chore(deps): bump @typescript-eslint/eslint-plugin from 6.21.0 to 7.13.0 #221

dependabot · 2024-06-10T22:15:43Z

Bumps @typescript-eslint/eslint-plugin from 6.21.0 to 7.13.0.

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v7.13.0

7.13.0 (2024-06-10)

🚀 Features

eslint-plugin: [no-dynamic-delete] allow all string literals as index (#9280)

parser, typescript-estree: export withoutProjectParserOptions utility (#9233)

typescript-estree: require import = require() argument to be a string literal (#9226)

typescript-estree: forbid .body, .async, .generator on declare function (#9225)

🩹 Fixes

ast-spec: function-call-like callee should be Expression not LeftHandSideExpression (#9231)

eslint-plugin: [init-declarations] refine report locations (#8893)

eslint-plugin: [no-base-to-string] make error message more nuanced (#9281)

eslint-plugin: [no-unsafe-assignment] be more specific about error types (#8304)

eslint-plugin: [no-magic-numbers] fix implementation of the ignore option (#9167)

scope-manager: handle index signature in class (#9054)

❤️ Thank You

Fotis Papadogeorgopoulos

Joshua Chen

Kirk Waiblinger

Tobiloba Adedeji @tobySolutions

Vinccool96

YeonJuan @yeonjuan

You can read about our versioning strategy and releases on our website.

v7.12.0

7.12.0 (2024-06-03)

🚀 Features

eslint-plugin: [no-useless-template-literals] rename to no-useless-template-expression (deprecate no-useless-template-literals) (#8821)

eslint-plugin: [no-floating-promises] add option 'allowForKnownSafePromises' (#9186)

rule-tester: check for parsing errors in suggestion fixes (#9052)

rule-tester: port checkDuplicateTestCases from ESLint (#9026)

🩹 Fixes

no-useless-template-expression -> no-unnecessary-template-expression (#9174)

eslint-plugin: [no-unnecessary-type-assertion] combine template literal check with const variable check (#8820)

eslint-plugin: [dot-notation] fix false positive when accessing private/protected property with optional chaining (#8851)

eslint-plugin: [explicit-member-accessibility] refine report locations (#8869)

eslint-plugin: [no-unnecessary-type-assertion] declares are always defined, so always check declares (#8901)

eslint-plugin: [prefer-literal-enum-member] allow using member it self on allowBitwiseExpressions (#9114)

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

7.13.0 (2024-06-10)

🚀 Features

typescript-estree: require import = require() argument to be a string literal

typescript-estree: forbid .body, .async, .generator on declare function

eslint-plugin: [no-dynamic-delete] allow all string literals as index

🩹 Fixes

ast-spec: function-call-like callee should be Expression not LeftHandSideExpression

scope-manager: handle index signature in class

eslint-plugin: [init-declarations] refine report locations

eslint-plugin: [no-base-to-string] make error message more nuanced

eslint-plugin: [no-unsafe-assignment] be more specific about error types

eslint-plugin: [no-magic-numbers] fix implementation of the ignore option

❤️ Thank You

Fotis Papadogeorgopoulos

Joshua Chen

Kirk Waiblinger

Tobiloba Adedeji

Vinccool96

YeonJuan

You can read about our versioning strategy and releases on our website.

7.12.0 (2024-06-03)

🚀 Features

eslint-plugin: [no-useless-template-literals] rename to no-useless-template-expression (deprecate no-useless-template-literals)

rule-tester: check for parsing errors in suggestion fixes

rule-tester: port checkDuplicateTestCases from ESLint

eslint-plugin: [no-floating-promises] add option 'allowForKnownSafePromises'

... (truncated)

Commits

8a178ed chore(release): publish 7.13.0
63e53e2 chore(deps): update dependency prettier to v3.3.1 (#9308)
fb52f78 feat(eslint-plugin): [no-dynamic-delete] allow all string literals as index (...
ab2916c chore: enable eslint-plugin/no-property-in-node internally (#9261)
629035f docs: mention rule scripts under Local Development (#9258)
bf5394d fix(eslint-plugin): [no-magic-numbers] fix implementation of the ignore opt...
60fb643 chore(deps): update dependency prettier to v3.3.0 (#9266)
c6e9719 docs(eslint-plugin): [sort-type-constituents] deprecate the rule (#9253)
293fb24 fix(eslint-plugin): [no-unsafe-assignment] be more specific about error types...
cb1720d fix(eslint-plugin): [no-base-to-string] make error message more nuanced (#9281)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 6.21.0 to 7.13.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.13.0/packages/eslint-plugin) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

socket-security · 2024-06-10T22:16:23Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@fission-codes/[email protected]	None	`0`	19.6 kB	fission-bot
npm/@fission-codes/[email protected]	None	`0`	7 kB	fission-bot
npm/@fission-codes/[email protected]	None	`0`	102 kB	fission-bot
npm/@fission-codes/[email protected]	None	`0`	43.5 kB	fission-bot
npm/@typescript-eslint/[email protected]	None	`0`	0 B
npm/[email protected]	None	`0`	322 kB	npm-service-account-multiformats
npm/[email protected]	None	`0`	628 kB	colinmcd94

View full report↗︎

socket-security · 2024-06-10T22:16:26Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note
Install scripts	npm/[email protected]	Install script: postinstall Source: `node install.js`
Potential typo squat	npm/[email protected]	Did you mean: @playwright~~-~~/test (712 times more downloads)
Install scripts	npm/[email protected]	Install script: postinstall Source: `node ./postinstall.js`
Install scripts	npm/[email protected]	Install script: postinstall Source: `node scripts/postinstall`

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]

dependabot bot requested a review from hugomrdias as a code owner June 10, 2024 22:15

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 10, 2024

dependabot bot mentioned this pull request Jun 10, 2024

chore(deps): bump @typescript-eslint/eslint-plugin from 6.21.0 to 7.12.0 #219

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump @typescript-eslint/eslint-plugin from 6.21.0 to 7.13.0 #221

chore(deps): bump @typescript-eslint/eslint-plugin from 6.21.0 to 7.13.0 #221

Uh oh!

dependabot bot commented on behalf of github Jun 10, 2024

Uh oh!

socket-security bot commented Jun 10, 2024

Uh oh!

socket-security bot commented Jun 10, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

chore(deps): bump @typescript-eslint/eslint-plugin from 6.21.0 to 7.13.0 #221

Are you sure you want to change the base?

chore(deps): bump @typescript-eslint/eslint-plugin from 6.21.0 to 7.13.0 #221

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 10, 2024

v7.13.0

7.13.0 (2024-06-10)

🚀 Features

🩹 Fixes

❤️ Thank You

v7.12.0

7.12.0 (2024-06-03)

🚀 Features

🩹 Fixes

7.13.0 (2024-06-10)

🚀 Features

🩹 Fixes

❤️ Thank You

7.12.0 (2024-06-03)

🚀 Features

Uh oh!

socket-security bot commented Jun 10, 2024

Uh oh!

socket-security bot commented Jun 10, 2024

Next steps

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants