWww0odcUT0gJoBZ1DeulY1+jkaHUciUq4jKNv4cpInbvvrtDoyBH9rE/n2V29wQJPk8iCH1wipra9BhmiMA==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.14.0.tgz",
+ "integrity": "sha512-aBbBrnW9ARIDn92Zbo7rguLnqQ/pOrUguVpbUwzOhkFg2npFDwTgPGqFqE0H5feXcOoJOfX3SxlJaKEVtq54dw==",
"dev": true,
"dependencies": {
- "@typescript-eslint/types": "8.13.0",
- "@typescript-eslint/visitor-keys": "8.13.0"
+ "@typescript-eslint/types": "8.14.0",
+ "@typescript-eslint/visitor-keys": "8.14.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1486,13 +1574,13 @@
}
},
"node_modules/@typescript-eslint/type-utils": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.13.0.tgz",
- "integrity": "sha512-Rqnn6xXTR316fP4D2pohZenJnp+NwQ1mo7/JM+J1LWZENSLkJI8ID8QNtlvFeb0HnFSK94D6q0cnMX6SbE5/vA==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.14.0.tgz",
+ "integrity": "sha512-Xcz9qOtZuGusVOH5Uk07NGs39wrKkf3AxlkK79RBK6aJC1l03CobXjJbwBPSidetAOV+5rEVuiT1VSBUOAsanQ==",
"dev": true,
"dependencies": {
- "@typescript-eslint/typescript-estree": "8.13.0",
- "@typescript-eslint/utils": "8.13.0",
+ "@typescript-eslint/typescript-estree": "8.14.0",
+ "@typescript-eslint/utils": "8.14.0",
"debug": "^4.3.4",
"ts-api-utils": "^1.3.0"
},
@@ -1510,9 +1598,9 @@
}
},
"node_modules/@typescript-eslint/types": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.13.0.tgz",
- "integrity": "sha512-4cyFErJetFLckcThRUFdReWJjVsPCqyBlJTi6IDEpc1GWCIIZRFxVppjWLIMcQhNGhdWJJRYFHpHoDWvMlDzng==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.14.0.tgz",
+ "integrity": "sha512-yjeB9fnO/opvLJFAsPNYlKPnEM8+z4og09Pk504dkqonT02AyL5Z9SSqlE0XqezS93v6CXn49VHvB2G7XSsl0g==",
"dev": true,
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1523,13 +1611,13 @@
}
},
"node_modules/@typescript-eslint/typescript-estree": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.13.0.tgz",
- "integrity": "sha512-v7SCIGmVsRK2Cy/LTLGN22uea6SaUIlpBcO/gnMGT/7zPtxp90bphcGf4fyrCQl3ZtiBKqVTG32hb668oIYy1g==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.14.0.tgz",
+ "integrity": "sha512-OPXPLYKGZi9XS/49rdaCbR5j/S14HazviBlUQFvSKz3npr3NikF+mrgK7CFVur6XEt95DZp/cmke9d5i3vtVnQ==",
"dev": true,
"dependencies": {
- "@typescript-eslint/types": "8.13.0",
- "@typescript-eslint/visitor-keys": "8.13.0",
+ "@typescript-eslint/types": "8.14.0",
+ "@typescript-eslint/visitor-keys": "8.14.0",
"debug": "^4.3.4",
"fast-glob": "^3.3.2",
"is-glob": "^4.0.3",
@@ -1575,15 +1663,15 @@
}
},
"node_modules/@typescript-eslint/utils": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.13.0.tgz",
- "integrity": "sha512-A1EeYOND6Uv250nybnLZapeXpYMl8tkzYUxqmoKAWnI4sei3ihf2XdZVd+vVOmHGcp3t+P7yRrNsyyiXTvShFQ==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.14.0.tgz",
+ "integrity": "sha512-OGqj6uB8THhrHj0Fk27DcHPojW7zKwKkPmHXHvQ58pLYp4hy8CSUdTKykKeh+5vFqTTVmjz0zCOOPKRovdsgHA==",
"dev": true,
"dependencies": {
"@eslint-community/eslint-utils": "^4.4.0",
- "@typescript-eslint/scope-manager": "8.13.0",
- "@typescript-eslint/types": "8.13.0",
- "@typescript-eslint/typescript-estree": "8.13.0"
+ "@typescript-eslint/scope-manager": "8.14.0",
+ "@typescript-eslint/types": "8.14.0",
+ "@typescript-eslint/typescript-estree": "8.14.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1597,12 +1685,12 @@
}
},
"node_modules/@typescript-eslint/visitor-keys": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.13.0.tgz",
- "integrity": "sha512-7N/+lztJqH4Mrf0lb10R/CbI1EaAMMGyF5y0oJvFoAhafwgiRA7TXyd8TFn8FC8k5y2dTsYogg238qavRGNnlw==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.14.0.tgz",
+ "integrity": "sha512-vG0XZo8AdTH9OE6VFRwAZldNc7qtJ/6NLGWak+BtENuEUXGZgFpihILPiBvKXvJ2nFu27XNGC6rKiwuaoMbYzQ==",
"dev": true,
"dependencies": {
- "@typescript-eslint/types": "8.13.0",
+ "@typescript-eslint/types": "8.14.0",
"eslint-visitor-keys": "^3.4.3"
},
"engines": {
@@ -1613,15 +1701,11 @@
"url": "https://opencollective.com/typescript-eslint"
}
},
- "node_modules/@ungap/structured-clone": {
- "version": "1.2.0",
- "dev": true,
- "license": "ISC"
- },
"node_modules/acorn": {
- "version": "8.10.0",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.14.0.tgz",
+ "integrity": "sha512-cl669nCJTZBsL97OF4kUQm5g5hC2uihk0NxY3WENAC0TYdILVkAyHymAntgxGkl7K+t0cXIrH5siy5S4XkFycA==",
"dev": true,
- "license": "MIT",
"bin": {
"acorn": "bin/acorn"
},
@@ -1631,8 +1715,9 @@
},
"node_modules/acorn-jsx": {
"version": "5.3.2",
+ "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz",
+ "integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==",
"dev": true,
- "license": "MIT",
"peerDependencies": {
"acorn": "^6.0.0 || ^7.0.0 || ^8.0.0"
}
@@ -1647,8 +1732,9 @@
},
"node_modules/ajv": {
"version": "6.12.6",
+ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
+ "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
"dev": true,
- "license": "MIT",
"dependencies": {
"fast-deep-equal": "^3.1.1",
"fast-json-stable-stringify": "^2.0.0",
@@ -1726,8 +1812,9 @@
},
"node_modules/argparse": {
"version": "2.0.1",
- "dev": true,
- "license": "Python-2.0"
+ "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
+ "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
+ "dev": true
},
"node_modules/array-buffer-byte-length": {
"version": "1.0.1",
@@ -2202,9 +2289,10 @@
"license": "MIT"
},
"node_modules/cross-spawn": {
- "version": "7.0.3",
+ "version": "7.0.5",
+ "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.5.tgz",
+ "integrity": "sha512-ZVJrKKYunU38/76t0RMOulHOnUcbU9GbpWKAOZ0mhjr7CX6FVrH+4FrAapSOekrgFQ3f/8gwMEuIft0aKq6Hug==",
"dev": true,
- "license": "MIT",
"dependencies": {
"path-key": "^3.1.0",
"shebang-command": "^2.0.0",
@@ -2586,57 +2674,62 @@
}
},
"node_modules/eslint": {
- "version": "8.57.0",
+ "version": "9.15.0",
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.15.0.tgz",
+ "integrity": "sha512-7CrWySmIibCgT1Os28lUU6upBshZ+GxybLOrmRzi08kS8MBuO8QA7pXEgYgY5W8vK3e74xv0lpjo9DbaGU9Rkw==",
"dev": true,
- "license": "MIT",
"dependencies": {
"@eslint-community/eslint-utils": "^4.2.0",
- "@eslint-community/regexpp": "^4.6.1",
- "@eslint/eslintrc": "^2.1.4",
- "@eslint/js": "8.57.0",
- "@humanwhocodes/config-array": "^0.11.14",
+ "@eslint-community/regexpp": "^4.12.1",
+ "@eslint/config-array": "^0.19.0",
+ "@eslint/core": "^0.9.0",
+ "@eslint/eslintrc": "^3.2.0",
+ "@eslint/js": "9.15.0",
+ "@eslint/plugin-kit": "^0.2.3",
+ "@humanfs/node": "^0.16.6",
"@humanwhocodes/module-importer": "^1.0.1",
- "@nodelib/fs.walk": "^1.2.8",
- "@ungap/structured-clone": "^1.2.0",
+ "@humanwhocodes/retry": "^0.4.1",
+ "@types/estree": "^1.0.6",
+ "@types/json-schema": "^7.0.15",
"ajv": "^6.12.4",
"chalk": "^4.0.0",
- "cross-spawn": "^7.0.2",
+ "cross-spawn": "^7.0.5",
"debug": "^4.3.2",
- "doctrine": "^3.0.0",
"escape-string-regexp": "^4.0.0",
- "eslint-scope": "^7.2.2",
- "eslint-visitor-keys": "^3.4.3",
- "espree": "^9.6.1",
- "esquery": "^1.4.2",
+ "eslint-scope": "^8.2.0",
+ "eslint-visitor-keys": "^4.2.0",
+ "espree": "^10.3.0",
+ "esquery": "^1.5.0",
"esutils": "^2.0.2",
"fast-deep-equal": "^3.1.3",
- "file-entry-cache": "^6.0.1",
+ "file-entry-cache": "^8.0.0",
"find-up": "^5.0.0",
"glob-parent": "^6.0.2",
- "globals": "^13.19.0",
- "graphemer": "^1.4.0",
"ignore": "^5.2.0",
"imurmurhash": "^0.1.4",
"is-glob": "^4.0.0",
- "is-path-inside": "^3.0.3",
- "js-yaml": "^4.1.0",
"json-stable-stringify-without-jsonify": "^1.0.1",
- "levn": "^0.4.1",
"lodash.merge": "^4.6.2",
"minimatch": "^3.1.2",
"natural-compare": "^1.4.0",
- "optionator": "^0.9.3",
- "strip-ansi": "^6.0.1",
- "text-table": "^0.2.0"
+ "optionator": "^0.9.3"
},
"bin": {
"eslint": "bin/eslint.js"
},
"engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
},
"funding": {
- "url": "https://opencollective.com/eslint"
+ "url": "https://eslint.org/donate"
+ },
+ "peerDependencies": {
+ "jiti": "*"
+ },
+ "peerDependenciesMeta": {
+ "jiti": {
+ "optional": true
+ }
}
},
"node_modules/eslint-compat-utils": {
@@ -2798,9 +2891,9 @@
}
},
"node_modules/eslint-plugin-import-x": {
- "version": "4.4.0",
- "resolved": "https://registry.npmjs.org/eslint-plugin-import-x/-/eslint-plugin-import-x-4.4.0.tgz",
- "integrity": "sha512-me58aWTjdkPtgmOzPe+uP0bebpN5etH4bJRnYzy85Rn9g/3QyASg6kTCqdwNzyaJRqMI2ii2o8s01P2LZpREHg==",
+ "version": "4.4.2",
+ "resolved": "https://registry.npmjs.org/eslint-plugin-import-x/-/eslint-plugin-import-x-4.4.2.tgz",
+ "integrity": "sha512-mDRXPSLQ0UQZQw91QdG4/qZT6hgeW2MJTczAbgPseUZuPEtIjjdPOolXroRkulnOn3fzj6gNgvk+wchMJiHElg==",
"dev": true,
"dependencies": {
"@typescript-eslint/utils": "^8.1.0",
@@ -2928,9 +3021,9 @@
}
},
"node_modules/eslint-plugin-n": {
- "version": "17.13.1",
- "resolved": "https://registry.npmjs.org/eslint-plugin-n/-/eslint-plugin-n-17.13.1.tgz",
- "integrity": "sha512-97qzhk1z3DdSJNCqT45EslwCu5+LB9GDadSyBItgKUfGsXAmN/aa7LRQ0ZxHffUxUzvgbTPJL27/pE9ZQWHy7A==",
+ "version": "17.13.2",
+ "resolved": "https://registry.npmjs.org/eslint-plugin-n/-/eslint-plugin-n-17.13.2.tgz",
+ "integrity": "sha512-MhBAKkT01h8cOXcTBTlpuR7bxH5OBUNpUXefsvwSVEy46cY4m/Kzr2osUCQvA3zJFD6KuCeNNDv0+HDuWk/OcA==",
"dev": true,
"dependencies": {
"@eslint-community/eslint-utils": "^4.4.1",
@@ -3027,25 +3120,26 @@
"eslint": ">=5.0.0"
}
},
- "node_modules/eslint-visitor-keys": {
- "version": "3.4.3",
+ "node_modules/eslint-scope": {
+ "version": "8.2.0",
+ "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-8.2.0.tgz",
+ "integrity": "sha512-PHlWUfG6lvPc3yvP5A4PNyBL1W8fkDUccmI21JUu/+GKZBoH/W5u6usENXUrWFRsyoW5ACUjFGgAFQp5gUlb/A==",
"dev": true,
- "license": "Apache-2.0",
+ "dependencies": {
+ "esrecurse": "^4.3.0",
+ "estraverse": "^5.2.0"
+ },
"engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
},
"funding": {
"url": "https://opencollective.com/eslint"
}
},
- "node_modules/eslint/node_modules/eslint-scope": {
- "version": "7.2.2",
+ "node_modules/eslint-visitor-keys": {
+ "version": "3.4.3",
"dev": true,
- "license": "BSD-2-Clause",
- "dependencies": {
- "esrecurse": "^4.3.0",
- "estraverse": "^5.2.0"
- },
+ "license": "Apache-2.0",
"engines": {
"node": "^12.22.0 || ^14.17.0 || >=16.0.0"
},
@@ -3053,25 +3147,42 @@
"url": "https://opencollective.com/eslint"
}
},
- "node_modules/eslint/node_modules/estraverse": {
- "version": "5.3.0",
+ "node_modules/eslint/node_modules/eslint-visitor-keys": {
+ "version": "4.2.0",
+ "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.0.tgz",
+ "integrity": "sha512-UyLnSehNt62FFhSwjZlHmeokpRK59rcz29j+F1/aDgbkbRTk7wIc9XzdoasMUbRNKDM0qQt/+BJ4BrpFeABemw==",
"dev": true,
- "license": "BSD-2-Clause",
"engines": {
- "node": ">=4.0"
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+ },
+ "funding": {
+ "url": "https://opencollective.com/eslint"
}
},
"node_modules/espree": {
- "version": "9.6.1",
+ "version": "10.3.0",
+ "resolved": "https://registry.npmjs.org/espree/-/espree-10.3.0.tgz",
+ "integrity": "sha512-0QYC8b24HWY8zjRnDTL6RiHfDbAWn63qb4LMj1Z4b076A4une81+z03Kg7l7mn/48PUTqoLptSXez8oknU8Clg==",
"dev": true,
- "license": "BSD-2-Clause",
"dependencies": {
- "acorn": "^8.9.0",
+ "acorn": "^8.14.0",
"acorn-jsx": "^5.3.2",
- "eslint-visitor-keys": "^3.4.1"
+ "eslint-visitor-keys": "^4.2.0"
},
"engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+ },
+ "funding": {
+ "url": "https://opencollective.com/eslint"
+ }
+ },
+ "node_modules/espree/node_modules/eslint-visitor-keys": {
+ "version": "4.2.0",
+ "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.0.tgz",
+ "integrity": "sha512-UyLnSehNt62FFhSwjZlHmeokpRK59rcz29j+F1/aDgbkbRTk7wIc9XzdoasMUbRNKDM0qQt/+BJ4BrpFeABemw==",
+ "dev": true,
+ "engines": {
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
},
"funding": {
"url": "https://opencollective.com/eslint"
@@ -3100,18 +3211,11 @@
"node": ">=0.10"
}
},
- "node_modules/esquery/node_modules/estraverse": {
- "version": "5.3.0",
- "dev": true,
- "license": "BSD-2-Clause",
- "engines": {
- "node": ">=4.0"
- }
- },
"node_modules/esrecurse": {
"version": "4.3.0",
+ "resolved": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz",
+ "integrity": "sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==",
"dev": true,
- "license": "BSD-2-Clause",
"dependencies": {
"estraverse": "^5.2.0"
},
@@ -3119,10 +3223,11 @@
"node": ">=4.0"
}
},
- "node_modules/esrecurse/node_modules/estraverse": {
+ "node_modules/estraverse": {
"version": "5.3.0",
+ "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz",
+ "integrity": "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==",
"dev": true,
- "license": "BSD-2-Clause",
"engines": {
"node": ">=4.0"
}
@@ -3181,8 +3286,9 @@
},
"node_modules/fast-deep-equal": {
"version": "3.1.3",
- "dev": true,
- "license": "MIT"
+ "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+ "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+ "dev": true
},
"node_modules/fast-diff": {
"version": "1.2.0",
@@ -3249,14 +3355,15 @@
}
},
"node_modules/file-entry-cache": {
- "version": "6.0.1",
+ "version": "8.0.0",
+ "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-8.0.0.tgz",
+ "integrity": "sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
- "flat-cache": "^3.0.4"
+ "flat-cache": "^4.0.0"
},
"engines": {
- "node": "^10.12.0 || >=12.0.0"
+ "node": ">=16.0.0"
}
},
"node_modules/filelist": {
@@ -3316,21 +3423,23 @@
}
},
"node_modules/flat-cache": {
- "version": "3.0.4",
+ "version": "4.0.1",
+ "resolved": "https://registry.npmjs.org/flat-cache/-/flat-cache-4.0.1.tgz",
+ "integrity": "sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==",
"dev": true,
- "license": "MIT",
"dependencies": {
- "flatted": "^3.1.0",
- "rimraf": "^3.0.2"
+ "flatted": "^3.2.9",
+ "keyv": "^4.5.4"
},
"engines": {
- "node": "^10.12.0 || >=12.0.0"
+ "node": ">=16"
}
},
"node_modules/flatted": {
- "version": "3.2.7",
- "dev": true,
- "license": "ISC"
+ "version": "3.3.1",
+ "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz",
+ "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==",
+ "dev": true
},
"node_modules/for-each": {
"version": "0.3.3",
@@ -3522,14 +3631,12 @@
}
},
"node_modules/globals": {
- "version": "13.24.0",
+ "version": "14.0.0",
+ "resolved": "https://registry.npmjs.org/globals/-/globals-14.0.0.tgz",
+ "integrity": "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==",
"dev": true,
- "license": "MIT",
- "dependencies": {
- "type-fest": "^0.20.2"
- },
"engines": {
- "node": ">=8"
+ "node": ">=18"
},
"funding": {
"url": "https://github.com/sponsors/sindresorhus"
@@ -3673,8 +3780,9 @@
},
"node_modules/import-fresh": {
"version": "3.3.0",
+ "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz",
+ "integrity": "sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==",
"dev": true,
- "license": "MIT",
"dependencies": {
"parent-module": "^1.0.0",
"resolve-from": "^4.0.0"
@@ -3920,14 +4028,6 @@
"url": "https://github.com/sponsors/ljharb"
}
},
- "node_modules/is-path-inside": {
- "version": "3.0.3",
- "dev": true,
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
"node_modules/is-regex": {
"version": "1.1.4",
"resolved": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.4.tgz",
@@ -4689,8 +4789,9 @@
},
"node_modules/js-yaml": {
"version": "4.1.0",
+ "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
+ "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
"dev": true,
- "license": "MIT",
"dependencies": {
"argparse": "^2.0.1"
},
@@ -4709,6 +4810,12 @@
"node": ">=4"
}
},
+ "node_modules/json-buffer": {
+ "version": "3.0.1",
+ "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz",
+ "integrity": "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==",
+ "dev": true
+ },
"node_modules/json-parse-even-better-errors": {
"version": "2.3.1",
"dev": true,
@@ -4716,8 +4823,9 @@
},
"node_modules/json-schema-traverse": {
"version": "0.4.1",
- "dev": true,
- "license": "MIT"
+ "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
+ "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==",
+ "dev": true
},
"node_modules/json-stable-stringify-without-jsonify": {
"version": "1.0.1",
@@ -4735,6 +4843,15 @@
"node": ">=6"
}
},
+ "node_modules/keyv": {
+ "version": "4.5.4",
+ "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
+ "integrity": "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==",
+ "dev": true,
+ "dependencies": {
+ "json-buffer": "3.0.1"
+ }
+ },
"node_modules/kleur": {
"version": "3.0.3",
"dev": true,
@@ -5137,8 +5254,9 @@
},
"node_modules/parent-module": {
"version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz",
+ "integrity": "sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==",
"dev": true,
- "license": "MIT",
"dependencies": {
"callsites": "^3.0.0"
},
@@ -5356,8 +5474,9 @@
},
"node_modules/punycode": {
"version": "2.3.1",
+ "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+ "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=6"
}
@@ -5464,8 +5583,9 @@
},
"node_modules/resolve-from": {
"version": "4.0.0",
+ "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz",
+ "integrity": "sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==",
"dev": true,
- "license": "MIT",
"engines": {
"node": ">=4"
}
@@ -5496,20 +5616,6 @@
"node": ">=0.10.0"
}
},
- "node_modules/rimraf": {
- "version": "3.0.2",
- "dev": true,
- "license": "ISC",
- "dependencies": {
- "glob": "^7.1.3"
- },
- "bin": {
- "rimraf": "bin.js"
- },
- "funding": {
- "url": "https://github.com/sponsors/isaacs"
- }
- },
"node_modules/run-parallel": {
"version": "1.2.0",
"dev": true,
@@ -5928,11 +6034,6 @@
"node": ">=8"
}
},
- "node_modules/text-table": {
- "version": "0.2.0",
- "dev": true,
- "license": "MIT"
- },
"node_modules/tmpl": {
"version": "1.0.5",
"dev": true,
@@ -6104,17 +6205,6 @@
"node": ">=4"
}
},
- "node_modules/type-fest": {
- "version": "0.20.2",
- "dev": true,
- "license": "(MIT OR CC0-1.0)",
- "engines": {
- "node": ">=10"
- },
- "funding": {
- "url": "https://github.com/sponsors/sindresorhus"
- }
- },
"node_modules/typed-array-buffer": {
"version": "1.0.2",
"resolved": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.2.tgz",
@@ -6202,14 +6292,14 @@
}
},
"node_modules/typescript-eslint": {
- "version": "8.13.0",
- "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.13.0.tgz",
- "integrity": "sha512-vIMpDRJrQd70au2G8w34mPps0ezFSPMEX4pXkTzUkrNbRX+36ais2ksGWN0esZL+ZMaFJEneOBHzCgSqle7DHw==",
+ "version": "8.14.0",
+ "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.14.0.tgz",
+ "integrity": "sha512-K8fBJHxVL3kxMmwByvz8hNdBJ8a0YqKzKDX6jRlrjMuNXyd5T2V02HIq37+OiWXvUUOXgOOGiSSOh26Mh8pC3w==",
"dev": true,
"dependencies": {
- "@typescript-eslint/eslint-plugin": "8.13.0",
- "@typescript-eslint/parser": "8.13.0",
- "@typescript-eslint/utils": "8.13.0"
+ "@typescript-eslint/eslint-plugin": "8.14.0",
+ "@typescript-eslint/parser": "8.14.0",
+ "@typescript-eslint/utils": "8.14.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -6271,8 +6361,9 @@
},
"node_modules/uri-js": {
"version": "4.4.1",
+ "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
+ "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==",
"dev": true,
- "license": "BSD-2-Clause",
"dependencies": {
"punycode": "^2.1.0"
}
diff --git a/package.json b/package.json
index ba194beff..c6515ca58 100644
--- a/package.json
+++ b/package.json
@@ -16,17 +16,17 @@
"@types/jest-specific-snapshot": "^0.5.9",
"@types/node": "^22.9.0",
"@types/semver": "^7.5.8",
- "@typescript-eslint/eslint-plugin": "^8.13.0",
- "@typescript-eslint/parser": "^8.13.0",
+ "@typescript-eslint/eslint-plugin": "^8.14.0",
+ "@typescript-eslint/parser": "^8.14.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "^8.57.0",
+ "eslint": "^9.15.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
- "eslint-plugin-import-x": "^4.4.0",
+ "eslint-plugin-import-x": "^4.4.2",
"eslint-plugin-jest": "^28.9.0",
- "eslint-plugin-n": "^17.13.1",
+ "eslint-plugin-n": "^17.13.2",
"eslint-plugin-prettier": "^5.2.1",
"eslint-plugin-simple-import-sort": "^12.1.1",
"fast-sort": "^3.4.1",
@@ -39,7 +39,7 @@
"ts-node": "^10.9.2",
"tsconfig-paths": "^4.1.2",
"typescript": "^5.6.3",
- "typescript-eslint": "^8.13.0",
+ "typescript-eslint": "^8.14.0",
"yaml": "^2.6.0"
},
"bundleDependencies": [
From d9e22d21c680866cc0a99dac0a466424b17d0293 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 Nov 2024 10:52:27 -0800
Subject: [PATCH 03/11] Bump github/codeql-action from 3.27.4 to 3.27.5 in the
dependencies group (#923)
Bumps the dependencies group with 1 update:
[github/codeql-action](https://github.com/github/codeql-action).
Updates `github/codeql-action` from 3.27.4 to 3.27.5
Release notes
Sourced from github/codeql-action's
releases.
v3.27.5
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
3.27.5 - 19 Nov 2024
No user facing changes.
See the full CHANGELOG.md
for more information.
Changelog
Sourced from github/codeql-action's
changelog.
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
[UNRELEASED]
No user facing changes.
3.27.5 - 19 Nov 2024
No user facing changes.
3.27.4 - 14 Nov 2024
No user facing changes.
3.27.3 - 12 Nov 2024
No user facing changes.
3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message "Invalid value 'undefined' for header
'authorization'". #2590
3.27.1 - 08 Nov 2024
- The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. #2573
- Update default CodeQL bundle version to 2.19.3. #2576
3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail
with "upload-sarif post-action step failed: Input required and not
supplied: token" when called in a composite Action that had a
different set of inputs to the ones expected by the
upload-sarif
Action. #2557
- Update default CodeQL bundle version to 2.19.2. #2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
-
Upcoming breaking change: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. #2520
-
If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.
-
Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.13.5 and 2.14.5, you can replace
github/codeql-action/*@v3
by
github/codeql-action/*@v3.26.11
and
github/codeql-action/*@v2
by
github/codeql-action/*@v2.26.11
in your code scanning
workflow to ensure you continue using this version of the CodeQL
Action.
3.26.11 - 03 Oct 2024
... (truncated)
Commits
f09c1c0
Merge pull request #2616
from github/update-v3.27.5-a6c8729a5
67b73ea
Update changelog for v3.27.5
a6c8729
Merge pull request #2614
from github/marcogario/per-platform-proxy
8f3b487
Start-proxy: Fetch OS specific binary
cba5fb5
Merge pull request #2613
from github/dependabot/npm_and_yarn/npm_and_yarn-018...
e782c3a
Merge pull request #2612
from github/angelapwen/report-linux-runner-release
db67881
Update checked-in dependencies
ecde4d2
Bump cross-spawn from 7.0.3 to 7.0.6 in the npm_and_yarn group
e3c67a0
Merge pull request #2610
from github/dependabot/npm_and_yarn/npm-d2ca52e617
f9ada54
Telemetry: report OS release for GitHub-hosted Linux runners
- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore ` will
remove the ignore condition of the specified dependency and ignore
conditions
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/codeql.yml | 6 +++---
.github/workflows/scorecard.yml | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index cddb646fd..a3a11a2ce 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -34,7 +34,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+ uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
# Override language selection by uncommenting this and choosing your languages
with:
languages: javascript
@@ -42,7 +42,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
# If this step fails, then you should remove it and run the build manually (see below).
- name: Autobuild
- uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+ uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
# ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -56,4 +56,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+ uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b21157c95..db2718c37 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: Upload to code-scanning
- uses: github/codeql-action/upload-sarif@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+ uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
with:
sarif_file: results.sarif
From 1c981536fa99edf817924f67e17625fecda8b5a5 Mon Sep 17 00:00:00 2001
From: Tyler Jang
Date: Mon, 25 Nov 2024 11:42:02 -0800
Subject: [PATCH 04/11] (Fix): Use new slack schema (#920)
[`v2.0.0`](https://github.com/slackapi/slack-github-action/releases/tag/v2.0.0)
changed the payload schema to use YAML, along with a few other schema
changes.
I also disabled the nightly Windows linter tests since they're not
providing any signal atm.
Also rolls back an eslint upgrade from
https://github.com/trunk-io/plugins/pull/918
---
.github/workflows/nightly.yaml | 5 +-
.../workflows/upload_results.reusable.yaml | 83 ++++++++-----------
package-lock.json | 49 ++++++-----
package.json | 2 +-
tests/parse/index.ts | 6 +-
5 files changed, 67 insertions(+), 78 deletions(-)
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index 38ca98d4b..3208c80df 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -75,22 +75,19 @@ jobs:
# This job is used to update the list of validated versions
linter_tests_release:
name: Plugin Tests Release
- # runs-on: [self-hosted, "${{ matrix.os }}"] TODO(Tyler): Set after Windows self-hosted are established.
runs-on: ${{ matrix.os }}
timeout-minutes: 150
strategy:
fail-fast: false
matrix:
linter-version: [Snapshots, Latest]
- os: [ubuntu-latest, macOS, windows-latest]
+ os: [ubuntu-latest, macOS]
include:
# Normalize the filenames as inputs for ease of parsing
- os: ubuntu-latest
results-file: ubuntu-latest
- os: macOS
results-file: macos-latest
- - os: windows-latest
- results-file: windows-latest
outputs:
plugin-version: ${{ steps.get-release.outputs.tag }}
diff --git a/.github/workflows/upload_results.reusable.yaml b/.github/workflows/upload_results.reusable.yaml
index 0593f737c..48230fec0 100644
--- a/.github/workflows/upload_results.reusable.yaml
+++ b/.github/workflows/upload_results.reusable.yaml
@@ -103,22 +103,16 @@ jobs:
steps.download-ubuntu.outcome == 'failure' || steps.download-macos.outcome == 'failure' ||
steps.download-windows.outcome == 'failure'
with:
- channel-id: ${{ env.SLACK_CHANNEL_ID }}
+ method: chat.postMessage
+ token: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
payload: |
- {
- "text": "Artifact Download Failure",
- "blocks": [
- {
- "type": "section",
- "text": {
- "type": "mrkdwn",
- "text": "Failure: "
- }
- }
- ]
- }
- env:
- SLACK_BOT_TOKEN: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
+ channel: ${{ env.SLACK_CHANNEL_ID }}
+ text: "Artifact Download Failure"
+ blocks:
+ - type: section
+ text:
+ type: mrkdwn
+ text: "Failure: "
- name: Setup Node
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
@@ -139,8 +133,9 @@ jobs:
id: parse
run: |
npm run parse
- echo "failures=$([[ -f failures.json ]] && echo "true" || echo "false")" >> "$GITHUB_OUTPUT"
- echo "failures-payload=$(cat failures.json)" >> "$GITHUB_OUTPUT"
+ echo "failures=$([[ -f failures.yaml ]] && echo "true" || echo "false")" >> "$GITHUB_OUTPUT"
+ failures_payload=$(cat failures.yaml)
+ printf "failures-payload<> "$GITHUB_OUTPUT"
echo "reruns=$(cat reruns.txt)" >> "$GITHUB_OUTPUT"
env:
PLUGIN_VERSION: ${{ inputs.plugin-version }}
@@ -148,6 +143,7 @@ jobs:
RUN_ID: ${{ github.run_id }}
TEST_REF: ${{ inputs.test-ref }}
TEST_TYPE: ${{ inputs.test-type }}
+ SLACK_CHANNEL_ID: ${{ env.SLACK_CHANNEL_ID }}
- name: Upload Test Results Staging
if: inputs.upload-validated-versions == true
@@ -184,52 +180,39 @@ jobs:
uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
if: always() && steps.parse.outputs.failures == 'true'
with:
- channel-id: ${{ env.SLACK_CHANNEL_ID }}
+ method: chat.postMessage
+ token: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
payload: ${{ steps.parse.outputs.failures-payload }}
- env:
- SLACK_BOT_TOKEN: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
- name: Slack Notification For Staging Upload Failure
uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
if: inputs.upload-validated-versions == true && steps.upload-staging.outcome == 'failure'
with:
- channel-id: ${{ env.SLACK_CHANNEL_ID }}
+ method: chat.postMessage
+ token: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
payload: |
- {
- "text": "Upload Failure",
- "blocks": [
- {
- "type": "section",
- "text": {
- "type": "mrkdwn",
- "text": "Failure: "
- }
- }
- ]
- }
- env:
- SLACK_BOT_TOKEN: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
+ channel: ${{ env.SLACK_CHANNEL_ID }}
+ text: "Upload Failure"
+ blocks:
+ - type: section
+ text:
+ type: mrkdwn
+ text: "Failure: "
- name: Slack Notification For Prod Upload Failure
uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
if: inputs.upload-validated-versions == true && steps.upload-prod.outcome == 'failure'
with:
- channel-id: ${{ env.SLACK_CHANNEL_ID }}
+ method: chat.postMessage
+ token: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
payload: |
- {
- "text": "Upload Failure",
- "blocks": [
- {
- "type": "section",
- "text": {
- "type": "mrkdwn",
- "text": "Failure: "
- }
- }
- ]
- }
- env:
- SLACK_BOT_TOKEN: ${{ secrets.TRUNKBOT_SLACK_BOT_TOKEN }}
+ channel: ${{ env.SLACK_CHANNEL_ID }}
+ text: "Upload Failure"
+ blocks:
+ - type: section
+ text:
+ type: mrkdwn
+ text: "Failure: "
generate_snapshots_pr:
name: Generate Snapshots PR
runs-on: ubuntu-latest
diff --git a/package-lock.json b/package-lock.json
index 2f46c2a59..b7b5f764c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -22,7 +22,7 @@
"@typescript-eslint/parser": "^8.14.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "^9.15.0",
+ "eslint": "9.14.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
@@ -658,9 +658,9 @@
}
},
"node_modules/@eslint/config-array": {
- "version": "0.19.0",
- "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.0.tgz",
- "integrity": "sha512-zdHg2FPIFNKPdcHWtiNT+jEFCHYVplAXRDlQDyqy0zGx/q2parwh7brGJSiTxRk/TSMkbM//zt/f5CHgyTyaSQ==",
+ "version": "0.18.0",
+ "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.18.0.tgz",
+ "integrity": "sha512-fTxvnS1sRMu3+JjXwJG0j/i4RT9u4qJ+lqS/yCGap4lH4zZGzQ7tu+xZqQmcMZq5OBZDL4QRxQzRjkWcGt8IVw==",
"dev": true,
"dependencies": {
"@eslint/object-schema": "^2.1.4",
@@ -672,9 +672,9 @@
}
},
"node_modules/@eslint/core": {
- "version": "0.9.0",
- "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.9.0.tgz",
- "integrity": "sha512-7ATR9F0e4W85D/0w7cU0SNj7qkAexMG+bAHEZOjo9akvGuhHE2m7umzWzfnpa0XAg5Kxc1BWmtPMV67jJ+9VUg==",
+ "version": "0.7.0",
+ "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.7.0.tgz",
+ "integrity": "sha512-xp5Jirz5DyPYlPiKat8jaq0EmYvDXKKpzTbxXMpT9eqlRJkRKIz9AGMdlvYjih+im+QlhWrpvVjl8IPC/lHlUw==",
"dev": true,
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -704,9 +704,9 @@
}
},
"node_modules/@eslint/js": {
- "version": "9.15.0",
- "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.15.0.tgz",
- "integrity": "sha512-tMTqrY+EzbXmKJR5ToI8lxu7jaN5EdmrBFJpQk5JmSlyLsx6o4t27r883K5xsLuCYCpfKBCGswMSWXsM+jB7lg==",
+ "version": "9.14.0",
+ "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.14.0.tgz",
+ "integrity": "sha512-pFoEtFWCPyDOl+C6Ift+wC7Ro89otjigCf5vcuWqWgqNSQbRrpjSvdeE6ofLz4dHmyxD5f7gIdGT4+p36L6Twg==",
"dev": true,
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -2674,26 +2674,26 @@
}
},
"node_modules/eslint": {
- "version": "9.15.0",
- "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.15.0.tgz",
- "integrity": "sha512-7CrWySmIibCgT1Os28lUU6upBshZ+GxybLOrmRzi08kS8MBuO8QA7pXEgYgY5W8vK3e74xv0lpjo9DbaGU9Rkw==",
+ "version": "9.14.0",
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.14.0.tgz",
+ "integrity": "sha512-c2FHsVBr87lnUtjP4Yhvk4yEhKrQavGafRA/Se1ouse8PfbfC/Qh9Mxa00yWsZRlqeUB9raXip0aiiUZkgnr9g==",
"dev": true,
"dependencies": {
"@eslint-community/eslint-utils": "^4.2.0",
"@eslint-community/regexpp": "^4.12.1",
- "@eslint/config-array": "^0.19.0",
- "@eslint/core": "^0.9.0",
- "@eslint/eslintrc": "^3.2.0",
- "@eslint/js": "9.15.0",
- "@eslint/plugin-kit": "^0.2.3",
+ "@eslint/config-array": "^0.18.0",
+ "@eslint/core": "^0.7.0",
+ "@eslint/eslintrc": "^3.1.0",
+ "@eslint/js": "9.14.0",
+ "@eslint/plugin-kit": "^0.2.0",
"@humanfs/node": "^0.16.6",
"@humanwhocodes/module-importer": "^1.0.1",
- "@humanwhocodes/retry": "^0.4.1",
+ "@humanwhocodes/retry": "^0.4.0",
"@types/estree": "^1.0.6",
"@types/json-schema": "^7.0.15",
"ajv": "^6.12.4",
"chalk": "^4.0.0",
- "cross-spawn": "^7.0.5",
+ "cross-spawn": "^7.0.2",
"debug": "^4.3.2",
"escape-string-regexp": "^4.0.0",
"eslint-scope": "^8.2.0",
@@ -2712,7 +2712,8 @@
"lodash.merge": "^4.6.2",
"minimatch": "^3.1.2",
"natural-compare": "^1.4.0",
- "optionator": "^0.9.3"
+ "optionator": "^0.9.3",
+ "text-table": "^0.2.0"
},
"bin": {
"eslint": "bin/eslint.js"
@@ -6034,6 +6035,12 @@
"node": ">=8"
}
},
+ "node_modules/text-table": {
+ "version": "0.2.0",
+ "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
+ "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
+ "dev": true
+ },
"node_modules/tmpl": {
"version": "1.0.5",
"dev": true,
diff --git a/package.json b/package.json
index c6515ca58..d24c2ee18 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
"@typescript-eslint/parser": "^8.14.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "^9.15.0",
+ "eslint": "9.14.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
diff --git a/tests/parse/index.ts b/tests/parse/index.ts
index a2fe0b0a1..d53cf2424 100644
--- a/tests/parse/index.ts
+++ b/tests/parse/index.ts
@@ -11,9 +11,10 @@ import {
} from "tests/types";
import { REPO_ROOT } from "tests/utils";
import { getTrunkVersion } from "tests/utils/trunk_config";
+import YAML from "yaml";
const RESULTS_FILE = path.resolve(REPO_ROOT, "results.json");
-const FAILURES_FILE = path.resolve(REPO_ROOT, "failures.json");
+const FAILURES_FILE = path.resolve(REPO_ROOT, "failures.yaml");
const RERUN_FILE = path.resolve(REPO_ROOT, "reruns.txt");
const VALIDATED_LINTER_BLOCKLIST: string[] = [];
@@ -299,10 +300,11 @@ const writeFailuresForNotification = (failures: FailedVersion[]) => {
const blocks = allBlocks.length > 50 ? allBlocks.slice(0, 49).concat(remainingBlock) : allBlocks;
const failuresObject = {
+ channel: process.env.SLACK_CHANNEL_ID,
text: `${failures.length} failures encountered running plugins tests for ${TEST_REF}`,
blocks,
};
- const failuresString = JSON.stringify(failuresObject);
+ const failuresString = YAML.stringify(failuresObject);
fs.writeFileSync(FAILURES_FILE, failuresString);
console.log(`Wrote ${failures.length} failures out to ${FAILURES_FILE}:`);
console.log(failuresString);
From 38fb77f87a0db5d43ad313d035810828d319e581 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 Nov 2024 16:51:21 -0800
Subject: [PATCH 05/11] Bump the dependencies group across 1 directory with 9
updates (#925)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps the dependencies group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `22.9.0` | `22.9.3` |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.14.0` | `8.16.0` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.14.0` | `8.16.0` |
| [eslint](https://github.com/eslint/eslint) | `9.14.0` | `9.15.0` |
|
[eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x)
| `4.4.2` | `4.4.3` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n)
| `17.13.2` | `17.14.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` |
`5.7.2` |
|
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
| `8.14.0` | `8.16.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.6.0` | `2.6.1` |
Updates `@types/node` from 22.9.0 to 22.9.3
Commits
Updates `@typescript-eslint/eslint-plugin` from 8.14.0 to 8.16.0
Release notes
Sourced from @typescript-eslint/eslint-plugin
's
releases.
v8.16.0
8.16.0 (2024-11-25)
🚀 Features
- support TypeScript 5.7 (#10372)
- eslint-plugin: [max-params] add function overload
and function type support (#10312)
- eslint-plugin: [no-base-to-string] check
Array.prototype.join (#10287)
🩹 Fixes
- typescript-estree: update conditions for
unsupported version warning (#10385)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
v8.15.0
8.15.0 (2024-11-18)
🚀 Features
- eslint-plugin: added related-getter-setter-pairs
rule (#10192)
- eslint-plugin: new rule
no-unsafe-type-assertion
(#10051)
- eslint-plugin: [prefer-nullish-coalescing] fix
detection of
ignoreConditionalTests
involving boolean
!
operator (#10299)
- rule-tester: run method - avoid to infer type
parameter from
tests
param (#10324)
- typescript-eslint: allow infinitely deep array
nesting in config function and extends (#10333)
- utils: add new optional
language
field
to FlatConfig.Config
type (#10326)
🩹 Fixes
- add missing peer dependencies (#9744)
- eslint-plugin: [consistent-indexed-object-style]
handle circular mapped types (#10301)
- eslint-plugin: [await-thenable, return-await] don't
flag awaiting unconstrained type parameter as unnecessary (#10314)
- eslint-plugin: [explicit-module-boundary-types] and
[explicit-function-return-type] don't report on
as const
satisfies
(#10315)
- eslint-plugin: report deprecations used in default
export (#10330)
- utils: add defaultOptions to meta in rule (#10339)
❤️ Thank You
... (truncated)
Changelog
Sourced from @typescript-eslint/eslint-plugin
's
changelog.
8.16.0 (2024-11-25)
🚀 Features
- eslint-plugin: [no-base-to-string] check
Array.prototype.join (#10287)
- eslint-plugin: [max-params] add function overload
and function type support (#10312)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
8.15.0 (2024-11-18)
🚀 Features
- eslint-plugin: [prefer-nullish-coalescing] fix
detection of
ignoreConditionalTests
involving boolean
!
operator (#10299)
- eslint-plugin: new rule
no-unsafe-type-assertion
(#10051)
- eslint-plugin: added related-getter-setter-pairs
rule (#10192)
🩹 Fixes
- utils: add defaultOptions to meta in rule (#10339)
- eslint-plugin: report deprecations used in default
export (#10330)
- eslint-plugin: [explicit-module-boundary-types] and
[explicit-function-return-type] don't report on
as const
satisfies
(#10315)
- eslint-plugin: [await-thenable, return-await] don't
flag awaiting unconstrained type parameter as unnecessary (#10314)
- eslint-plugin: [consistent-indexed-object-style]
handle circular mapped types (#10301)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Commits
f74a8fa
chore(release): publish 8.16.0
2e2433b
feat(eslint-plugin): [no-base-to-string] check Array.prototype.join (#10287)
88e4c66
docs(eslint-plugin): add missing >
in
array-type.mdx
(#10371)
71243db
chore: correct lint errors in CI (#10370)
cdbc669
feat(eslint-plugin): [max-params] add function overload and function
type sup...
cac88ca
chore: set no-else-return allowIfElse to false (#10325)
2444351
chore(release): publish 8.15.0
6c27d08
chore: bump eslint dependencies (#10354)
f5e23e2
fix(utils): add defaultOptions to meta in rule (#10339)
12ce800
docs(eslint-plugin): [no-confusing-void-expression] add a default value
for `...
- Additional commits viewable in compare
view
Updates `@typescript-eslint/parser` from 8.14.0 to 8.16.0
Release notes
Sourced from @typescript-eslint/parser
's
releases.
v8.16.0
8.16.0 (2024-11-25)
🚀 Features
- support TypeScript 5.7 (#10372)
- eslint-plugin: [max-params] add function overload
and function type support (#10312)
- eslint-plugin: [no-base-to-string] check
Array.prototype.join (#10287)
🩹 Fixes
- typescript-estree: update conditions for
unsupported version warning (#10385)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
v8.15.0
8.15.0 (2024-11-18)
🚀 Features
- eslint-plugin: added related-getter-setter-pairs
rule (#10192)
- eslint-plugin: new rule
no-unsafe-type-assertion
(#10051)
- eslint-plugin: [prefer-nullish-coalescing] fix
detection of
ignoreConditionalTests
involving boolean
!
operator (#10299)
- rule-tester: run method - avoid to infer type
parameter from
tests
param (#10324)
- typescript-eslint: allow infinitely deep array
nesting in config function and extends (#10333)
- utils: add new optional
language
field
to FlatConfig.Config
type (#10326)
🩹 Fixes
- add missing peer dependencies (#9744)
- eslint-plugin: [consistent-indexed-object-style]
handle circular mapped types (#10301)
- eslint-plugin: [await-thenable, return-await] don't
flag awaiting unconstrained type parameter as unnecessary (#10314)
- eslint-plugin: [explicit-module-boundary-types] and
[explicit-function-return-type] don't report on
as const
satisfies
(#10315)
- eslint-plugin: report deprecations used in default
export (#10330)
- utils: add defaultOptions to meta in rule (#10339)
❤️ Thank You
... (truncated)
Changelog
Sourced from @typescript-eslint/parser
's
changelog.
8.16.0 (2024-11-25)
🚀 Features
- support TypeScript 5.7 (#10372)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
8.15.0 (2024-11-18)
This was a version bump only for parser to align it with other
projects, there were no code changes.
You can read about our versioning
strategy and releases
on our website.
Commits
Updates `eslint` from 9.14.0 to 9.15.0
Release notes
Sourced from eslint's
releases.
v9.15.0
Features
01557ce
feat: Implement Language#normalizeLanguageOptions() (#19104)
(Nicholas C. Zakas)
2edc0e2
feat: add meta.defaultOptions (#17656)
(Josh Goldberg ✨)
bdec50e
feat: fix no-useless-computed-key
false negative with
__proto__
(#19123)
(Milos Djermanovic)
3087c9e
feat: add meta
object to @eslint/js
plugin (#19095)
(Francesco Trotta)
Bug Fixes
fd33f13
fix: update types for no-restricted-imports
rule (#19060)
(Nitin Kumar)
bd35098
fix: switch away from Node.js node:assert and AssertionError (#19082)
(Josh Goldberg ✨)
9db5b15
fix: unsafe report for no-lonely-if
(#19087)
(Abraham Guo)
68fa497
fix: ignore files on a different drive on Windows (#19069)
(Francesco Trotta)
4ce625a
fix: upgrade @humanwhocodes/retry
@0
.4.1 to avoid debug logs
(#19102)
(Milos Djermanovic)
Documentation
d927920
docs: fix styles in no-js mode (#18916)
(Tanuj Kanti)
09bc2a8
docs: Update README (GitHub Actions Bot)
39089c8
docs: add no-useless-computed-key
examples with object
patterns (#19109)
(Milos Djermanovic)
895c60f
docs: add missing messageId property and suggestion properties (#19122)
(fnx)
298625e
docs: Change CLI -c to use flat config (#19103)
(Nicholas C. Zakas)
522d8a3
docs: add deprecation on indent
, quotes
and
semi
rule types (#19090)
(Marco Pasqualetti)
Chores
2967d91
chore: upgrade @eslint/js
@9
.15.0 (#19133)
(Milos Djermanovic)
b441bee
chore: package.json update for @eslint/js
release
(Jenkins)
7d6bf4a
chore: upgrade @eslint/core
@0
.9.0 (#19131)
(Milos Djermanovic)
902e707
chore: upgrade @eslint/plugin-kit
@0
.2.3 (#19130)
(Milos Djermanovic)
5ff6c1d
chore: bump cross-spawn (#19125)
(Ian Bobinac)
cceccc7
chore: update dependency @eslint/json
to ^0.6.0 (#19117)
(renovate[bot])
0da3f73
chore: update algolia referrer (#19114)
(Strek)
4f08332
ci: unpin trunk-io/trunk-action
(#19108)
(Francesco Trotta)
6b75683
perf: optimize text-table
by replacing regex with
trimEnd
(#19061)
(Nitin Kumar)
Changelog
Sourced from eslint's
changelog.
v9.15.0 - November 15, 2024
2967d91
chore: upgrade @eslint/js
@9
.15.0 (#19133)
(Milos Djermanovic)
b441bee
chore: package.json update for @eslint/js
release
(Jenkins)
7d6bf4a
chore: upgrade @eslint/core
@0
.9.0 (#19131)
(Milos Djermanovic)
01557ce
feat: Implement Language#normalizeLanguageOptions() (#19104)
(Nicholas C. Zakas)
902e707
chore: upgrade @eslint/plugin-kit
@0
.2.3 (#19130)
(Milos Djermanovic)
2edc0e2
feat: add meta.defaultOptions (#17656)
(Josh Goldberg ✨)
fd33f13
fix: update types for no-restricted-imports
rule (#19060)
(Nitin Kumar)
5ff6c1d
chore: bump cross-spawn (#19125)
(Ian Bobinac)
d927920
docs: fix styles in no-js mode (#18916)
(Tanuj Kanti)
bdec50e
feat: fix no-useless-computed-key
false negative with
__proto__
(#19123)
(Milos Djermanovic)
09bc2a8
docs: Update README (GitHub Actions Bot)
bd35098
fix: switch away from Node.js node:assert and AssertionError (#19082)
(Josh Goldberg ✨)
39089c8
docs: add no-useless-computed-key
examples with object
patterns (#19109)
(Milos Djermanovic)
895c60f
docs: add missing messageId property and suggestion properties (#19122)
(fnx)
cceccc7
chore: update dependency @eslint/json
to ^0.6.0 (#19117)
(renovate[bot])
0da3f73
chore: update algolia referrer (#19114)
(Strek)
9db5b15
fix: unsafe report for no-lonely-if
(#19087)
(Abraham Guo)
68fa497
fix: ignore files on a different drive on Windows (#19069)
(Francesco Trotta)
4f08332
ci: unpin trunk-io/trunk-action
(#19108)
(Francesco Trotta)
3087c9e
feat: add meta
object to @eslint/js
plugin (#19095)
(Francesco Trotta)
298625e
docs: Change CLI -c to use flat config (#19103)
(Nicholas C. Zakas)
4ce625a
fix: upgrade @humanwhocodes/retry
@0
.4.1 to avoid debug logs
(#19102)
(Milos Djermanovic)
522d8a3
docs: add deprecation on indent
, quotes
and
semi
rule types (#19090)
(Marco Pasqualetti)
6b75683
perf: optimize text-table
by replacing regex with
trimEnd
(#19061)
(Nitin Kumar)
Commits
Updates `eslint-plugin-import-x` from 4.4.2 to 4.4.3
Release notes
Sourced from eslint-plugin-import-x's
releases.
v4.4.3
Patch Changes
- #187
a428f82
Thanks @SukkaW
! -
Attach ecmaVersion
and sourceType
to
parserOptions
during parse
Changelog
Sourced from eslint-plugin-import-x's
changelog.
4.4.3
Patch Changes
- #187
a428f82
Thanks @SukkaW
! -
Attach ecmaVersion
and sourceType
to
parserOptions
during parse
Commits
Updates `eslint-plugin-n` from 17.13.2 to 17.14.0
Release notes
Sourced from eslint-plugin-n's
releases.
v17.14.0
🌟 Features
Changelog
Sourced from eslint-plugin-n's
changelog.
🌟 Features
Commits
Updates `typescript` from 5.6.3 to 5.7.2
Release notes
Sourced from typescript's
releases.
TypeScript 5.7
For release notes, check out the release
announcement.
Downloads are available on:
TypeScript 5.7 RC
For release notes, check out the release
announcement.
For the complete list of fixed issues, check out the
Downloads are available on:
TypeScript 5.7 Beta
For release notes, check out the release
announcement.
For the complete list of fixed issues, check out the
Downloads are available on:
Commits
d701d90
Bump version to 5.7.2 and LKG
0503a63
🤖 Pick PR #60450
(Move to file: fix detection of refe...) into release-5.7 (#...
3140dbb
🤖 Pick PR #60488
(Stub out copilotRelated command) into release-5.7 (#60495)
c1216de
Update LKG
3ee2b95
🤖 Pick PR #60415
(Fix false positive rewriteRelativeI...) into release-5.7 (#...
44bd3f2
Bump version to 5.7.1-rc and LKG
5925c81
Update LKG
84d58cf
Merge remote-tracking branch 'origin/main' into release-5.7
0ec4d30
Fixing exception on unsaved file (#60362)
11b2930
Add compatible overloads that accept ArrayBuffer to
BigInt64Array/BigUint64Ar...
- Additional commits viewable in compare
view
Updates `typescript-eslint` from 8.14.0 to 8.16.0
Release notes
Sourced from typescript-eslint's
releases.
v8.16.0
8.16.0 (2024-11-25)
🚀 Features
- support TypeScript 5.7 (#10372)
- eslint-plugin: [max-params] add function overload
and function type support (#10312)
- eslint-plugin: [no-base-to-string] check
Array.prototype.join (#10287)
🩹 Fixes
- typescript-estree: update conditions for
unsupported version warning (#10385)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
v8.15.0
8.15.0 (2024-11-18)
🚀 Features
- eslint-plugin: added related-getter-setter-pairs
rule (#10192)
- eslint-plugin: new rule
no-unsafe-type-assertion
(#10051)
- eslint-plugin: [prefer-nullish-coalescing] fix
detection of
ignoreConditionalTests
involving boolean
!
operator (#10299)
- rule-tester: run method - avoid to infer type
parameter from
tests
param (#10324)
- typescript-eslint: allow infinitely deep array
nesting in config function and extends (#10333)
- utils: add new optional
language
field
to FlatConfig.Config
type (#10326)
🩹 Fixes
- add missing peer dependencies (#9744)
- eslint-plugin: [consistent-indexed-object-style]
handle circular mapped types (#10301)
- eslint-plugin: [await-thenable, return-await] don't
flag awaiting unconstrained type parameter as unnecessary (#10314)
- eslint-plugin: [explicit-module-boundary-types] and
[explicit-function-return-type] don't report on
as const
satisfies
(#10315)
- eslint-plugin: report deprecations used in default
export (#10330)
- utils: add defaultOptions to meta in rule (#10339)
❤️ Thank You
... (truncated)
Changelog
Sourced from typescript-eslint's
changelog.
8.16.0 (2024-11-25)
This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.
You can read about our versioning
strategy and releases
on our website.
8.15.0 (2024-11-18)
🚀 Features
- typescript-eslint: allow infinitely deep array
nesting in config function and extends (#10333)
- eslint-plugin: new rule
no-unsafe-type-assertion
(#10051)
- eslint-plugin: added related-getter-setter-pairs
rule (#10192)
🩹 Fixes
- add missing peer dependencies (#9744)
❤️ Thank You
- Brad Zacher
@bradzacher
- Ethan Wu
- Josh Goldberg ✨
- Ronen Amiel
You can read about our versioning
strategy and releases
on our website.
Commits
f74a8fa
chore(release): publish 8.16.0
2444351
chore(release): publish 8.15.0
b351703
feat(typescript-eslint): allow infinitely deep array nesting in config
functi...
00a3a84
fix: add missing peer dependencies (#9744)
9ebdff4
feat(eslint-plugin): new rule no-unsafe-type-assertion
(#10051)
0409851
feat(eslint-plugin): added related-getter-setter-pairs rule (#10192)
- See full diff in compare
view
Updates `yaml` from 2.6.0 to 2.6.1
Release notes
Sourced from yaml's
releases.
v2.6.1
- Do not strip
:00
seconds from !!timestamp
values (#578, with
thanks to @qraynaud
)
- Tighten regexp for JSON
!!bool
(#587, with
thanks to @vra5107
)
- Default to literal block scalar if folded would overflow (#585)
Commits
aa1898a
2.6.1
6be0a91
fix: Default to literal block scalar if folded would overflow (fixes #585)
108f699
fix: Tighten regexp for JSON !!bool (#587)
2e85b91
fix: Do not strip :00 seconds from !!timestamp values (#578)
5850600
chore: Refresh lockfile
16fb6e2
chore: Add .well-known/funding-manifest-urls
- See full diff in compare
view
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore ` will
remove the ignore condition of the specified dependency and ignore
conditions
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
package-lock.json | 238 +++++++++++++++++++++++++++-------------------
package.json | 18 ++--
2 files changed, 147 insertions(+), 109 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index b7b5f764c..f2dbaa6bf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,19 +16,19 @@
"@types/debug": "^4.1.12",
"@types/jest": "^29.5.14",
"@types/jest-specific-snapshot": "^0.5.9",
- "@types/node": "^22.9.0",
+ "@types/node": "^22.9.3",
"@types/semver": "^7.5.8",
- "@typescript-eslint/eslint-plugin": "^8.14.0",
- "@typescript-eslint/parser": "^8.14.0",
+ "@typescript-eslint/eslint-plugin": "^8.16.0",
+ "@typescript-eslint/parser": "^8.16.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "9.14.0",
+ "eslint": "9.15.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
- "eslint-plugin-import-x": "^4.4.2",
+ "eslint-plugin-import-x": "^4.4.3",
"eslint-plugin-jest": "^28.9.0",
- "eslint-plugin-n": "^17.13.2",
+ "eslint-plugin-n": "^17.14.0",
"eslint-plugin-prettier": "^5.2.1",
"eslint-plugin-simple-import-sort": "^12.1.1",
"fast-sort": "^3.4.1",
@@ -40,9 +40,9 @@
"ts-jest": "^29.2.5",
"ts-node": "^10.9.2",
"tsconfig-paths": "^4.1.2",
- "typescript": "^5.6.3",
- "typescript-eslint": "^8.14.0",
- "yaml": "^2.6.0"
+ "typescript": "^5.7.2",
+ "typescript-eslint": "^8.16.0",
+ "yaml": "^2.6.1"
},
"engines": {
"node": ">=16"
@@ -658,10 +658,11 @@
}
},
"node_modules/@eslint/config-array": {
- "version": "0.18.0",
- "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.18.0.tgz",
- "integrity": "sha512-fTxvnS1sRMu3+JjXwJG0j/i4RT9u4qJ+lqS/yCGap4lH4zZGzQ7tu+xZqQmcMZq5OBZDL4QRxQzRjkWcGt8IVw==",
+ "version": "0.19.0",
+ "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.0.tgz",
+ "integrity": "sha512-zdHg2FPIFNKPdcHWtiNT+jEFCHYVplAXRDlQDyqy0zGx/q2parwh7brGJSiTxRk/TSMkbM//zt/f5CHgyTyaSQ==",
"dev": true,
+ "license": "Apache-2.0",
"dependencies": {
"@eslint/object-schema": "^2.1.4",
"debug": "^4.3.1",
@@ -672,10 +673,11 @@
}
},
"node_modules/@eslint/core": {
- "version": "0.7.0",
- "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.7.0.tgz",
- "integrity": "sha512-xp5Jirz5DyPYlPiKat8jaq0EmYvDXKKpzTbxXMpT9eqlRJkRKIz9AGMdlvYjih+im+QlhWrpvVjl8IPC/lHlUw==",
+ "version": "0.9.0",
+ "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.9.0.tgz",
+ "integrity": "sha512-7ATR9F0e4W85D/0w7cU0SNj7qkAexMG+bAHEZOjo9akvGuhHE2m7umzWzfnpa0XAg5Kxc1BWmtPMV67jJ+9VUg==",
"dev": true,
+ "license": "Apache-2.0",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
}
@@ -704,10 +706,11 @@
}
},
"node_modules/@eslint/js": {
- "version": "9.14.0",
- "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.14.0.tgz",
- "integrity": "sha512-pFoEtFWCPyDOl+C6Ift+wC7Ro89otjigCf5vcuWqWgqNSQbRrpjSvdeE6ofLz4dHmyxD5f7gIdGT4+p36L6Twg==",
+ "version": "9.15.0",
+ "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.15.0.tgz",
+ "integrity": "sha512-tMTqrY+EzbXmKJR5ToI8lxu7jaN5EdmrBFJpQk5JmSlyLsx6o4t27r883K5xsLuCYCpfKBCGswMSWXsM+jB7lg==",
"dev": true,
+ "license": "MIT",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
}
@@ -717,6 +720,7 @@
"resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.4.tgz",
"integrity": "sha512-BsWiH1yFGjXXS2yvrf5LyuoSIIbPrGUWob917o+BTKuZ7qJdxX8aJLRxs1fS9n6r7vESrq1OUqb68dANcFXuQQ==",
"dev": true,
+ "license": "Apache-2.0",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
}
@@ -1463,10 +1467,11 @@
"license": "MIT"
},
"node_modules/@types/node": {
- "version": "22.9.0",
- "resolved": "https://registry.npmjs.org/@types/node/-/node-22.9.0.tgz",
- "integrity": "sha512-vuyHg81vvWA1Z1ELfvLko2c8f34gyA0zaic0+Rllc5lbCnbSyuvb2Oxpm6TAUAC/2xZN3QGqxBNggD1nNR2AfQ==",
+ "version": "22.9.3",
+ "resolved": "https://registry.npmjs.org/@types/node/-/node-22.9.3.tgz",
+ "integrity": "sha512-F3u1fs/fce3FFk+DAxbxc78DF8x0cY09RRL8GnXLmkJ1jvx3TtPdWoTT5/NiYfI5ASqXBmfqJi9dZ3gxMx4lzw==",
"dev": true,
+ "license": "MIT",
"dependencies": {
"undici-types": "~6.19.8"
}
@@ -1496,16 +1501,17 @@
"license": "MIT"
},
"node_modules/@typescript-eslint/eslint-plugin": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.14.0.tgz",
- "integrity": "sha512-tqp8H7UWFaZj0yNO6bycd5YjMwxa6wIHOLZvWPkidwbgLCsBMetQoGj7DPuAlWa2yGO3H48xmPwjhsSPPCGU5w==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.16.0.tgz",
+ "integrity": "sha512-5YTHKV8MYlyMI6BaEG7crQ9BhSc8RxzshOReKwZwRWN0+XvvTOm+L/UYLCYxFpfwYuAAqhxiq4yae0CMFwbL7Q==",
"dev": true,
+ "license": "MIT",
"dependencies": {
"@eslint-community/regexpp": "^4.10.0",
- "@typescript-eslint/scope-manager": "8.14.0",
- "@typescript-eslint/type-utils": "8.14.0",
- "@typescript-eslint/utils": "8.14.0",
- "@typescript-eslint/visitor-keys": "8.14.0",
+ "@typescript-eslint/scope-manager": "8.16.0",
+ "@typescript-eslint/type-utils": "8.16.0",
+ "@typescript-eslint/utils": "8.16.0",
+ "@typescript-eslint/visitor-keys": "8.16.0",
"graphemer": "^1.4.0",
"ignore": "^5.3.1",
"natural-compare": "^1.4.0",
@@ -1529,15 +1535,16 @@
}
},
"node_modules/@typescript-eslint/parser": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.14.0.tgz",
- "integrity": "sha512-2p82Yn9juUJq0XynBXtFCyrBDb6/dJombnz6vbo6mgQEtWHfvHbQuEa9kAOVIt1c9YFwi7H6WxtPj1kg+80+RA==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.16.0.tgz",
+ "integrity": "sha512-D7DbgGFtsqIPIFMPJwCad9Gfi/hC0PWErRRHFnaCWoEDYi5tQUDiJCTmGUbBiLzjqAck4KcXt9Ayj0CNlIrF+w==",
"dev": true,
+ "license": "BSD-2-Clause",
"dependencies": {
- "@typescript-eslint/scope-manager": "8.14.0",
- "@typescript-eslint/types": "8.14.0",
- "@typescript-eslint/typescript-estree": "8.14.0",
- "@typescript-eslint/visitor-keys": "8.14.0",
+ "@typescript-eslint/scope-manager": "8.16.0",
+ "@typescript-eslint/types": "8.16.0",
+ "@typescript-eslint/typescript-estree": "8.16.0",
+ "@typescript-eslint/visitor-keys": "8.16.0",
"debug": "^4.3.4"
},
"engines": {
@@ -1557,13 +1564,14 @@
}
},
"node_modules/@typescript-eslint/scope-manager": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.14.0.tgz",
- "integrity": "sha512-aBbBrnW9ARIDn92Zbo7rguLnqQ/pOrUguVpbUwzOhkFg2npFDwTgPGqFqE0H5feXcOoJOfX3SxlJaKEVtq54dw==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.16.0.tgz",
+ "integrity": "sha512-mwsZWubQvBki2t5565uxF0EYvG+FwdFb8bMtDuGQLdCCnGPrDEDvm1gtfynuKlnpzeBRqdFCkMf9jg1fnAK8sg==",
"dev": true,
+ "license": "MIT",
"dependencies": {
- "@typescript-eslint/types": "8.14.0",
- "@typescript-eslint/visitor-keys": "8.14.0"
+ "@typescript-eslint/types": "8.16.0",
+ "@typescript-eslint/visitor-keys": "8.16.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1574,13 +1582,14 @@
}
},
"node_modules/@typescript-eslint/type-utils": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.14.0.tgz",
- "integrity": "sha512-Xcz9qOtZuGusVOH5Uk07NGs39wrKkf3AxlkK79RBK6aJC1l03CobXjJbwBPSidetAOV+5rEVuiT1VSBUOAsanQ==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.16.0.tgz",
+ "integrity": "sha512-IqZHGG+g1XCWX9NyqnI/0CX5LL8/18awQqmkZSl2ynn8F76j579dByc0jhfVSnSnhf7zv76mKBQv9HQFKvDCgg==",
"dev": true,
+ "license": "MIT",
"dependencies": {
- "@typescript-eslint/typescript-estree": "8.14.0",
- "@typescript-eslint/utils": "8.14.0",
+ "@typescript-eslint/typescript-estree": "8.16.0",
+ "@typescript-eslint/utils": "8.16.0",
"debug": "^4.3.4",
"ts-api-utils": "^1.3.0"
},
@@ -1591,6 +1600,9 @@
"type": "opencollective",
"url": "https://opencollective.com/typescript-eslint"
},
+ "peerDependencies": {
+ "eslint": "^8.57.0 || ^9.0.0"
+ },
"peerDependenciesMeta": {
"typescript": {
"optional": true
@@ -1598,10 +1610,11 @@
}
},
"node_modules/@typescript-eslint/types": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.14.0.tgz",
- "integrity": "sha512-yjeB9fnO/opvLJFAsPNYlKPnEM8+z4og09Pk504dkqonT02AyL5Z9SSqlE0XqezS93v6CXn49VHvB2G7XSsl0g==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.16.0.tgz",
+ "integrity": "sha512-NzrHj6thBAOSE4d9bsuRNMvk+BvaQvmY4dDglgkgGC0EW/tB3Kelnp3tAKH87GEwzoxgeQn9fNGRyFJM/xd+GQ==",
"dev": true,
+ "license": "MIT",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
},
@@ -1611,13 +1624,14 @@
}
},
"node_modules/@typescript-eslint/typescript-estree": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.14.0.tgz",
- "integrity": "sha512-OPXPLYKGZi9XS/49rdaCbR5j/S14HazviBlUQFvSKz3npr3NikF+mrgK7CFVur6XEt95DZp/cmke9d5i3vtVnQ==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.16.0.tgz",
+ "integrity": "sha512-E2+9IzzXMc1iaBy9zmo+UYvluE3TW7bCGWSF41hVWUE01o8nzr1rvOQYSxelxr6StUvRcTMe633eY8mXASMaNw==",
"dev": true,
+ "license": "BSD-2-Clause",
"dependencies": {
- "@typescript-eslint/types": "8.14.0",
- "@typescript-eslint/visitor-keys": "8.14.0",
+ "@typescript-eslint/types": "8.16.0",
+ "@typescript-eslint/visitor-keys": "8.16.0",
"debug": "^4.3.4",
"fast-glob": "^3.3.2",
"is-glob": "^4.0.3",
@@ -1643,6 +1657,7 @@
"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
"dev": true,
+ "license": "MIT",
"dependencies": {
"balanced-match": "^1.0.0"
}
@@ -1652,6 +1667,7 @@
"resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
"integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
"dev": true,
+ "license": "ISC",
"dependencies": {
"brace-expansion": "^2.0.1"
},
@@ -1663,15 +1679,16 @@
}
},
"node_modules/@typescript-eslint/utils": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.14.0.tgz",
- "integrity": "sha512-OGqj6uB8THhrHj0Fk27DcHPojW7zKwKkPmHXHvQ58pLYp4hy8CSUdTKykKeh+5vFqTTVmjz0zCOOPKRovdsgHA==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.16.0.tgz",
+ "integrity": "sha512-C1zRy/mOL8Pj157GiX4kaw7iyRLKfJXBR3L82hk5kS/GyHcOFmy4YUq/zfZti72I9wnuQtA/+xzft4wCC8PJdA==",
"dev": true,
+ "license": "MIT",
"dependencies": {
"@eslint-community/eslint-utils": "^4.4.0",
- "@typescript-eslint/scope-manager": "8.14.0",
- "@typescript-eslint/types": "8.14.0",
- "@typescript-eslint/typescript-estree": "8.14.0"
+ "@typescript-eslint/scope-manager": "8.16.0",
+ "@typescript-eslint/types": "8.16.0",
+ "@typescript-eslint/typescript-estree": "8.16.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1682,16 +1699,22 @@
},
"peerDependencies": {
"eslint": "^8.57.0 || ^9.0.0"
+ },
+ "peerDependenciesMeta": {
+ "typescript": {
+ "optional": true
+ }
}
},
"node_modules/@typescript-eslint/visitor-keys": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.14.0.tgz",
- "integrity": "sha512-vG0XZo8AdTH9OE6VFRwAZldNc7qtJ/6NLGWak+BtENuEUXGZgFpihILPiBvKXvJ2nFu27XNGC6rKiwuaoMbYzQ==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.16.0.tgz",
+ "integrity": "sha512-pq19gbaMOmFE3CbL0ZB8J8BFCo2ckfHBfaIsaOZgBIF4EoISJIdLX5xRhd0FGB0LlHReNRuzoJoMGpTjq8F2CQ==",
"dev": true,
+ "license": "MIT",
"dependencies": {
- "@typescript-eslint/types": "8.14.0",
- "eslint-visitor-keys": "^3.4.3"
+ "@typescript-eslint/types": "8.16.0",
+ "eslint-visitor-keys": "^4.2.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1701,6 +1724,19 @@
"url": "https://opencollective.com/typescript-eslint"
}
},
+ "node_modules/@typescript-eslint/visitor-keys/node_modules/eslint-visitor-keys": {
+ "version": "4.2.0",
+ "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.0.tgz",
+ "integrity": "sha512-UyLnSehNt62FFhSwjZlHmeokpRK59rcz29j+F1/aDgbkbRTk7wIc9XzdoasMUbRNKDM0qQt/+BJ4BrpFeABemw==",
+ "dev": true,
+ "license": "Apache-2.0",
+ "engines": {
+ "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+ },
+ "funding": {
+ "url": "https://opencollective.com/eslint"
+ }
+ },
"node_modules/acorn": {
"version": "8.14.0",
"resolved": "https://registry.npmjs.org/acorn/-/acorn-8.14.0.tgz",
@@ -2674,26 +2710,27 @@
}
},
"node_modules/eslint": {
- "version": "9.14.0",
- "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.14.0.tgz",
- "integrity": "sha512-c2FHsVBr87lnUtjP4Yhvk4yEhKrQavGafRA/Se1ouse8PfbfC/Qh9Mxa00yWsZRlqeUB9raXip0aiiUZkgnr9g==",
+ "version": "9.15.0",
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.15.0.tgz",
+ "integrity": "sha512-7CrWySmIibCgT1Os28lUU6upBshZ+GxybLOrmRzi08kS8MBuO8QA7pXEgYgY5W8vK3e74xv0lpjo9DbaGU9Rkw==",
"dev": true,
+ "license": "MIT",
"dependencies": {
"@eslint-community/eslint-utils": "^4.2.0",
"@eslint-community/regexpp": "^4.12.1",
- "@eslint/config-array": "^0.18.0",
- "@eslint/core": "^0.7.0",
- "@eslint/eslintrc": "^3.1.0",
- "@eslint/js": "9.14.0",
- "@eslint/plugin-kit": "^0.2.0",
+ "@eslint/config-array": "^0.19.0",
+ "@eslint/core": "^0.9.0",
+ "@eslint/eslintrc": "^3.2.0",
+ "@eslint/js": "9.15.0",
+ "@eslint/plugin-kit": "^0.2.3",
"@humanfs/node": "^0.16.6",
"@humanwhocodes/module-importer": "^1.0.1",
- "@humanwhocodes/retry": "^0.4.0",
+ "@humanwhocodes/retry": "^0.4.1",
"@types/estree": "^1.0.6",
"@types/json-schema": "^7.0.15",
"ajv": "^6.12.4",
"chalk": "^4.0.0",
- "cross-spawn": "^7.0.2",
+ "cross-spawn": "^7.0.5",
"debug": "^4.3.2",
"escape-string-regexp": "^4.0.0",
"eslint-scope": "^8.2.0",
@@ -2712,8 +2749,7 @@
"lodash.merge": "^4.6.2",
"minimatch": "^3.1.2",
"natural-compare": "^1.4.0",
- "optionator": "^0.9.3",
- "text-table": "^0.2.0"
+ "optionator": "^0.9.3"
},
"bin": {
"eslint": "bin/eslint.js"
@@ -2892,10 +2928,11 @@
}
},
"node_modules/eslint-plugin-import-x": {
- "version": "4.4.2",
- "resolved": "https://registry.npmjs.org/eslint-plugin-import-x/-/eslint-plugin-import-x-4.4.2.tgz",
- "integrity": "sha512-mDRXPSLQ0UQZQw91QdG4/qZT6hgeW2MJTczAbgPseUZuPEtIjjdPOolXroRkulnOn3fzj6gNgvk+wchMJiHElg==",
+ "version": "4.4.3",
+ "resolved": "https://registry.npmjs.org/eslint-plugin-import-x/-/eslint-plugin-import-x-4.4.3.tgz",
+ "integrity": "sha512-QBprHvhLsfDhP++2T1NnjsOUt6bLDX3NMHaYwAB1FD3xmYTkdFH+HS1OamGhz28jLkRyIZa6UNAzTxbHnJwz5w==",
"dev": true,
+ "license": "MIT",
"dependencies": {
"@typescript-eslint/utils": "^8.1.0",
"debug": "^4.3.4",
@@ -3022,10 +3059,11 @@
}
},
"node_modules/eslint-plugin-n": {
- "version": "17.13.2",
- "resolved": "https://registry.npmjs.org/eslint-plugin-n/-/eslint-plugin-n-17.13.2.tgz",
- "integrity": "sha512-MhBAKkT01h8cOXcTBTlpuR7bxH5OBUNpUXefsvwSVEy46cY4m/Kzr2osUCQvA3zJFD6KuCeNNDv0+HDuWk/OcA==",
+ "version": "17.14.0",
+ "resolved": "https://registry.npmjs.org/eslint-plugin-n/-/eslint-plugin-n-17.14.0.tgz",
+ "integrity": "sha512-maxPLMEA0rPmRpoOlxEclKng4UpDe+N5BJS4t24I3UKnN109Qcivnfs37KMy84G0af3bxjog5lKctP5ObsvcTA==",
"dev": true,
+ "license": "MIT",
"dependencies": {
"@eslint-community/eslint-utils": "^4.4.1",
"enhanced-resolve": "^5.17.1",
@@ -6035,12 +6073,6 @@
"node": ">=8"
}
},
- "node_modules/text-table": {
- "version": "0.2.0",
- "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
- "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
- "dev": true
- },
"node_modules/tmpl": {
"version": "1.0.5",
"dev": true,
@@ -6286,10 +6318,11 @@
}
},
"node_modules/typescript": {
- "version": "5.6.3",
- "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz",
- "integrity": "sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==",
+ "version": "5.7.2",
+ "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.7.2.tgz",
+ "integrity": "sha512-i5t66RHxDvVN40HfDd1PsEThGNnlMCMT3jMUuoh9/0TaqWevNontacunWyN02LA9/fIbEWlcHZcgTKb9QoaLfg==",
"dev": true,
+ "license": "Apache-2.0",
"bin": {
"tsc": "bin/tsc",
"tsserver": "bin/tsserver"
@@ -6299,14 +6332,15 @@
}
},
"node_modules/typescript-eslint": {
- "version": "8.14.0",
- "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.14.0.tgz",
- "integrity": "sha512-K8fBJHxVL3kxMmwByvz8hNdBJ8a0YqKzKDX6jRlrjMuNXyd5T2V02HIq37+OiWXvUUOXgOOGiSSOh26Mh8pC3w==",
+ "version": "8.16.0",
+ "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.16.0.tgz",
+ "integrity": "sha512-wDkVmlY6O2do4V+lZd0GtRfbtXbeD0q9WygwXXSJnC1xorE8eqyC2L1tJimqpSeFrOzRlYtWnUp/uzgHQOgfBQ==",
"dev": true,
+ "license": "MIT",
"dependencies": {
- "@typescript-eslint/eslint-plugin": "8.14.0",
- "@typescript-eslint/parser": "8.14.0",
- "@typescript-eslint/utils": "8.14.0"
+ "@typescript-eslint/eslint-plugin": "8.16.0",
+ "@typescript-eslint/parser": "8.16.0",
+ "@typescript-eslint/utils": "8.16.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -6315,6 +6349,9 @@
"type": "opencollective",
"url": "https://opencollective.com/typescript-eslint"
},
+ "peerDependencies": {
+ "eslint": "^8.57.0 || ^9.0.0"
+ },
"peerDependenciesMeta": {
"typescript": {
"optional": true
@@ -6514,10 +6551,11 @@
"license": "ISC"
},
"node_modules/yaml": {
- "version": "2.6.0",
- "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.6.0.tgz",
- "integrity": "sha512-a6ae//JvKDEra2kdi1qzCyrJW/WZCgFi8ydDV+eXExl95t+5R+ijnqHJbz9tmMh8FUjx3iv2fCQ4dclAQlO2UQ==",
+ "version": "2.6.1",
+ "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.6.1.tgz",
+ "integrity": "sha512-7r0XPzioN/Q9kXBro/XPnA6kznR73DHq+GXh5ON7ZozRO6aMjbmiBuKste2wslTFkC5d1dw0GooOCepZXJ2SAg==",
"dev": true,
+ "license": "ISC",
"bin": {
"yaml": "bin.mjs"
},
diff --git a/package.json b/package.json
index d24c2ee18..f72296fd2 100644
--- a/package.json
+++ b/package.json
@@ -14,19 +14,19 @@
"@types/debug": "^4.1.12",
"@types/jest": "^29.5.14",
"@types/jest-specific-snapshot": "^0.5.9",
- "@types/node": "^22.9.0",
+ "@types/node": "^22.9.3",
"@types/semver": "^7.5.8",
- "@typescript-eslint/eslint-plugin": "^8.14.0",
- "@typescript-eslint/parser": "^8.14.0",
+ "@typescript-eslint/eslint-plugin": "^8.16.0",
+ "@typescript-eslint/parser": "^8.16.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "9.14.0",
+ "eslint": "9.15.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
- "eslint-plugin-import-x": "^4.4.2",
+ "eslint-plugin-import-x": "^4.4.3",
"eslint-plugin-jest": "^28.9.0",
- "eslint-plugin-n": "^17.13.2",
+ "eslint-plugin-n": "^17.14.0",
"eslint-plugin-prettier": "^5.2.1",
"eslint-plugin-simple-import-sort": "^12.1.1",
"fast-sort": "^3.4.1",
@@ -38,9 +38,9 @@
"ts-jest": "^29.2.5",
"ts-node": "^10.9.2",
"tsconfig-paths": "^4.1.2",
- "typescript": "^5.6.3",
- "typescript-eslint": "^8.14.0",
- "yaml": "^2.6.0"
+ "typescript": "^5.7.2",
+ "typescript-eslint": "^8.16.0",
+ "yaml": "^2.6.1"
},
"bundleDependencies": [
"tests"
From c93185f22c872fbdb6f9c533d0d6d8593bfb789d Mon Sep 17 00:00:00 2001
From: Andrei GitHub Makarov
Date: Thu, 5 Dec 2024 19:58:39 +0200
Subject: [PATCH 06/11] Update ruby-build version to latest (#919)
---
runtimes/ruby/plugin.yaml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/runtimes/ruby/plugin.yaml b/runtimes/ruby/plugin.yaml
index a7355bbe0..1f738f00e 100644
--- a/runtimes/ruby/plugin.yaml
+++ b/runtimes/ruby/plugin.yaml
@@ -1,12 +1,12 @@
version: 0.1
downloads:
- name: ruby-build
- version: 20240319
+ version: 20241105
downloads:
- os:
linux: linux
macos: macos
- url: https://github.com/rbenv/ruby-build/archive/refs/tags/v20240319.tar.gz
+ url: https://github.com/rbenv/ruby-build/archive/refs/tags/v20241105.tar.gz
strip_components: 1
- name: ruby-install
version: 3.1.4
From 40820bc86f201ed5c93bd84bda9fcafc56a98b0d Mon Sep 17 00:00:00 2001
From: Tyler Jang
Date: Thu, 5 Dec 2024 10:06:43 -0800
Subject: [PATCH 07/11] (Fix): Bump runtime versions and fix tests (#926)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Tis the season to be green. Fixes some tests that slipped while
https://github.com/trunk-io/plugins/pull/920 was in the works:
- Upgrade to `jdk-23` (tested old snapshots)
- Upgraded rust to `1.82.0`
- Upgraded php linters and tools to support `php@8.4`
- Improved testing matchers
And readds the eslint fix from
https://github.com/trunk-io/plugins/pull/920 🙃
---
.github/dependabot.yaml | 2 +
.../circleci_v0.1.28811_CUSTOM.check.shot | 6 -
linters/detekt/detekt.test.ts | 2 +-
linters/ktlint/ktlint.test.ts | 10 +
linters/nixpkgs-fmt/nixpkgs_fmt.test.ts | 16 +-
linters/php-cs-fixer/php-cs-fixer.test.ts | 6 +-
linters/phpstan/plugin.yaml | 4 +-
...k.shot => phpstan_v2.0.3_basic.check.shot} | 0
linters/trivy/trivy.test.ts | 2 +-
linters/trivy/vuln_expected_issues.json | 974 ++++++++++++++----
linters/trunk-toolbox/plugin.yaml | 1 +
...runk_toolbox_v0.4.1_do_not_land.check.shot | 16 +-
package-lock.json | 54 +-
package.json | 2 +-
runtimes/java/plugin.yaml | 12 +-
runtimes/php/plugin.yaml | 6 +-
runtimes/rust/plugin.yaml | 2 +-
tests/driver/tool_driver.ts | 28 +-
tests/index.ts | 27 +-
tools/paratest/paratest.test.ts | 2 +-
tools/paratest/plugin.yaml | 3 +-
21 files changed, 912 insertions(+), 263 deletions(-)
rename linters/phpstan/test_data/{phpstan_v1.10.58_basic.check.shot => phpstan_v2.0.3_basic.check.shot} (100%)
diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 667b66339..2900b5a2a 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -18,6 +18,8 @@ updates:
interval: weekly
day: sunday
time: "10:00" # UTC
+ ignore:
+ - dependency-name: eslint
groups:
dependencies:
patterns:
diff --git a/linters/circleci/test_data/circleci_v0.1.28811_CUSTOM.check.shot b/linters/circleci/test_data/circleci_v0.1.28811_CUSTOM.check.shot
index f3c35c1f4..1926e4d4d 100644
--- a/linters/circleci/test_data/circleci_v0.1.28811_CUSTOM.check.shot
+++ b/linters/circleci/test_data/circleci_v0.1.28811_CUSTOM.check.shot
@@ -1,6 +1,4 @@
// Jest Snapshot v1, https://goo.gl/fbAQLP
-// trunk-upgrade-validation:RELEASE
-
exports[`Testing linter circleci test CUSTOM 1`] = `
{
@@ -37,8 +35,6 @@ exports[`Testing linter circleci test CUSTOM 1`] = `
- | | | | - environment
- | | | | - aws_auth
- | | | | - auth
- - | | | | Passed keys:
- - | | | | - foo
- | | | 2. [#/jobs/install-node-example/docker/1] required key [image] not found
- | | 2. [#/jobs/install-node-example/steps/3] 0 subschemas matched instead of one
- | | | 1. [#/jobs/install-node-example/steps/3] expected type: String, found: Mapping
@@ -53,8 +49,6 @@ exports[`Testing linter circleci test CUSTOM 1`] = `
- | | | | Permitted keys:
- | | | | - when
- | | | | - unless
- - | | | | Passed keys:
- - | | | | - rerun
- | | | 3. [#/jobs/install-node-example/steps/3/rerun] no subschema matched out of the total 2 subschemas
- | | | | 1. [#/jobs/install-node-example/steps/3/rerun] expected type: Mapping, found: Sequence
- | | | | | SCHEMA:
diff --git a/linters/detekt/detekt.test.ts b/linters/detekt/detekt.test.ts
index d064c44e1..2b818af41 100644
--- a/linters/detekt/detekt.test.ts
+++ b/linters/detekt/detekt.test.ts
@@ -45,7 +45,7 @@ const gradlePreCheck: TestCallback = (driver) => {
driver.writeFile(trunkYamlPath, newContents);
driver.runTrunkSync(["install"]);
- const javaPath = recurseLevels(path.resolve(DOWNLOAD_CACHE, "jdk-13"), 1);
+ const javaPath = recurseLevels(path.resolve(DOWNLOAD_CACHE, "jdk-23"), 1);
const finalContents = newContents.concat(` environment:
- name: JAVA_HOME
value: ${javaPath}
diff --git a/linters/ktlint/ktlint.test.ts b/linters/ktlint/ktlint.test.ts
index 2f8b213e3..4afc857ee 100644
--- a/linters/ktlint/ktlint.test.ts
+++ b/linters/ktlint/ktlint.test.ts
@@ -4,6 +4,16 @@ import { TrunkLintDriver } from "tests/driver";
// Grab the root .editorconfig
const preCheck = (driver: TrunkLintDriver) => {
driver.copyFileFromRoot(".editorconfig");
+
+ // Older versions of ktlint require an older jdk
+ const trunkYamlPath = ".trunk/trunk.yaml";
+ const currentContents = driver.readFile(trunkYamlPath);
+ const newContents = currentContents.concat(`runtimes:
+ definitions:
+ - type: java
+ download: jdk-13
+`);
+ driver.writeFile(trunkYamlPath, newContents);
};
linterFmtTest({ linterName: "ktlint", preCheck });
diff --git a/linters/nixpkgs-fmt/nixpkgs_fmt.test.ts b/linters/nixpkgs-fmt/nixpkgs_fmt.test.ts
index 1ce6c05c1..b72b5e68f 100644
--- a/linters/nixpkgs-fmt/nixpkgs_fmt.test.ts
+++ b/linters/nixpkgs-fmt/nixpkgs_fmt.test.ts
@@ -1,18 +1,6 @@
-import { linterFmtTest, TestCallback } from "tests";
+import { linterFmtTest } from "tests";
import { osTimeoutMultiplier, skipOS } from "tests/utils";
jest.setTimeout(600000 * osTimeoutMultiplier);
-// Earlier nixpkgs-fmt transitive dependencies are no longer
-// supported through older rust runtime installs.
-const preCheck: TestCallback = (driver) => {
- const trunkYamlPath = ".trunk/trunk.yaml";
- const currentContents = driver.readFile(trunkYamlPath);
- const newContents = currentContents.concat(`runtimes:
- enabled:
- - rust@1.71.1
-`);
- driver.writeFile(trunkYamlPath, newContents);
-};
-
-linterFmtTest({ linterName: "nixpkgs-fmt", preCheck, skipTestIf: skipOS(["win32"]) });
+linterFmtTest({ linterName: "nixpkgs-fmt", skipTestIf: skipOS(["win32"]) });
diff --git a/linters/php-cs-fixer/php-cs-fixer.test.ts b/linters/php-cs-fixer/php-cs-fixer.test.ts
index 5b52856fb..44d3f1008 100644
--- a/linters/php-cs-fixer/php-cs-fixer.test.ts
+++ b/linters/php-cs-fixer/php-cs-fixer.test.ts
@@ -1,7 +1,9 @@
import { linterFmtTest } from "tests";
-import { skipOS } from "tests/utils";
linterFmtTest({
linterName: "php-cs-fixer",
- skipTestIf: skipOS(["win32"]),
+ // Next release will include support for php@8.4
+ // https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases/tag/v3.65.0
+ skipTestIf: () => true,
+ // skipTestIf: skipOS(["win32"]),
});
diff --git a/linters/phpstan/plugin.yaml b/linters/phpstan/plugin.yaml
index 9f13e3501..197664e8b 100644
--- a/linters/phpstan/plugin.yaml
+++ b/linters/phpstan/plugin.yaml
@@ -4,7 +4,7 @@ tools:
- name: phpstan
runtime: php
package: phpstan/phpstan
- known_good_version: 1.10.58
+ known_good_version: 2.0.3
shims: [phpstan]
environment:
- name: PATH
@@ -16,7 +16,7 @@ lint:
definitions:
- name: phpstan
main_tool: phpstan
- known_good_version: 1.10.58
+ known_good_version: 2.0.3
description: PHP Static Analysis Tool
suggest_if: never
commands:
diff --git a/linters/phpstan/test_data/phpstan_v1.10.58_basic.check.shot b/linters/phpstan/test_data/phpstan_v2.0.3_basic.check.shot
similarity index 100%
rename from linters/phpstan/test_data/phpstan_v1.10.58_basic.check.shot
rename to linters/phpstan/test_data/phpstan_v2.0.3_basic.check.shot
diff --git a/linters/trivy/trivy.test.ts b/linters/trivy/trivy.test.ts
index 9172f7b60..874f36a1f 100644
--- a/linters/trivy/trivy.test.ts
+++ b/linters/trivy/trivy.test.ts
@@ -53,7 +53,7 @@ fuzzyLinterCheckTest({
linterName: "trivy",
testName: "fs-vuln",
args: "-a",
- fileIssueAssertionCallback: createFuzzyMatcher(() => vulnExpectedFileIssues, 20),
+ fileIssueAssertionCallback: createFuzzyMatcher(() => vulnExpectedFileIssues, 40),
preCheck: callbackGenerator("fs-vuln"),
});
diff --git a/linters/trivy/vuln_expected_issues.json b/linters/trivy/vuln_expected_issues.json
index 901231bd8..cd8958803 100644
--- a/linters/trivy/vuln_expected_issues.json
+++ b/linters/trivy/vuln_expected_issues.json
@@ -1,502 +1,1122 @@
[
{
+ "file": "test_data/Gemfile.lock",
"line": "5",
+ "message": "Vulnerability in 'actionpack': rubygem-actionpack: Denial of Service in Action Dispatch. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
"code": "CVE-2023-22792",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'actionpack': Denial of Service in Action Dispatch. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
"line": "5",
+ "message": "Vulnerability in 'actionpack': rubygem-actionpack: Denial of Service in Action Dispatch. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
"code": "CVE-2023-22795",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'actionpack': Denial of Service in Action Dispatch. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
"line": "5",
+ "message": "Vulnerability in 'actionpack': actionpack: Possible XSS via User Supplied Values to redirect_to. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7.4, >= 7.0.5.1 or higher.",
"code": "CVE-2023-28362",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'actionpack': Possible XSS via User Supplied Values to redirect_to. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7.4, >= 7.0.5.1 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
+ "line": "5",
+ "message": "Vulnerability in 'actionpack': rubygem-actionpack: Possible ReDoS vulnerability in query parameter filtering in Action Dispatch. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7.9, ~> 7.0.8.5, ~> 7.1.4, >= 7.1.4.1, >= 7.2.1.1 or higher.",
+ "code": "CVE-2024-41128",
+ "level": "LEVEL_LOW",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "5",
+ "message": "Vulnerability in 'actionpack': rubygem-actionpack: Possible ReDoS vulnerability in HTTP Token authentication in Action Controller. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7.9, ~> 7.0.8.5, ~> 7.1.4, >= 7.1.4.1, >= 7.2.1.1 or higher.",
+ "code": "CVE-2024-47887",
+ "level": "LEVEL_LOW",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "8",
+ "message": "Vulnerability in 'actionmailer': rubygem-actionmailer: Possible ReDoS vulnerability in block_format in Action Mailer. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7.9, ~> 7.0.8.5, ~> 7.1.4, >= 7.1.4.1, >= 7.2.1.1 or higher.",
+ "code": "CVE-2024-47889",
+ "level": "LEVEL_LOW",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
"line": "10",
+ "message": "Vulnerability in 'actionview': rails: DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7.3, >= 7.0.4.3 or higher.",
"code": "CVE-2023-23913",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'actionview': DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7.3, >= 7.0.4.3 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
"line": "16",
- "code": "CVE-2023-22796",
- "level": "LEVEL_HIGH",
+ "message": "Vulnerability in 'activesupport': rubygem-activesupport: File Disclosure of Locally Encrypted Files. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7, >= 6.1.7.5, >= 7.0.7.1 or higher.",
+ "code": "CVE-2023-38037",
+ "level": "LEVEL_LOW",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'activesupport': Regular Expression Denial of Service. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
"line": "16",
+ "message": "Vulnerability in 'activesupport': rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7, >= 6.1.7.3, >= 7.0.4.3 or higher.",
"code": "CVE-2023-28120",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'activesupport': Possible XSS in SafeBuffer#bytesplice. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7, >= 6.1.7.3, >= 7.0.4.3 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "16",
+ "message": "Vulnerability in 'activesupport': rubygem-activesupport: Regular Expression Denial of Service. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
+ "code": "CVE-2023-22796",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
"line": "34",
+ "message": "Vulnerability in 'activerecord': rubygem-activerecord: Denial of Service. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
"code": "CVE-2022-44566",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'activerecord': Denial of Service. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 5.2.8, >= 5.2.8.15, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
+ "line": "38",
+ "message": "Vulnerability in 'activestorage': rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage. Current version is vulnerable: 5.2.8.1. Patch available: upgrade to ~> 6.1.7, >= 6.1.7.7, >= 7.0.8.1 or higher.",
+ "code": "CVE-2024-26144",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
"line": "97",
- "code": "GHSA-pxvg-2qj5-37jq",
+ "message": "Vulnerability in 'nokogiri': Use-after-free in libxml2 via Nokogiri::XML::Reader. Current version is vulnerable: 1.14.1. Patch available: upgrade to ~> 1.15.6, >= 1.16.2 or higher.",
+ "code": "GHSA-xc9x-jj77-9p9j",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "97",
+ "message": "Vulnerability in 'nokogiri': Use-after-free in libxml2 via Nokogiri::XML::Reader. Current version is vulnerable: 1.14.1. Patch available: upgrade to 1.15.6, 1.16.2 or higher.",
+ "code": "GHSA-vcc3-rw6f-jv97",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "97",
+ "message": "Vulnerability in 'nokogiri': Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459. Current version is vulnerable: 1.14.1. Patch available: upgrade to >= 1.16.5 or higher.",
+ "code": "GHSA-r95h-9x8f-r3f7",
+ "level": "LEVEL_LOW",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "97",
"message": "Vulnerability in 'nokogiri': Update packaged libxml2 to v2.10.4 to resolve multiple CVEs. Current version is vulnerable: 1.14.1. Patch available: upgrade to >= 1.14.3 or higher.",
- "file": "test_data/Gemfile.lock"
+ "code": "GHSA-pxvg-2qj5-37jq",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
+ "line": "99",
+ "message": "Vulnerability in 'puma': rubygem-puma: Header normalization allows for client to clobber proxy set headers. Current version is vulnerable: 4.3.12. Patch available: upgrade to ~> 5.6.9, >= 6.4.3 or higher.",
+ "code": "CVE-2024-45614",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "99",
+ "message": "Vulnerability in 'puma': rubygem-puma: HTTP request smuggling when parsing chunked Transfer-Encoding Bodies. Current version is vulnerable: 4.3.12. Patch available: upgrade to ~> 5.6.8, >= 6.4.2 or higher.",
+ "code": "CVE-2024-21647",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "99",
+ "message": "Vulnerability in 'puma': rubygem-puma: HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers. Current version is vulnerable: 4.3.12. Patch available: upgrade to ~> 5.6.7, >= 6.3.1 or higher.",
+ "code": "CVE-2023-40175",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
"line": "102",
+ "message": "Vulnerability in 'rack': rubygem-rack: Denial of service in Multipart MIME parsing. Current version is vulnerable: 2.2.6.2. Patch available: upgrade to ~> 2.0.9, >= 2.0.9.3, ~> 2.1.4, >= 2.1.4.3, ~> 2.2.6, >= 2.2.6.3, >= 3.0.4.2 or higher.",
"code": "CVE-2023-27530",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'rack': Denial of service in Multipart MIME parsing. Current version is vulnerable: 2.2.6.2. Patch available: upgrade to ~> 2.0.9, >= 2.0.9.3, ~> 2.1.4, >= 2.1.4.3, ~> 2.2.6, >= 2.2.6.3, >= 3.0.4.2 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
"line": "102",
+ "message": "Vulnerability in 'rack': rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing. Current version is vulnerable: 2.2.6.2. Patch available: upgrade to ~> 2.0.9, >= 2.0.9.4, ~> 2.1.4, >= 2.1.4.4, ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 or higher.",
+ "code": "CVE-2024-26146",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/Gemfile.lock",
+ "line": "102",
+ "message": "Vulnerability in 'rack': rubygem-rack: denial of service in header parsing. Current version is vulnerable: 2.2.6.2. Patch available: upgrade to ~> 2.0, >= 2.2.6.4, >= 3.0.6.1 or higher.",
"code": "CVE-2023-27539",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'rack': denial of service in header parsing. Current version is vulnerable: 2.2.6.2. Patch available: upgrade to ~> 2.0, >= 2.2.6.4, >= 3.0.6.1 or higher.",
- "file": "test_data/Gemfile.lock"
+ "isSecurity": true
},
{
- "line": "7",
- "code": "CVE-2022-30781",
- "level": "LEVEL_HIGH",
+ "file": "test_data/Gemfile.lock",
+ "line": "102",
+ "message": "Vulnerability in 'rack': rubygem-rack: Possible DoS Vulnerability with Range Header in Rack. Current version is vulnerable: 2.2.6.2. Patch available: upgrade to ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 or higher.",
+ "code": "CVE-2024-26141",
+ "level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'code.gitea.io/gitea': Shell command injection in gitea. Current version is vulnerable: 1.9.0-dev. Patch available: upgrade to 1.16.7 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/Gemfile.lock",
+ "line": "102",
+ "message": "Vulnerability in 'rack': rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing. Current version is vulnerable: 2.2.6.2. Patch available: upgrade to ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 or higher.",
+ "code": "CVE-2024-25126",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
"line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': code.gitea.io/gitea Open Redirect vulnerability. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.19.4 or higher.",
"code": "CVE-2023-3515",
"level": "LEVEL_LOW",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'code.gitea.io/gitea': code.gitea.io/gitea Open Redirect vulnerability. Current version is vulnerable: 1.9.0-dev. Patch available: upgrade to 1.19.4 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "7",
- "code": "CVE-2021-28378",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Gitea erroneous repo clones. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.17.2 or higher.",
+ "code": "CVE-2022-38795",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Gitea: Stored XSS due to improper sanitization. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.22.1 or higher.",
+ "code": "CVE-2024-6886",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Gitea allowed assignment of private issues. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.16.9 or higher.",
+ "code": "CVE-2022-38183",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'code.gitea.io/gitea': Cross-site Scripting in Gitea. Current version is vulnerable: 1.9.0-dev. Patch available: upgrade to 1.13.4 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Shell command injection in gitea. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.16.7 or higher.",
+ "code": "CVE-2022-30781",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Arbitrary file deletion in gitea. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.16.4 or higher.",
"code": "CVE-2022-27313",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'code.gitea.io/gitea': Arbitrary file deletion in gitea. Current version is vulnerable: 1.9.0-dev. Patch available: upgrade to 1.16.4 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Stored Cross-site Scripting in gitea. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.16.9 or higher.",
"code": "CVE-2022-1928",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'code.gitea.io/gitea': Stored Cross-site Scripting in gitea. Current version is vulnerable: 1.9.0-dev. Patch available: upgrade to 1.16.9 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "7",
- "code": "CVE-2022-0905",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Gogs and Gitea SSRF Vulnerability. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.16.0-rc1 or higher.",
+ "code": "CVE-2018-15192",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'code.gitea.io/gitea': Gitea Missing Authorization vulnerability. Current version is vulnerable: 1.9.0-dev. Patch available: upgrade to 1.16.4 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Arbitrary Code Execution in Gitea. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.12.6 or higher.",
+ "code": "CVE-2020-14144",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Cross-site Scripting in Gitea. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.13.4 or higher.",
+ "code": "CVE-2021-28378",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Path Traversal in Gitea. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.13.6 or higher.",
"code": "CVE-2021-29134",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'code.gitea.io/gitea': Path Traversal in Gitea. Current version is vulnerable: 1.9.0-dev. Patch available: upgrade to 1.13.6 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
+ "line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Gitea Missing Authorization vulnerability. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.16.4 or higher.",
+ "code": "CVE-2022-0905",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "7",
+ "message": "Vulnerability in 'code.gitea.io/gitea': Gitea Open Redirect. Current version is vulnerable: v1.9.0-dev. Patch available: upgrade to 1.16.5 or higher.",
+ "code": "CVE-2022-1058",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
"line": "40",
+ "message": "Vulnerability in 'github.com/dgrijalva/jwt-go': jwt-go: access restriction bypass vulnerability. Current version is vulnerable: v3.2.0+incompatible.",
"code": "CVE-2020-26160",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/dgrijalva/jwt-go': jwt-go: access restriction bypass vulnerability. Current version is vulnerable: 3.2.0+incompatible.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': gitea: Sanitize and Escape refs in git backend. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.17.3 or higher.",
+ "code": "CVE-2022-42968",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Cross-site Scripting in Gitea. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.5.1 or higher.",
"code": "CVE-2021-45329",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/go-gitea/gitea': Cross-site Scripting in Gitea. Current version is vulnerable: 1.2.3. Patch available: upgrade to 1.5.1 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "58",
- "code": "CVE-2022-42968",
- "level": "LEVEL_HIGH",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Open redirect in Gitea. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.4.3 or higher.",
+ "code": "CVE-2021-45328",
+ "level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/go-gitea/gitea': Sanitize and Escape refs in git backend. Current version is vulnerable: 1.2.3. Patch available: upgrade to 1.17.3 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Capture-replay in Gitea. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.11.2 or higher.",
"code": "CVE-2021-45327",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/go-gitea/gitea': Capture-replay in Gitea. Current version is vulnerable: 1.2.3. Patch available: upgrade to 1.11.2 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Cross Site Request Forgery in Gitea. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.5.2 or higher.",
"code": "CVE-2021-45326",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/go-gitea/gitea': Cross Site Request Forgery in Gitea. Current version is vulnerable: 1.2.3. Patch available: upgrade to 1.5.2 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Gitea displaying raw OpenID error in UI. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.7.0 or higher.",
"code": "CVE-2021-45325",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/go-gitea/gitea': Gitea displaying raw OpenID error in UI. Current version is vulnerable: 1.2.3. Patch available: upgrade to 1.7.0 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Improper Access Control in Gitea. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.12.6 or higher.",
+ "code": "CVE-2020-28991",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Denial of Service in Gitea. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.12.0 or higher.",
"code": "CVE-2020-13246",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/go-gitea/gitea': Denial of Service in Gitea. Current version is vulnerable: 1.2.3. Patch available: upgrade to 1.12.0 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "58",
- "code": "CVE-2021-45328",
- "level": "LEVEL_MEDIUM",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Gitea Remote Code Execution. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.7.6 or higher.",
+ "code": "CVE-2019-11229",
+ "level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/go-gitea/gitea': Open redirect in Gitea. Current version is vulnerable: 1.2.3. Patch available: upgrade to 1.4.3 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
- "line": "84",
- "code": "CVE-2022-45004",
+ "file": "test_data/go.mod",
+ "line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Gitea Improper Input Validation. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.7.6 or higher.",
+ "code": "CVE-2019-11228",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "58",
+ "message": "Vulnerability in 'github.com/go-gitea/gitea': Gitea Exposes Private Email Addresses. Current version is vulnerable: v1.2.3. Patch available: upgrade to 1.5.1 or higher.",
+ "code": "CVE-2018-1000803",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/gophish/gophish': Gophish vulnerable to Cross-site Scripting via crafted landing page. Current version is vulnerable: 0.1.2.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "84",
- "code": "CVE-2022-25295",
+ "message": "Vulnerability in 'github.com/gophish/gophish': Gophish vulnerable to Server-Side Request Forgery. Current version is vulnerable: v0.1.2. Patch available: upgrade to 0.11.0 or higher.",
+ "code": "CVE-2020-24710",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/gophish/gophish': Gophish before 0.12.0 vulnerable to Open Redirect. Current version is vulnerable: 0.1.2. Patch available: upgrade to 0.12.0 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "84",
- "code": "CVE-2019-16146",
+ "message": "Vulnerability in 'github.com/gophish/gophish': Gophish vulnerable to Cross-site Scripting via crafted landing page. Current version is vulnerable: v0.1.2.",
+ "code": "CVE-2022-45004",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/gophish/gophish': Gophish XSS Vulnerability. Current version is vulnerable: 0.1.2. Patch available: upgrade to 0.9.0 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "84",
+ "message": "Vulnerability in 'github.com/gophish/gophish': Gophish vulnerable to Denial of Service via crafted payload involving autofocus. Current version is vulnerable: v0.1.2.",
"code": "CVE-2022-45003",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/gophish/gophish': Gophish vulnerable to Denial of Service via crafted payload involving autofocus. Current version is vulnerable: 0.1.2.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "84",
- "code": "CVE-2020-24710",
+ "message": "Vulnerability in 'github.com/gophish/gophish': Gophish before 0.12.0 vulnerable to Open Redirect. Current version is vulnerable: v0.1.2. Patch available: upgrade to 0.12.0 or higher.",
+ "code": "CVE-2022-25295",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "84",
+ "message": "Vulnerability in 'github.com/gophish/gophish': Gophish XSS Vulnerability. Current version is vulnerable: v0.1.2. Patch available: upgrade to 0.9.0 or higher.",
+ "code": "CVE-2019-16146",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/gophish/gophish': Gophish vulnerable to Server-Side Request Forgery. Current version is vulnerable: 0.1.2. Patch available: upgrade to 0.11.0 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "161",
+ "message": "Vulnerability in 'github.com/unknwon/cae': github.com/unknwon/cae Path Traversal vulnerability. Current version is vulnerable: v1.0.0. Patch available: upgrade to 1.0.1 or higher.",
"code": "CVE-2020-7668",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/unknwon/cae': Path Traversal in github.com/unknwon/cae/tz. Current version is vulnerable: 1.0.0. Patch available: upgrade to 1.0.1 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "161",
+ "message": "Vulnerability in 'github.com/unknwon/cae': Path Traversal in github.com/unknwon/cae/zip. Current version is vulnerable: v1.0.0. Patch available: upgrade to 1.0.1 or higher.",
"code": "CVE-2020-7664",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'github.com/unknwon/cae': Path Traversal in github.com/unknwon/cae/zip. Current version is vulnerable: 1.0.0. Patch available: upgrade to 1.0.1 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "172",
- "code": "CVE-2022-27191",
+ "message": "Vulnerability in 'golang.org/x/crypto': A message-forgery issue was discovered in crypto/openpgp/clearsign/cle ... Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20190424203555-c05e17bb3b2d or higher.",
+ "code": "CVE-2019-11841",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "172",
+ "message": "Vulnerability in 'golang.org/x/crypto': golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter. Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20190320223903-b7391e95e576 or higher.",
+ "code": "CVE-2019-11840",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "172",
+ "message": "Vulnerability in 'golang.org/x/crypto': golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference. Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20201216223049-8b5274cf687f or higher.",
+ "code": "CVE-2020-29652",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/crypto': crash in a golang.org/x/crypto/ssh server. Current version is vulnerable: 0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20220314234659-1baeb1ce4c0b or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "172",
- "code": "CVE-2021-43565",
+ "message": "Vulnerability in 'golang.org/x/crypto': golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service. Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20200124225646-8b5121be2f68 or higher.",
+ "code": "CVE-2020-7919",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/crypto': empty plaintext packet causes panic. Current version is vulnerable: 0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20211202192323-5770296d904e or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "172",
+ "message": "Vulnerability in 'golang.org/x/crypto': golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic. Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20200220183623-bac4c82f6975 or higher.",
"code": "CVE-2020-9283",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/crypto': golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic. Current version is vulnerable: 0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20200220183623-bac4c82f6975 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "172",
- "code": "CVE-2020-7919",
+ "message": "Vulnerability in 'golang.org/x/crypto': golang.org/x/crypto: empty plaintext packet causes panic. Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20211202192323-5770296d904e or higher.",
+ "code": "CVE-2021-43565",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/crypto': golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service. Current version is vulnerable: 0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20200124225646-8b5121be2f68 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "172",
- "code": "CVE-2019-11840",
- "level": "LEVEL_MEDIUM",
+ "message": "Vulnerability in 'golang.org/x/crypto': golang: crash in a golang.org/x/crypto/ssh server. Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20220314234659-1baeb1ce4c0b or higher.",
+ "code": "CVE-2022-27191",
+ "level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/crypto': golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter. Current version is vulnerable: 0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20190320223903-b7391e95e576 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "172",
- "code": "CVE-2020-29652",
- "level": "LEVEL_HIGH",
+ "message": "Vulnerability in 'golang.org/x/crypto': ssh: Prefix truncation attack on Binary Packet Protocol (BPP). Current version is vulnerable: v0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.17.0 or higher.",
+ "code": "CVE-2023-48795",
+ "level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/crypto': golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference. Current version is vulnerable: 0.0.0-20190308221718-c2843e01d9a2. Patch available: upgrade to 0.0.0-20201216223049-8b5274cf687f or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "174",
- "code": "CVE-2021-33194",
- "level": "LEVEL_HIGH",
+ "message": "Vulnerability in 'golang.org/x/net': HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack). Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.17.0 or higher.",
+ "code": "CVE-2023-44487",
+ "level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/net': golang: x/net/html: infinite loop in ParseFragment. Current version is vulnerable: 0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.0.0-20210520170846-37e1c6afe023 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests. Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.4.0 or higher.",
+ "code": "CVE-2022-41717",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding. Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.7.0 or higher.",
"code": "CVE-2022-41723",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/net': avoid quadratic complexity in HPACK decoding. Current version is vulnerable: 0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.7.0 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': A malicious HTTP/2 client which rapidly creates requests and immediate ... Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.17.0 or higher.",
+ "code": "CVE-2023-39325",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': golang.org/x/net/html: Cross site scripting. Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.13.0 or higher.",
+ "code": "CVE-2023-3978",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': golang: net/http: handle server errors after sending GOAWAY. Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.0.0-20220906165146-f3363e06e74c or higher.",
"code": "CVE-2022-27664",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/net': handle server errors after sending GOAWAY. Current version is vulnerable: 0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.0.0-20220906165146-f3363e06e74c or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS. Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.23.0 or higher.",
+ "code": "CVE-2023-45288",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': golang: x/net/html: infinite loop in ParseFragment. Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.0.0-20210520170846-37e1c6afe023 or higher.",
+ "code": "CVE-2021-33194",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "174",
+ "message": "Vulnerability in 'golang.org/x/net': golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header. Current version is vulnerable: v0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.0.0-20210428140749-89ef3d95e781 or higher.",
"code": "CVE-2021-31525",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/net': golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header. Current version is vulnerable: 0.0.0-20200324143707-d3edc9973b7e. Patch available: upgrade to 0.0.0-20210428140749-89ef3d95e781 or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
"line": "175",
+ "message": "Vulnerability in 'golang.org/x/sys': golang: syscall: faccessat checks wrong group. Current version is vulnerable: v0.0.0-20200331124033-c3d80250170d. Patch available: upgrade to 0.0.0-20220412211240-33da011f77ad or higher.",
"code": "CVE-2022-29526",
"level": "LEVEL_MEDIUM",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'golang.org/x/sys': faccessat checks wrong group. Current version is vulnerable: 0.0.0-20200331124033-c3d80250170d. Patch available: upgrade to 0.0.0-20220412211240-33da011f77ad or higher.",
- "file": "test_data/go.mod"
+ "isSecurity": true
},
{
+ "file": "test_data/go.mod",
+ "line": "189",
+ "message": "Vulnerability in 'gopkg.in/src-d/go-git.v4': go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients. Current version is vulnerable: v4.11.0.",
+ "code": "CVE-2023-49569",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/go.mod",
+ "line": "189",
+ "message": "Vulnerability in 'gopkg.in/src-d/go-git.v4': go-git: Maliciously crafted Git server replies can cause DoS on go-git clients. Current version is vulnerable: v4.11.0.",
+ "code": "CVE-2023-49568",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/nested/requirements.txt",
"line": "1",
+ "message": "Vulnerability in 'pillow': Pillow before 9.2.0 performs Improper Handling of Highly Compressed GI ... Current version is vulnerable: 9.1.1. Patch available: upgrade to 9.2.0 or higher.",
"code": "CVE-2022-45198",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'pillow': Pillow before 9.2.0 performs Improper Handling of Highly Compressed GI ... Current version is vulnerable: 9.1.1. Patch available: upgrade to 9.2.0 or higher.",
- "file": "test_data/nested/requirements.txt"
+ "isSecurity": true
},
{
+ "file": "test_data/nested/requirements.txt",
"line": "1",
- "code": "CVE-2022-45198",
+ "message": "Vulnerability in 'pillow': python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.0.0 or higher.",
+ "code": "CVE-2023-44271",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/nested/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': libwebp: Heap buffer overflow in WebP Codec. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.0.1 or higher.",
+ "code": "CVE-2023-4863",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/nested/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': pillow: Arbitrary Code Execution via the environment parameter. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.2.0 or higher.",
+ "code": "CVE-2023-50447",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/nested/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': python-pillow: buffer overflow in _imagingcms.c. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.3.0 or higher.",
+ "code": "CVE-2024-28219",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/nested/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': Bundled libwebp in Pillow vulnerable. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.0.1 or higher.",
+ "code": "GHSA-56pw-mpj4-fxww",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/no_errors/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': Bundled libwebp in Pillow vulnerable. Current version is vulnerable: 9.3.0. Patch available: upgrade to 10.0.1 or higher.",
+ "code": "GHSA-56pw-mpj4-fxww",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/no_errors/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': python-pillow: buffer overflow in _imagingcms.c. Current version is vulnerable: 9.3.0. Patch available: upgrade to 10.3.0 or higher.",
+ "code": "CVE-2024-28219",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/no_errors/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': pillow: Arbitrary Code Execution via the environment parameter. Current version is vulnerable: 9.3.0. Patch available: upgrade to 10.2.0 or higher.",
+ "code": "CVE-2023-50447",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/no_errors/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': libwebp: Heap buffer overflow in WebP Codec. Current version is vulnerable: 9.3.0. Patch available: upgrade to 10.0.1 or higher.",
+ "code": "CVE-2023-4863",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/no_errors/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument. Current version is vulnerable: 9.3.0. Patch available: upgrade to 10.0.0 or higher.",
+ "code": "CVE-2023-44271",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "1",
"message": "Vulnerability in 'pillow': Pillow before 9.2.0 performs Improper Handling of Highly Compressed GI ... Current version is vulnerable: 9.1.1. Patch available: upgrade to 9.2.0 or higher.",
- "file": "test_data/requirements.txt"
+ "code": "CVE-2022-45198",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.0.0 or higher.",
+ "code": "CVE-2023-44271",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': libwebp: Heap buffer overflow in WebP Codec. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.0.1 or higher.",
+ "code": "CVE-2023-4863",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
},
{
+ "file": "test_data/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': pillow: Arbitrary Code Execution via the environment parameter. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.2.0 or higher.",
+ "code": "CVE-2023-50447",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': python-pillow: buffer overflow in _imagingcms.c. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.3.0 or higher.",
+ "code": "CVE-2024-28219",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "1",
+ "message": "Vulnerability in 'pillow': Bundled libwebp in Pillow vulnerable. Current version is vulnerable: 9.1.1. Patch available: upgrade to 10.0.1 or higher.",
+ "code": "GHSA-56pw-mpj4-fxww",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
"line": "2",
+ "message": "Vulnerability in 'langchain': langchain Code Injection vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.236 or higher.",
+ "code": "CVE-2023-36095",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': langchain arbitrary code execution vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.247 or higher.",
+ "code": "CVE-2023-36258",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': langchain SQL Injection vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.247 or higher.",
"code": "CVE-2023-36189",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'langchain': langchain SQL Injection vulnerability. Current version is vulnerable: 0.0.171.",
- "file": "test_data/requirements.txt"
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': langchain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.236 or higher.",
+ "code": "CVE-2023-36188",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': langchain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.312 or higher.",
+ "code": "CVE-2023-36281",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
},
{
+ "file": "test_data/requirements.txt",
"line": "2",
+ "message": "Vulnerability in 'langchain': Langchain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.247 or higher.",
"code": "CVE-2023-34541",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'langchain': Langchain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171.",
- "file": "test_data/requirements.txt"
+ "isSecurity": true
},
{
+ "file": "test_data/requirements.txt",
"line": "2",
+ "message": "Vulnerability in 'langchain': Langchain OS Command Injection vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.225 or higher.",
"code": "CVE-2023-34540",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'langchain': Langchain OS Command Injection vulnerability. Current version is vulnerable: 0.0.171.",
- "file": "test_data/requirements.txt"
+ "isSecurity": true
},
{
+ "file": "test_data/requirements.txt",
"line": "2",
- "code": "CVE-2023-36188",
+ "message": "Vulnerability in 'langchain': Langchain Server-Side Request Forgery vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.329 or higher.",
+ "code": "CVE-2023-32786",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'langchain': langchain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171.",
- "file": "test_data/requirements.txt"
+ "isSecurity": true
},
{
+ "file": "test_data/requirements.txt",
"line": "2",
- "code": "CVE-2023-36258",
+ "message": "Vulnerability in 'langchain': Langchain SQL Injection vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.247 or higher.",
+ "code": "CVE-2023-32785",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': LangChain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.247 or higher.",
+ "code": "CVE-2023-38860",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': LangChain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.236 or higher.",
+ "code": "CVE-2023-38896",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.308 or higher.",
+ "code": "CVE-2023-39631",
"level": "LEVEL_HIGH",
"linter": "trivy",
"targetType": "lockfile",
- "isSecurity": true,
- "message": "Vulnerability in 'langchain': langchain arbitrary code execution vulnerability. Current version is vulnerable: 0.0.171.",
- "file": "test_data/requirements.txt"
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': LangChain vulnerable to arbitrary code execution. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.325 or higher.",
+ "code": "CVE-2023-39659",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': LangChain Server Side Request Forgery vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.317 or higher.",
+ "code": "CVE-2023-46229",
+ "level": "LEVEL_HIGH",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': langchain Server-Side Request Forgery vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.1.0 or higher.",
+ "code": "CVE-2024-0243",
+ "level": "LEVEL_LOW",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': LangChain directory traversal vulnerability. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.339 or higher.",
+ "code": "CVE-2024-28088",
+ "level": "LEVEL_LOW",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': Denial of service in langchain-community. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.2.5 or higher.",
+ "code": "CVE-2024-2965",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': langchain vulnerable to path traversal. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.0.353 or higher.",
+ "code": "CVE-2024-3571",
+ "level": "LEVEL_MEDIUM",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
+ },
+ {
+ "file": "test_data/requirements.txt",
+ "line": "2",
+ "message": "Vulnerability in 'langchain': langchain: SQL Injection in langchain-ai/langchain. Current version is vulnerable: 0.0.171. Patch available: upgrade to 0.2.0 or higher.",
+ "code": "CVE-2024-8309",
+ "level": "LEVEL_LOW",
+ "linter": "trivy",
+ "targetType": "lockfile",
+ "isSecurity": true
}
]
diff --git a/linters/trunk-toolbox/plugin.yaml b/linters/trunk-toolbox/plugin.yaml
index 219e4a5c1..25726eadd 100644
--- a/linters/trunk-toolbox/plugin.yaml
+++ b/linters/trunk-toolbox/plugin.yaml
@@ -25,6 +25,7 @@ lint:
main_tool: trunk-toolbox
files: [ALL]
affects_cache: [toolbox.toml, log4rs.yaml]
+ known_good_version: 0.5.3
commands:
- name: lint
version: ">=0.5.3"
diff --git a/linters/trunk-toolbox/test_data/trunk_toolbox_v0.4.1_do_not_land.check.shot b/linters/trunk-toolbox/test_data/trunk_toolbox_v0.4.1_do_not_land.check.shot
index 8948a64ac..eaf35b016 100644
--- a/linters/trunk-toolbox/test_data/trunk_toolbox_v0.4.1_do_not_land.check.shot
+++ b/linters/trunk-toolbox/test_data/trunk_toolbox_v0.4.1_do_not_land.check.shot
@@ -7,7 +7,7 @@ exports[`Testing linter trunk-toolbox test do_not_land 1`] = `
"code": "do-not-land",
"column": "3",
"file": "test_data/do_not_land.in.txt",
- "issueClass": "ISSUE_CLASS_NEW",
+ "issueClass": "ISSUE_CLASS_EXISTING",
"level": "LEVEL_HIGH",
"line": "1",
"linter": "trunk-toolbox",
@@ -25,7 +25,7 @@ exports[`Testing linter trunk-toolbox test do_not_land 1`] = `
"code": "do-not-land",
"column": "3",
"file": "test_data/do_not_land.in.txt",
- "issueClass": "ISSUE_CLASS_NEW",
+ "issueClass": "ISSUE_CLASS_EXISTING",
"level": "LEVEL_HIGH",
"line": "2",
"linter": "trunk-toolbox",
@@ -43,7 +43,7 @@ exports[`Testing linter trunk-toolbox test do_not_land 1`] = `
"code": "do-not-land",
"column": "3",
"file": "test_data/do_not_land.in.txt",
- "issueClass": "ISSUE_CLASS_NEW",
+ "issueClass": "ISSUE_CLASS_EXISTING",
"level": "LEVEL_HIGH",
"line": "3",
"linter": "trunk-toolbox",
@@ -68,16 +68,6 @@ exports[`Testing linter trunk-toolbox test do_not_land 1`] = `
],
"verb": "TRUNK_VERB_CHECK",
},
- {
- "command": "lint",
- "fileGroupName": "ALL",
- "linter": "trunk-toolbox",
- "paths": [
- "test_data/do_not_land.in.txt",
- ],
- "upstream": true,
- "verb": "TRUNK_VERB_CHECK",
- },
],
"taskFailures": [],
"unformattedFiles": [],
diff --git a/package-lock.json b/package-lock.json
index f2dbaa6bf..8840396a7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -22,7 +22,7 @@
"@typescript-eslint/parser": "^8.16.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "9.15.0",
+ "eslint": "9.14.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
@@ -658,11 +658,10 @@
}
},
"node_modules/@eslint/config-array": {
- "version": "0.19.0",
- "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.0.tgz",
- "integrity": "sha512-zdHg2FPIFNKPdcHWtiNT+jEFCHYVplAXRDlQDyqy0zGx/q2parwh7brGJSiTxRk/TSMkbM//zt/f5CHgyTyaSQ==",
+ "version": "0.18.0",
+ "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.18.0.tgz",
+ "integrity": "sha512-fTxvnS1sRMu3+JjXwJG0j/i4RT9u4qJ+lqS/yCGap4lH4zZGzQ7tu+xZqQmcMZq5OBZDL4QRxQzRjkWcGt8IVw==",
"dev": true,
- "license": "Apache-2.0",
"dependencies": {
"@eslint/object-schema": "^2.1.4",
"debug": "^4.3.1",
@@ -673,11 +672,10 @@
}
},
"node_modules/@eslint/core": {
- "version": "0.9.0",
- "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.9.0.tgz",
- "integrity": "sha512-7ATR9F0e4W85D/0w7cU0SNj7qkAexMG+bAHEZOjo9akvGuhHE2m7umzWzfnpa0XAg5Kxc1BWmtPMV67jJ+9VUg==",
+ "version": "0.7.0",
+ "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.7.0.tgz",
+ "integrity": "sha512-xp5Jirz5DyPYlPiKat8jaq0EmYvDXKKpzTbxXMpT9eqlRJkRKIz9AGMdlvYjih+im+QlhWrpvVjl8IPC/lHlUw==",
"dev": true,
- "license": "Apache-2.0",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
}
@@ -706,11 +704,10 @@
}
},
"node_modules/@eslint/js": {
- "version": "9.15.0",
- "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.15.0.tgz",
- "integrity": "sha512-tMTqrY+EzbXmKJR5ToI8lxu7jaN5EdmrBFJpQk5JmSlyLsx6o4t27r883K5xsLuCYCpfKBCGswMSWXsM+jB7lg==",
+ "version": "9.14.0",
+ "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.14.0.tgz",
+ "integrity": "sha512-pFoEtFWCPyDOl+C6Ift+wC7Ro89otjigCf5vcuWqWgqNSQbRrpjSvdeE6ofLz4dHmyxD5f7gIdGT4+p36L6Twg==",
"dev": true,
- "license": "MIT",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
}
@@ -720,7 +717,6 @@
"resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.4.tgz",
"integrity": "sha512-BsWiH1yFGjXXS2yvrf5LyuoSIIbPrGUWob917o+BTKuZ7qJdxX8aJLRxs1fS9n6r7vESrq1OUqb68dANcFXuQQ==",
"dev": true,
- "license": "Apache-2.0",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
}
@@ -2710,27 +2706,26 @@
}
},
"node_modules/eslint": {
- "version": "9.15.0",
- "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.15.0.tgz",
- "integrity": "sha512-7CrWySmIibCgT1Os28lUU6upBshZ+GxybLOrmRzi08kS8MBuO8QA7pXEgYgY5W8vK3e74xv0lpjo9DbaGU9Rkw==",
+ "version": "9.14.0",
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.14.0.tgz",
+ "integrity": "sha512-c2FHsVBr87lnUtjP4Yhvk4yEhKrQavGafRA/Se1ouse8PfbfC/Qh9Mxa00yWsZRlqeUB9raXip0aiiUZkgnr9g==",
"dev": true,
- "license": "MIT",
"dependencies": {
"@eslint-community/eslint-utils": "^4.2.0",
"@eslint-community/regexpp": "^4.12.1",
- "@eslint/config-array": "^0.19.0",
- "@eslint/core": "^0.9.0",
- "@eslint/eslintrc": "^3.2.0",
- "@eslint/js": "9.15.0",
- "@eslint/plugin-kit": "^0.2.3",
+ "@eslint/config-array": "^0.18.0",
+ "@eslint/core": "^0.7.0",
+ "@eslint/eslintrc": "^3.1.0",
+ "@eslint/js": "9.14.0",
+ "@eslint/plugin-kit": "^0.2.0",
"@humanfs/node": "^0.16.6",
"@humanwhocodes/module-importer": "^1.0.1",
- "@humanwhocodes/retry": "^0.4.1",
+ "@humanwhocodes/retry": "^0.4.0",
"@types/estree": "^1.0.6",
"@types/json-schema": "^7.0.15",
"ajv": "^6.12.4",
"chalk": "^4.0.0",
- "cross-spawn": "^7.0.5",
+ "cross-spawn": "^7.0.2",
"debug": "^4.3.2",
"escape-string-regexp": "^4.0.0",
"eslint-scope": "^8.2.0",
@@ -2749,7 +2744,8 @@
"lodash.merge": "^4.6.2",
"minimatch": "^3.1.2",
"natural-compare": "^1.4.0",
- "optionator": "^0.9.3"
+ "optionator": "^0.9.3",
+ "text-table": "^0.2.0"
},
"bin": {
"eslint": "bin/eslint.js"
@@ -6073,6 +6069,12 @@
"node": ">=8"
}
},
+ "node_modules/text-table": {
+ "version": "0.2.0",
+ "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
+ "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
+ "dev": true
+ },
"node_modules/tmpl": {
"version": "1.0.5",
"dev": true,
diff --git a/package.json b/package.json
index f72296fd2..ef21ebc12 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
"@typescript-eslint/parser": "^8.16.0",
"caller": "^1.1.0",
"debug": "^4.3.7",
- "eslint": "9.15.0",
+ "eslint": "9.14.0",
"eslint-config-prettier": "^9.1.0",
"eslint-import-resolver-typescript": "^3.6.3",
"eslint-plugin-import": "^2.31.0",
diff --git a/runtimes/java/plugin.yaml b/runtimes/java/plugin.yaml
index d74abba50..d470e3f50 100644
--- a/runtimes/java/plugin.yaml
+++ b/runtimes/java/plugin.yaml
@@ -4,6 +4,16 @@ downloads:
# implementing the Java runtime. The Temurin releases are hosted on GitHub, which would allow us
# to use "latest version query" logic on them, but their release naming isn't trivially compatible
# with our current schema (e.g. JDK 11.0.17+8 has URL /jdk-11.0.17+8/[...]_11.0.17_8.tar.gz).
+ - name: jdk-23
+ downloads:
+ - os:
+ linux: linux
+ macos: macosx
+ cpu:
+ x86_64: x64
+ arm_64: aarch64
+ url: https://cdn.azul.com/zulu/bin/zulu23.30.13-ca-jdk23.0.1-${os}_${cpu}.tar.gz
+ strip_components: 1
- name: jdk-17
downloads:
@@ -53,7 +63,7 @@ downloads:
runtimes:
definitions:
- type: java
- download: jdk-13
+ download: jdk-23
runtime_environment:
- name: HOME
value: ${env.HOME:-}
diff --git a/runtimes/php/plugin.yaml b/runtimes/php/plugin.yaml
index bd4db0d78..653287088 100644
--- a/runtimes/php/plugin.yaml
+++ b/runtimes/php/plugin.yaml
@@ -2,13 +2,13 @@ version: 0.1
downloads: # Needed for the php runtime to install packages
- name: composer
executable: true
- version: 2.5.1
+ version: 2.8.3
downloads:
- - version: 2.5.1
+ - version: 2.8.3
gpg: CBB3D576F2A0946F
- name: phive
executable: true
- version: 0.15.1
+ version: 0.15.3
downloads:
- url: https://github.com/phar-io/phive/releases/download/${version}/phive-${version}.phar
runtimes:
diff --git a/runtimes/rust/plugin.yaml b/runtimes/rust/plugin.yaml
index 8dd7b4acc..1d16ec7b9 100644
--- a/runtimes/rust/plugin.yaml
+++ b/runtimes/rust/plugin.yaml
@@ -35,7 +35,7 @@ runtimes:
linter_environment:
- name: PATH
list: ["${linter}/bin"]
- known_good_version: 1.71.1
+ known_good_version: 1.82.0
version_commands:
- run: rustc --version
parse_regex: ${semver}
diff --git a/tests/driver/tool_driver.ts b/tests/driver/tool_driver.ts
index 0090360b9..d2ae68b6a 100644
--- a/tests/driver/tool_driver.ts
+++ b/tests/driver/tool_driver.ts
@@ -158,13 +158,35 @@ lint:
stdout: string;
stderr: string;
exitCode: number;
+ details?: string;
}> => {
try {
const { stdout, stderr } = await this.runTrunk(["tools", "install", toolName, "--ci"]);
- return { exitCode: 0, stdout, stderr };
+ return { exitCode: 0, stdout, stderr, details: undefined };
} catch (e: any) {
- // trunk-ignore(eslint/@typescript-eslint/no-unsafe-member-access)
- return { exitCode: e.code as number, stdout: e.stdout as string, stderr: e.stderr as string };
+ let details = undefined;
+ /* eslint-disable-next-line
+ @typescript-eslint/no-unsafe-call,
+ @typescript-eslint/no-unsafe-member-access,
+ @typescript-eslint/no-unsafe-assignment
+ */
+ const detailsPath = e.stdout.match(/\.trunk\/out\/(.+\.yaml)/);
+ if (detailsPath) {
+ details = await fs.promises.readFile(
+ /* eslint-disable-next-line @typescript-eslint/no-unsafe-argument,@typescript-eslint/no-unsafe-member-access */
+ path.resolve(this.sandboxPath ?? "", detailsPath[0]),
+ "utf8",
+ );
+ }
+
+ /* eslint-disable @typescript-eslint/no-unsafe-member-access */
+ return {
+ exitCode: e.code as number,
+ stdout: e.stdout as string,
+ stderr: e.stderr as string,
+ /* eslint-enable @typescript-eslint/no-unsafe-member-access */
+ details,
+ };
}
};
diff --git a/tests/index.ts b/tests/index.ts
index b08deac33..3a470bc8c 100644
--- a/tests/index.ts
+++ b/tests/index.ts
@@ -252,12 +252,15 @@ export const toolInstallTest = ({
describe(`Testing tool ${toolName}`, () => {
const driver = setUpTrunkToolDriverForHealthCheck(dirName, {}, toolName, toolVersion, preCheck);
conditionalTest(skipTestIf(toolVersion), "tool ", async () => {
- const { exitCode, stdout, stderr } = await driver.runInstall(toolName);
- expect(exitCode).toEqual(0);
- expect(stdout).toContain(toolName);
- expect(stdout).toContain(toolVersion);
- expect(stderr).toEqual("");
- expect(stdout).not.toContain("Failures:");
+ const installResult = await driver.runInstall(toolName);
+ expect(installResult).toMatchObject({
+ exitCode: 0,
+ // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+ stdout: expect.stringMatching(`${toolName}.+${toolVersion}(?!.*trunk)`),
+ stderr: "",
+ details: undefined,
+ });
+ expect(installResult.stdout).not.toContain("Failures:");
});
});
};
@@ -303,10 +306,14 @@ export const toolTest = ({
const driver = setupTrunkToolDriver(dirName, {}, toolName, toolVersion, preCheck);
testConfigs.forEach(({ command, expectedOut, expectedErr, expectedExitCode, stdin }) => {
conditionalTest(skipTestIf(toolVersion), command.join(" "), async () => {
- const { stdout, stderr, exitCode } = await driver.runTool(command, stdin);
- expect(stdout).toContain(expectedOut);
- expect(stderr).toContain(expectedErr);
- expect(exitCode).toEqual(expectedExitCode);
+ const installResult = await driver.runTool(command, stdin);
+ expect(installResult).toMatchObject({
+ exitCode: expectedExitCode,
+ // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+ stdout: expect.stringContaining(expectedOut ?? ""),
+ // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+ stderr: expect.stringContaining(expectedErr ?? ""),
+ });
});
});
});
diff --git a/tools/paratest/paratest.test.ts b/tools/paratest/paratest.test.ts
index accc678bb..10dd9d245 100644
--- a/tools/paratest/paratest.test.ts
+++ b/tools/paratest/paratest.test.ts
@@ -3,6 +3,6 @@ import { skipOS } from "tests/utils";
toolInstallTest({
toolName: "paratest",
- toolVersion: "7.4.3",
+ toolVersion: "7.6.0",
skipTestIf: skipOS(["win32"]),
});
diff --git a/tools/paratest/plugin.yaml b/tools/paratest/plugin.yaml
index 5c2eac5b8..5bac06460 100644
--- a/tools/paratest/plugin.yaml
+++ b/tools/paratest/plugin.yaml
@@ -4,7 +4,8 @@ tools:
- name: paratest
runtime: php
package: brianium/paratest
- known_good_version: 7.4.3
+ # Minimum version compatible with php@8.4
+ known_good_version: 7.6.0
shims: [paratest]
environment:
- name: PATH
From 712c78b6de3715718712540707b1cb97be00fe4a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Dec 2024 10:15:38 -0800
Subject: [PATCH 08/11] Bump the dependencies group with 2 updates (#929)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps the dependencies group with 2 updates:
[github/codeql-action](https://github.com/github/codeql-action) and
[actions/cache](https://github.com/actions/cache).
Updates `github/codeql-action` from 3.27.5 to 3.27.6
Release notes
Sourced from github/codeql-action's
releases.
v3.27.6
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
3.27.6 - 03 Dec 2024
- Update default CodeQL bundle version to 2.19.4. #2626
See the full CHANGELOG.md
for more information.
Changelog
Sourced from github/codeql-action's
changelog.
CodeQL Action Changelog
See the releases
page for the relevant changes to the CodeQL CLI and language
packs.
Note that the only difference between v2
and
v3
of the CodeQL Action is the node version they support,
with v3
running on node 20 while we continue to release
v2
to support running on node 16. For example
3.22.11
was the first v3
release and is
functionally identical to 2.22.11
. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.
[UNRELEASED]
- We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. #2631
3.27.6 - 03 Dec 2024
- Update default CodeQL bundle version to 2.19.4. #2626
3.27.5 - 19 Nov 2024
No user facing changes.
3.27.4 - 14 Nov 2024
No user facing changes.
3.27.3 - 12 Nov 2024
No user facing changes.
3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message "Invalid value 'undefined' for header
'authorization'". #2590
3.27.1 - 08 Nov 2024
- The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. #2573
- Update default CodeQL bundle version to 2.19.3. #2576
3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail
with "upload-sarif post-action step failed: Input required and not
supplied: token" when called in a composite Action that had a
different set of inputs to the ones expected by the
upload-sarif
Action. #2557
- Update default CodeQL bundle version to 2.19.2. #2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
-
Upcoming breaking change: Add a deprecation warning for
customers using CodeQL version 2.14.5 and earlier. These versions of
CodeQL were discontinued on 24 September 2024 alongside GitHub
Enterprise Server 3.10, and will be unsupported by CodeQL Action
versions 3.27.0 and later and versions 2.27.0 and later. #2520
- If you are using one of these versions, please update to CodeQL CLI
version 2.14.6 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.
... (truncated)
Commits
aa57810
Merge pull request #2628
from github/update-v3.27.6-af49565b8
34e77b7
Update changelog for v3.27.6
af49565
Merge pull request #2620
from github/cklin/DiffThunkRange-fix
5659f01
Merge pull request #2626
from github/update-bundle/codeql-bundle-v2.19.4
5333ff3
Add changelog note
e4fb28d
Update default bundle to codeql-bundle-v2.19.4
3d3d628
Merge pull request #2617
from github/update-supported-enterprise-server-versions
2eea97e
Fix DiffThunkRange access
f8e782a
Merge pull request #2618
from github/mergeback/v3.27.5-to-main-f09c1c0a
49b7c97
Update checked-in dependencies
- Additional commits viewable in compare
view
Updates `actions/cache` from 4.1.2 to 4.2.0
Release notes
Sourced from actions/cache's
releases.
v4.2.0
⚠️ Important Changes
The cache backend service has been rewritten from the ground up for
improved performance and reliability. actions/cache now integrates
with the new cache service (v2) APIs.
The new service will gradually roll out as of February 1st,
2025. The legacy service will also be sunset on the same date.
Changes in these release are fully backward
compatible.
We are deprecating some versions of this action. We
recommend upgrading to version v4
or v3
as
soon as possible before February 1st, 2025. (Upgrade
instructions below).
If you are using pinned SHAs, please use the SHAs of versions
v4.2.0
or v3.4.0
If you do not upgrade, all workflow runs using any of the deprecated
actions/cache will
fail.
Upgrading to the recommended versions will not break your
workflows.
Read more about the change & access the migration guide: reference to
the announcement.
Minor changes
Minor and patch version updates for these dependencies:
@actions/core
: 1.11.1
@actions/io
: 1.1.3
@vercel/ncc
: 0.38.3
Full Changelog: https://github.com/actions/cache/compare/v4...v4.2.0
Changelog
Sourced from actions/cache's
changelog.
Releases
4.2.0
TLDR; The cache backend service has been rewritten from the ground up
for improved performance and reliability. actions/cache now integrates
with the new cache service (v2) APIs.
The new service will gradually roll out as of February 1st,
2025. The legacy service will also be sunset on the same date.
Changes in these release are fully backward
compatible.
We are deprecating some versions of this action. We
recommend upgrading to version v4
or v3
as
soon as possible before February 1st, 2025. (Upgrade
instructions below).
If you are using pinned SHAs, please use the SHAs of versions
v4.2.0
or v3.4.0
If you do not upgrade, all workflow runs using any of the deprecated
actions/cache will
fail.
Upgrading to the recommended versions will not break your
workflows.
4.1.2
- Add GitHub Enterprise Cloud instances hostname filters to inform API
endpoint choices - #1474
- Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475
4.1.1
- Restore original behavior of
cache-hit
output - #1467
4.1.0
- Ensure
cache-hit
output is set when a cache is missed -
#1404
- Deprecate
save-always
input - #1452
4.0.2
- Fixed restore
fail-on-cache-miss
not working.
4.0.1
4.0.0
- Updated minimum runner version support from node 12 -> node
20
3.4.0
- Integrated with the new cache service (v2) APIs
3.3.3
- Updates
@actions/cache
to v3.2.3 to fix accidental
mutated path arguments to getCacheVersion
actions/toolkit#1378
- Additional audit fixes of npm package(s)
... (truncated)
Commits
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore ` will
remove the ignore condition of the specified dependency and ignore
conditions
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/codeql.yml | 6 +++---
.github/workflows/nightly.yaml | 4 ++--
.github/workflows/pr.yaml | 4 ++--
.github/workflows/scorecard.yml | 2 +-
.github/workflows/windows_nightly.yaml | 4 ++--
5 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a3a11a2ce..d7e408fe0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -34,7 +34,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+ uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
# Override language selection by uncommenting this and choosing your languages
with:
languages: javascript
@@ -42,7 +42,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
# If this step fails, then you should remove it and run the build manually (see below).
- name: Autobuild
- uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+ uses: github/codeql-action/autobuild@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
# ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -56,4 +56,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+ uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index 3208c80df..e7ee84d05 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -43,7 +43,7 @@ jobs:
- name: Cache tool downloads
# ubuntu runner has persistent cache
if: matrix.os == 'windows-latest'
- uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+ uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with:
path: /tmp/plugins_testing_download_cache
# No need to key on trunk version unless we change how we store downloads.
@@ -148,7 +148,7 @@ jobs:
- name: Cache tool downloads
# ubuntu, mac runners have persistent cache
if: matrix.os == 'windows-latest'
- uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+ uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with:
path: /tmp/plugins_testing_download_cache
# No need to key on trunk version unless we change how we store downloads.
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 75df408b3..0c007b2ea 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -251,7 +251,7 @@ jobs:
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Cache tool downloads
- uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+ uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with:
path: /tmp/plugins_testing_download_cache
key: trunk-${{ runner.os }}
@@ -279,7 +279,7 @@ jobs:
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Cache tool downloads
- uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+ uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with:
path: /tmp/plugins_testing_download_cache
key: trunk-${{ runner.os }}
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index db2718c37..d475c3ce1 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,6 +65,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: Upload to code-scanning
- uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+ uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
with:
sarif_file: results.sarif
diff --git a/.github/workflows/windows_nightly.yaml b/.github/workflows/windows_nightly.yaml
index 5825a4486..0f060ea7e 100644
--- a/.github/workflows/windows_nightly.yaml
+++ b/.github/workflows/windows_nightly.yaml
@@ -21,7 +21,7 @@ jobs:
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Cache tool downloads
- uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+ uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with:
path: /tmp/plugins_testing_download_cache
# No need to key on trunk version unless we change how we store downloads.
@@ -62,7 +62,7 @@ jobs:
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Cache tool downloads
- uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+ uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
with:
path: /tmp/plugins_testing_download_cache
# No need to key on trunk version unless we change how we store downloads.
From 6a5687e919029dcd9c13ee2c17636a980f3820cf Mon Sep 17 00:00:00 2001
From: "trunk-open-pr-bot[bot]"
<131314627+trunk-open-pr-bot[bot]@users.noreply.github.com>
Date: Thu, 5 Dec 2024 12:34:09 -0800
Subject: [PATCH 09/11] Upgrade trunk (#927)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
[](https://trunk.io)
2 linters were upgraded:
- eslint 9.14.0 → 9.16.0
- trunk-toolbox 0.5.3 → 0.5.4
This PR was generated by the [Trunk Action]. For more info, see our
[docs] or reach out on [Slack].
[Trunk Action]: https://github.com/trunk-io/trunk-action
[docs]: https://docs.trunk.io
[Slack]: https://slack.trunk.io/
Co-authored-by: TylerJang27 <42743566+TylerJang27@users.noreply.github.com>
Co-authored-by: Tyler Jang
---
.trunk/trunk.yaml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index 6a23e8dc4..9178fddea 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -42,8 +42,8 @@ lint:
enabled:
# enabled linters inherited from github.com/trunk-io/configs plugin
- definition-checker
- - eslint@9.14.0
- - trunk-toolbox@0.5.3
+ - eslint@9.16.0
+ - trunk-toolbox@0.5.4
disabled:
- pylint # pylint diagnostics are too strict
- semgrep
From 0c4c9bc2220140665ca708c88f5712a420713063 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 8 Dec 2024 22:05:00 -0800
Subject: [PATCH 10/11] Bump the dependencies group across 1 directory with 7
updates (#932)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps the dependencies group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `22.9.3` | `22.10.1` |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.16.0` | `8.17.0` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.16.0` | `8.17.0` |
| [debug](https://github.com/debug-js/debug) | `4.3.7` | `4.4.0` |
|
[eslint-import-resolver-typescript](https://github.com/import-js/eslint-import-resolver-typescript)
| `3.6.3` | `3.7.0` |
|
[eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x)
| `4.4.3` | `4.5.0` |
|
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
| `8.16.0` | `8.17.0` |
Updates `@types/node` from 22.9.3 to 22.10.1
Commits
Updates `@typescript-eslint/eslint-plugin` from 8.16.0 to 8.17.0
Release notes
Sourced from @typescript-eslint/eslint-plugin
's
releases.
v8.17.0
8.17.0 (2024-12-02)
🚀 Features
- eslint-plugin: [prefer-promise-reject-errors]
options to allow any and unknown (#10392)
- typescript-estree: add package version to ts
version warning (#10343)
🩹 Fixes
- eslint-plugin:
[no-unnecessary-template-expressions] allow template expressions used to
make trailing whitespace visible (#10363)
- eslint-plugin: remove references to
"extendDefaults" in no-restricted-types (#10401)
- eslint-plugin: [promise-function-async] handle
function overloading (#10304)
- website: press the Report an Issue button makes
error if eslintrc does not include rules (#10367)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Changelog
Sourced from @typescript-eslint/eslint-plugin
's
changelog.
8.17.0 (2024-12-02)
🚀 Features
- eslint-plugin: [prefer-promise-reject-errors]
options to allow any and unknown (#10392)
🩹 Fixes
- eslint-plugin: [promise-function-async] handle
function overloading (#10304)
- eslint-plugin: remove references to
"extendDefaults" in no-restricted-types (#10401)
- eslint-plugin:
[no-unnecessary-template-expressions] allow template expressions used to
make trailing whitespace visible (#10363)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Commits
2c8a75e
chore(release): publish 8.17.0
670df27
feat(eslint-plugin): [prefer-promise-reject-errors] options to allow any
and ...
68311ee
fix(eslint-plugin): [promise-function-async] handle function overloading
(#10...
9dbb4f9
fix(eslint-plugin): remove references to "extendDefaults" in
no-restricted-ty...
fcd6cf0
fix(eslint-plugin): [no-unnecessary-template-expressions] allow template
expr...
- See full diff in compare
view
Updates `@typescript-eslint/parser` from 8.16.0 to 8.17.0
Release notes
Sourced from @typescript-eslint/parser
's
releases.
v8.17.0
8.17.0 (2024-12-02)
🚀 Features
- eslint-plugin: [prefer-promise-reject-errors]
options to allow any and unknown (#10392)
- typescript-estree: add package version to ts
version warning (#10343)
🩹 Fixes
- eslint-plugin:
[no-unnecessary-template-expressions] allow template expressions used to
make trailing whitespace visible (#10363)
- eslint-plugin: remove references to
"extendDefaults" in no-restricted-types (#10401)
- eslint-plugin: [promise-function-async] handle
function overloading (#10304)
- website: press the Report an Issue button makes
error if eslintrc does not include rules (#10367)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Changelog
Sourced from @typescript-eslint/parser
's
changelog.
8.17.0 (2024-12-02)
This was a version bump only for parser to align it with other
projects, there were no code changes.
You can read about our versioning
strategy and releases
on our website.
Commits
Updates `debug` from 4.3.7 to 4.4.0
Release notes
Sourced from debug's
releases.
4.4.0
Fixes (hopefully) the inefficient regex warnings in
.enable()
.
Minor version as this is invariably going to break certain users who
misuse the .enable()
API and expected it to work with
regexes, which was never supported nor documented. That's on you, sorry
- that functionality won't be added back.
Full Changelog: https://github.com/debug-js/debug/compare/4.3.7...4.4.0
Commits
Updates `eslint-import-resolver-typescript` from 3.6.3 to 3.7.0
Release notes
Sourced from eslint-import-resolver-typescript's
releases.
v3.7.0
Minor Changes
-
#326
93ea130
Thanks @SukkaW
! -
This version has implemented the eslint-plugin-import-x
's
v3 resolver interface. This allows you to use import/require to
reference eslint-import-resolver-typescript
directly in
your ESLint flat config:
Previously
// eslint.config.js
module.exports = {
settings: {
'import-x/resolver': {
typescript: {
alwaysTryTypes: true,
},
// or
require.resolve('eslint-import-resolver-typescript'):
alwaysTryTypes: true,
}
}
}
}
Now
// eslint.config.js
const {
createTypeScriptImportResolver,
} = require('eslint-import-resolver-typescript')
module.exports = {
settings: {
'import-x/resolver-next': [
createTypeScriptImportResolver({
alwaysTryTypes: true,
}),
],
},
}
Note that this only works with
eslint-plugin-import-x@>=4.5.0
. You can't use
createTypeScriptImportResolver
with the older versions of
eslint-plugin-import-x
or any existing versions of
eslint-plugin-import
.
Changelog
Sourced from eslint-import-resolver-typescript's
changelog.
3.7.0
Minor Changes
-
#326
93ea130
Thanks @SukkaW
! -
This version has implemented the eslint-plugin-import-x
's
v3 resolver interface. This allows you to use import/require to
reference eslint-import-resolver-typescript
directly in
your ESLint flat config:
Previously
// eslint.config.js
module.exports = {
settings: {
'import-x/resolver': {
typescript: {
alwaysTryTypes: true,
},
// or
require.resolve('eslint-import-resolver-typescript'):
alwaysTryTypes: true,
}
}
}
}
Now
// eslint.config.js
const {
createTypeScriptImportResolver,
} = require('eslint-import-resolver-typescript')
module.exports = {
settings: {
'import-x/resolver-next': [
createTypeScriptImportResolver({
alwaysTryTypes: true,
}),
],
},
}
Note that this only works with
eslint-plugin-import-x@>=4.5.0
. You can't use
createTypeScriptImportResolver
with the older versions of
eslint-plugin-import-x
or any existing versions of
eslint-plugin-import
.
Commits
c5da700
chore: release eslint-import-resolver-typescript (#327)
93ea130
feat: implement import-x resolver interface v3 (#326)
e6256b7
chore(deps): update dependency simple-git-hooks to ^2.11.1 (#325)
da56f17
chore(deps): update dependency react to ^18.3.1 (#324)
88a6d44
chore(deps): update node.js to v18.20.5 (#323)
bed664f
chore(deps): update dependency @changesets/cli
to ^2.27.10
(#322)
42e7cc3
chore(deps): update dependency @types/node
to ^18.19.63
(#320)
13fa760
chore(deps): update dependency @changesets/cli
to ^2.27.9
(#319)
5ee5879
fix(deps): update dependency debug to ^4.3.7 (#316)
f5b09f5
chore(deps): update dependency eslint to ^8.57.1 (#315)
- Additional commits viewable in compare
view
Updates `eslint-plugin-import-x` from 4.4.3 to 4.5.0
Release notes
Sourced from eslint-plugin-import-x's
releases.
v4.5.0
Minor Changes
-
#192
fbf639b
Thanks @SukkaW
! -
The PR implements the new resolver design proposed in un-ts/eslint-plugin-import-x#40
For eslint-plugin-import-x
users
Like the ESLint flat config allows you to use js objects (e.g. import
and require) as ESLint plugins, the new
eslint-plugin-import-x
resolver settings allow you to use
js objects as custom resolvers through the new setting
import-x/resolver-next
:
// eslint.config.js
import { createTsResolver } from '#custom-resolver';
const { createOxcResolver } = require('path/to/a/custom/resolver');
const resolverInstance = new ResolverFactory({});
const customResolverObject = {
interfaceVersion: 3,
name: 'my-custom-eslint-import-resolver',
resolve(modPath, sourcePath) {
const path = resolverInstance.resolve(modPath, sourcePath);
if (path) {
return {
found: true,
path
};
}
return {
found: false,
path: null
}
};
};
module.exports = {
settings: {
// multiple resolvers
'import-x/resolver-next': [
customResolverObject,
createTsResolver(enhancedResolverOptions),
createOxcResolver(oxcOptions),
],
// single resolver:
'import-x/resolver-next': [createOxcResolver(oxcOptions)]
}
}
The new import-x/resolver-next
no longer accepts strings
as the resolver, thus will not be compatible with the ESLint legacy
config (a.k.a. .eslintrc
). Those who are still using the
ESLint legacy config should stick with
import-x/resolver
.
... (truncated)
Changelog
Sourced from eslint-plugin-import-x's
changelog.
4.5.0
Minor Changes
-
#192
fbf639b
Thanks @SukkaW
! -
The PR implements the new resolver design proposed in un-ts/eslint-plugin-import-x#40
For eslint-plugin-import-x
users
Like the ESLint flat config allows you to use js objects (e.g. import
and require) as ESLint plugins, the new
eslint-plugin-import-x
resolver settings allow you to use
js objects as custom resolvers through the new setting
import-x/resolver-next
:
// eslint.config.js
import { createTsResolver } from '#custom-resolver';
const { createOxcResolver } = require('path/to/a/custom/resolver');
const resolverInstance = new ResolverFactory({});
const customResolverObject = {
interfaceVersion: 3,
name: 'my-custom-eslint-import-resolver',
resolve(modPath, sourcePath) {
const path = resolverInstance.resolve(modPath, sourcePath);
if (path) {
return {
found: true,
path
};
}
return {
found: false,
path: null
}
};
};
module.exports = {
settings: {
// multiple resolvers
'import-x/resolver-next': [
customResolverObject,
createTsResolver(enhancedResolverOptions),
createOxcResolver(oxcOptions),
],
// single resolver:
'import-x/resolver-next': [createOxcResolver(oxcOptions)]
}
}
The new import-x/resolver-next
no longer accepts strings
as the resolver, thus will not be compatible with the ESLint legacy
config (a.k.a. .eslintrc
). Those who are still using the
ESLint legacy config should stick with
import-x/resolver
.
... (truncated)
Commits
Updates `typescript-eslint` from 8.16.0 to 8.17.0
Release notes
Sourced from typescript-eslint's
releases.
v8.17.0
8.17.0 (2024-12-02)
🚀 Features
- eslint-plugin: [prefer-promise-reject-errors]
options to allow any and unknown (#10392)
- typescript-estree: add package version to ts
version warning (#10343)
🩹 Fixes
- eslint-plugin:
[no-unnecessary-template-expressions] allow template expressions used to
make trailing whitespace visible (#10363)
- eslint-plugin: remove references to
"extendDefaults" in no-restricted-types (#10401)
- eslint-plugin: [promise-function-async] handle
function overloading (#10304)
- website: press the Report an Issue button makes
error if eslintrc does not include rules (#10367)
❤️ Thank You
You can read about our versioning
strategy and releases
on our website.
Changelog
Sourced from typescript-eslint's
changelog.
8.17.0 (2024-12-02)
This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.
You can read about our versioning
strategy and releases
on our website.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore ` will
remove the ignore condition of the specified dependency and ignore
conditions
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
package-lock.json | 163 +++++++++++++++++++++-------------------------
package.json | 14 ++--
2 files changed, 82 insertions(+), 95 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 8840396a7..20940b4eb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,17 +16,17 @@
"@types/debug": "^4.1.12",
"@types/jest": "^29.5.14",
"@types/jest-specific-snapshot": "^0.5.9",
- "@types/node": "^22.9.3",
+ "@types/node": "^22.10.1",
"@types/semver": "^7.5.8",
- "@typescript-eslint/eslint-plugin": "^8.16.0",
- "@typescript-eslint/parser": "^8.16.0",
+ "@typescript-eslint/eslint-plugin": "^8.17.0",
+ "@typescript-eslint/parser": "^8.17.0",
"caller": "^1.1.0",
- "debug": "^4.3.7",
+ "debug": "^4.4.0",
"eslint": "9.14.0",
"eslint-config-prettier": "^9.1.0",
- "eslint-import-resolver-typescript": "^3.6.3",
+ "eslint-import-resolver-typescript": "^3.7.0",
"eslint-plugin-import": "^2.31.0",
- "eslint-plugin-import-x": "^4.4.3",
+ "eslint-plugin-import-x": "^4.5.0",
"eslint-plugin-jest": "^28.9.0",
"eslint-plugin-n": "^17.14.0",
"eslint-plugin-prettier": "^5.2.1",
@@ -41,7 +41,7 @@
"ts-node": "^10.9.2",
"tsconfig-paths": "^4.1.2",
"typescript": "^5.7.2",
- "typescript-eslint": "^8.16.0",
+ "typescript-eslint": "^8.17.0",
"yaml": "^2.6.1"
},
"engines": {
@@ -1463,13 +1463,12 @@
"license": "MIT"
},
"node_modules/@types/node": {
- "version": "22.9.3",
- "resolved": "https://registry.npmjs.org/@types/node/-/node-22.9.3.tgz",
- "integrity": "sha512-F3u1fs/fce3FFk+DAxbxc78DF8x0cY09RRL8GnXLmkJ1jvx3TtPdWoTT5/NiYfI5ASqXBmfqJi9dZ3gxMx4lzw==",
+ "version": "22.10.1",
+ "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.1.tgz",
+ "integrity": "sha512-qKgsUwfHZV2WCWLAnVP1JqnpE6Im6h3Y0+fYgMTasNQ7V++CBX5OT1as0g0f+OyubbFqhf6XVNIsmN4IIhEgGQ==",
"dev": true,
- "license": "MIT",
"dependencies": {
- "undici-types": "~6.19.8"
+ "undici-types": "~6.20.0"
}
},
"node_modules/@types/semver": {
@@ -1497,17 +1496,16 @@
"license": "MIT"
},
"node_modules/@typescript-eslint/eslint-plugin": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.16.0.tgz",
- "integrity": "sha512-5YTHKV8MYlyMI6BaEG7crQ9BhSc8RxzshOReKwZwRWN0+XvvTOm+L/UYLCYxFpfwYuAAqhxiq4yae0CMFwbL7Q==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.17.0.tgz",
+ "integrity": "sha512-HU1KAdW3Tt8zQkdvNoIijfWDMvdSweFYm4hWh+KwhPstv+sCmWb89hCIP8msFm9N1R/ooh9honpSuvqKWlYy3w==",
"dev": true,
- "license": "MIT",
"dependencies": {
"@eslint-community/regexpp": "^4.10.0",
- "@typescript-eslint/scope-manager": "8.16.0",
- "@typescript-eslint/type-utils": "8.16.0",
- "@typescript-eslint/utils": "8.16.0",
- "@typescript-eslint/visitor-keys": "8.16.0",
+ "@typescript-eslint/scope-manager": "8.17.0",
+ "@typescript-eslint/type-utils": "8.17.0",
+ "@typescript-eslint/utils": "8.17.0",
+ "@typescript-eslint/visitor-keys": "8.17.0",
"graphemer": "^1.4.0",
"ignore": "^5.3.1",
"natural-compare": "^1.4.0",
@@ -1531,16 +1529,15 @@
}
},
"node_modules/@typescript-eslint/parser": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.16.0.tgz",
- "integrity": "sha512-D7DbgGFtsqIPIFMPJwCad9Gfi/hC0PWErRRHFnaCWoEDYi5tQUDiJCTmGUbBiLzjqAck4KcXt9Ayj0CNlIrF+w==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.17.0.tgz",
+ "integrity": "sha512-Drp39TXuUlD49F7ilHHCG7TTg8IkA+hxCuULdmzWYICxGXvDXmDmWEjJYZQYgf6l/TFfYNE167m7isnc3xlIEg==",
"dev": true,
- "license": "BSD-2-Clause",
"dependencies": {
- "@typescript-eslint/scope-manager": "8.16.0",
- "@typescript-eslint/types": "8.16.0",
- "@typescript-eslint/typescript-estree": "8.16.0",
- "@typescript-eslint/visitor-keys": "8.16.0",
+ "@typescript-eslint/scope-manager": "8.17.0",
+ "@typescript-eslint/types": "8.17.0",
+ "@typescript-eslint/typescript-estree": "8.17.0",
+ "@typescript-eslint/visitor-keys": "8.17.0",
"debug": "^4.3.4"
},
"engines": {
@@ -1560,14 +1557,13 @@
}
},
"node_modules/@typescript-eslint/scope-manager": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.16.0.tgz",
- "integrity": "sha512-mwsZWubQvBki2t5565uxF0EYvG+FwdFb8bMtDuGQLdCCnGPrDEDvm1gtfynuKlnpzeBRqdFCkMf9jg1fnAK8sg==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.17.0.tgz",
+ "integrity": "sha512-/ewp4XjvnxaREtqsZjF4Mfn078RD/9GmiEAtTeLQ7yFdKnqwTOgRMSvFz4et9U5RiJQ15WTGXPLj89zGusvxBg==",
"dev": true,
- "license": "MIT",
"dependencies": {
- "@typescript-eslint/types": "8.16.0",
- "@typescript-eslint/visitor-keys": "8.16.0"
+ "@typescript-eslint/types": "8.17.0",
+ "@typescript-eslint/visitor-keys": "8.17.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1578,14 +1574,13 @@
}
},
"node_modules/@typescript-eslint/type-utils": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.16.0.tgz",
- "integrity": "sha512-IqZHGG+g1XCWX9NyqnI/0CX5LL8/18awQqmkZSl2ynn8F76j579dByc0jhfVSnSnhf7zv76mKBQv9HQFKvDCgg==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.17.0.tgz",
+ "integrity": "sha512-q38llWJYPd63rRnJ6wY/ZQqIzPrBCkPdpIsaCfkR3Q4t3p6sb422zougfad4TFW9+ElIFLVDzWGiGAfbb/v2qw==",
"dev": true,
- "license": "MIT",
"dependencies": {
- "@typescript-eslint/typescript-estree": "8.16.0",
- "@typescript-eslint/utils": "8.16.0",
+ "@typescript-eslint/typescript-estree": "8.17.0",
+ "@typescript-eslint/utils": "8.17.0",
"debug": "^4.3.4",
"ts-api-utils": "^1.3.0"
},
@@ -1606,11 +1601,10 @@
}
},
"node_modules/@typescript-eslint/types": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.16.0.tgz",
- "integrity": "sha512-NzrHj6thBAOSE4d9bsuRNMvk+BvaQvmY4dDglgkgGC0EW/tB3Kelnp3tAKH87GEwzoxgeQn9fNGRyFJM/xd+GQ==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.17.0.tgz",
+ "integrity": "sha512-gY2TVzeve3z6crqh2Ic7Cr+CAv6pfb0Egee7J5UAVWCpVvDI/F71wNfolIim4FE6hT15EbpZFVUj9j5i38jYXA==",
"dev": true,
- "license": "MIT",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
},
@@ -1620,14 +1614,13 @@
}
},
"node_modules/@typescript-eslint/typescript-estree": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.16.0.tgz",
- "integrity": "sha512-E2+9IzzXMc1iaBy9zmo+UYvluE3TW7bCGWSF41hVWUE01o8nzr1rvOQYSxelxr6StUvRcTMe633eY8mXASMaNw==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.17.0.tgz",
+ "integrity": "sha512-JqkOopc1nRKZpX+opvKqnM3XUlM7LpFMD0lYxTqOTKQfCWAmxw45e3qlOCsEqEB2yuacujivudOFpCnqkBDNMw==",
"dev": true,
- "license": "BSD-2-Clause",
"dependencies": {
- "@typescript-eslint/types": "8.16.0",
- "@typescript-eslint/visitor-keys": "8.16.0",
+ "@typescript-eslint/types": "8.17.0",
+ "@typescript-eslint/visitor-keys": "8.17.0",
"debug": "^4.3.4",
"fast-glob": "^3.3.2",
"is-glob": "^4.0.3",
@@ -1653,7 +1646,6 @@
"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
"dev": true,
- "license": "MIT",
"dependencies": {
"balanced-match": "^1.0.0"
}
@@ -1663,7 +1655,6 @@
"resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
"integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
"dev": true,
- "license": "ISC",
"dependencies": {
"brace-expansion": "^2.0.1"
},
@@ -1675,16 +1666,15 @@
}
},
"node_modules/@typescript-eslint/utils": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.16.0.tgz",
- "integrity": "sha512-C1zRy/mOL8Pj157GiX4kaw7iyRLKfJXBR3L82hk5kS/GyHcOFmy4YUq/zfZti72I9wnuQtA/+xzft4wCC8PJdA==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.17.0.tgz",
+ "integrity": "sha512-bQC8BnEkxqG8HBGKwG9wXlZqg37RKSMY7v/X8VEWD8JG2JuTHuNK0VFvMPMUKQcbk6B+tf05k+4AShAEtCtJ/w==",
"dev": true,
- "license": "MIT",
"dependencies": {
"@eslint-community/eslint-utils": "^4.4.0",
- "@typescript-eslint/scope-manager": "8.16.0",
- "@typescript-eslint/types": "8.16.0",
- "@typescript-eslint/typescript-estree": "8.16.0"
+ "@typescript-eslint/scope-manager": "8.17.0",
+ "@typescript-eslint/types": "8.17.0",
+ "@typescript-eslint/typescript-estree": "8.17.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -1703,13 +1693,12 @@
}
},
"node_modules/@typescript-eslint/visitor-keys": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.16.0.tgz",
- "integrity": "sha512-pq19gbaMOmFE3CbL0ZB8J8BFCo2ckfHBfaIsaOZgBIF4EoISJIdLX5xRhd0FGB0LlHReNRuzoJoMGpTjq8F2CQ==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.17.0.tgz",
+ "integrity": "sha512-1Hm7THLpO6ww5QU6H/Qp+AusUUl+z/CAm3cNZZ0jQvon9yicgO7Rwd+/WWRpMKLYV6p2UvdbR27c86rzCPpreg==",
"dev": true,
- "license": "MIT",
"dependencies": {
- "@typescript-eslint/types": "8.16.0",
+ "@typescript-eslint/types": "8.17.0",
"eslint-visitor-keys": "^4.2.0"
},
"engines": {
@@ -1725,7 +1714,6 @@
"resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.0.tgz",
"integrity": "sha512-UyLnSehNt62FFhSwjZlHmeokpRK59rcz29j+F1/aDgbkbRTk7wIc9XzdoasMUbRNKDM0qQt/+BJ4BrpFeABemw==",
"dev": true,
- "license": "Apache-2.0",
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
},
@@ -2386,9 +2374,9 @@
}
},
"node_modules/debug": {
- "version": "4.3.7",
- "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
- "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
+ "version": "4.4.0",
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
+ "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
"dev": true,
"dependencies": {
"ms": "^2.1.3"
@@ -2810,19 +2798,19 @@
}
},
"node_modules/eslint-import-resolver-typescript": {
- "version": "3.6.3",
- "resolved": "https://registry.npmjs.org/eslint-import-resolver-typescript/-/eslint-import-resolver-typescript-3.6.3.tgz",
- "integrity": "sha512-ud9aw4szY9cCT1EWWdGv1L1XR6hh2PaRWif0j2QjQ0pgTY/69iw+W0Z4qZv5wHahOl8isEr+k/JnyAqNQkLkIA==",
+ "version": "3.7.0",
+ "resolved": "https://registry.npmjs.org/eslint-import-resolver-typescript/-/eslint-import-resolver-typescript-3.7.0.tgz",
+ "integrity": "sha512-Vrwyi8HHxY97K5ebydMtffsWAn1SCR9eol49eCd5fJS4O1WV7PaAjbcjmbfJJSMz/t4Mal212Uz/fQZrOB8mow==",
"dev": true,
"dependencies": {
"@nolyfill/is-core-module": "1.0.39",
- "debug": "^4.3.5",
+ "debug": "^4.3.7",
"enhanced-resolve": "^5.15.0",
- "eslint-module-utils": "^2.8.1",
"fast-glob": "^3.3.2",
"get-tsconfig": "^4.7.5",
"is-bun-module": "^1.0.2",
- "is-glob": "^4.0.3"
+ "is-glob": "^4.0.3",
+ "stable-hash": "^0.0.4"
},
"engines": {
"node": "^14.18.0 || >=16.0.0"
@@ -2924,12 +2912,12 @@
}
},
"node_modules/eslint-plugin-import-x": {
- "version": "4.4.3",
- "resolved": "https://registry.npmjs.org/eslint-plugin-import-x/-/eslint-plugin-import-x-4.4.3.tgz",
- "integrity": "sha512-QBprHvhLsfDhP++2T1NnjsOUt6bLDX3NMHaYwAB1FD3xmYTkdFH+HS1OamGhz28jLkRyIZa6UNAzTxbHnJwz5w==",
+ "version": "4.5.0",
+ "resolved": "https://registry.npmjs.org/eslint-plugin-import-x/-/eslint-plugin-import-x-4.5.0.tgz",
+ "integrity": "sha512-l0OTfnPF8RwmSXfjT75N8d6ZYLVrVYWpaGlgvVkVqFERCI5SyBfDP7QEMr3kt0zWi2sOa9EQ47clbdFsHkF83Q==",
"dev": true,
- "license": "MIT",
"dependencies": {
+ "@typescript-eslint/scope-manager": "^8.1.0",
"@typescript-eslint/utils": "^8.1.0",
"debug": "^4.3.4",
"doctrine": "^3.0.0",
@@ -6334,15 +6322,14 @@
}
},
"node_modules/typescript-eslint": {
- "version": "8.16.0",
- "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.16.0.tgz",
- "integrity": "sha512-wDkVmlY6O2do4V+lZd0GtRfbtXbeD0q9WygwXXSJnC1xorE8eqyC2L1tJimqpSeFrOzRlYtWnUp/uzgHQOgfBQ==",
+ "version": "8.17.0",
+ "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.17.0.tgz",
+ "integrity": "sha512-409VXvFd/f1br1DCbuKNFqQpXICoTB+V51afcwG1pn1a3Cp92MqAUges3YjwEdQ0cMUoCIodjVDAYzyD8h3SYA==",
"dev": true,
- "license": "MIT",
"dependencies": {
- "@typescript-eslint/eslint-plugin": "8.16.0",
- "@typescript-eslint/parser": "8.16.0",
- "@typescript-eslint/utils": "8.16.0"
+ "@typescript-eslint/eslint-plugin": "8.17.0",
+ "@typescript-eslint/parser": "8.17.0",
+ "@typescript-eslint/utils": "8.17.0"
},
"engines": {
"node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -6375,9 +6362,9 @@
}
},
"node_modules/undici-types": {
- "version": "6.19.8",
- "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.8.tgz",
- "integrity": "sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw==",
+ "version": "6.20.0",
+ "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz",
+ "integrity": "sha512-Ny6QZ2Nju20vw1SRHe3d9jVu6gJ+4e3+MMpqu7pqE5HT6WsTSlce++GQmK5UXS8mzV8DSYHrQH+Xrf2jVcuKNg==",
"dev": true
},
"node_modules/update-browserslist-db": {
diff --git a/package.json b/package.json
index ef21ebc12..ef776cfbd 100644
--- a/package.json
+++ b/package.json
@@ -14,17 +14,17 @@
"@types/debug": "^4.1.12",
"@types/jest": "^29.5.14",
"@types/jest-specific-snapshot": "^0.5.9",
- "@types/node": "^22.9.3",
+ "@types/node": "^22.10.1",
"@types/semver": "^7.5.8",
- "@typescript-eslint/eslint-plugin": "^8.16.0",
- "@typescript-eslint/parser": "^8.16.0",
+ "@typescript-eslint/eslint-plugin": "^8.17.0",
+ "@typescript-eslint/parser": "^8.17.0",
"caller": "^1.1.0",
- "debug": "^4.3.7",
+ "debug": "^4.4.0",
"eslint": "9.14.0",
"eslint-config-prettier": "^9.1.0",
- "eslint-import-resolver-typescript": "^3.6.3",
+ "eslint-import-resolver-typescript": "^3.7.0",
"eslint-plugin-import": "^2.31.0",
- "eslint-plugin-import-x": "^4.4.3",
+ "eslint-plugin-import-x": "^4.5.0",
"eslint-plugin-jest": "^28.9.0",
"eslint-plugin-n": "^17.14.0",
"eslint-plugin-prettier": "^5.2.1",
@@ -39,7 +39,7 @@
"ts-node": "^10.9.2",
"tsconfig-paths": "^4.1.2",
"typescript": "^5.7.2",
- "typescript-eslint": "^8.16.0",
+ "typescript-eslint": "^8.17.0",
"yaml": "^2.6.1"
},
"bundleDependencies": [
From 12c590596457b1736050919a99504e5f8fc550fd Mon Sep 17 00:00:00 2001
From: Tyler Jang
Date: Tue, 10 Dec 2024 12:46:40 -0800
Subject: [PATCH 11/11] (Fix): Upgrade node to 18.20.5 (#933)
Upgrades to LTS for v18 to fix
[error](https://github.com/trunk-io/plugins/actions/runs/12253712255/job/34183042496)
with prisma install.
---
runtimes/node/plugin.yaml | 2 +-
tests/driver/lint_driver.ts | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/runtimes/node/plugin.yaml b/runtimes/node/plugin.yaml
index 6720795ed..6457ca6f6 100644
--- a/runtimes/node/plugin.yaml
+++ b/runtimes/node/plugin.yaml
@@ -59,7 +59,7 @@ runtimes:
- name: NODE_OPTIONS
value: ${env.NODE_OPTIONS}
optional: true
- known_good_version: 18.12.1
+ known_good_version: 18.20.5
version_commands:
- run: node --version
parse_regex: ${semver}
diff --git a/tests/driver/lint_driver.ts b/tests/driver/lint_driver.ts
index fce56c2c5..cee8ce1c9 100644
--- a/tests/driver/lint_driver.ts
+++ b/tests/driver/lint_driver.ts
@@ -94,7 +94,7 @@ runtimes:
enabled:
# required in order to query latest
- go@1.21.0
- - node@18.12.1
+ - node@18.20.5
- python@3.10.8
- ruby@3.1.4
plugins: