[Snyk] Security upgrade eslint from 8.57.0 to 9.0.0#323
[Snyk] Security upgrade eslint from 8.57.0 to 9.0.0#323
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FLATTED-15700433
There was a problem hiding this comment.
Pull request overview
Upgrades the project’s ESLint dev dependency to address a Snyk-reported vulnerability (prototype pollution in a transitive dependency), aligning the dependency tree with ESLint v9.
Changes:
- Bump
eslintfrom v8.x to^9.0.0inpackage.json. - Regenerate
package-lock.jsonto reflect ESLint v9 and updated transitive dependencies.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates ESLint version used by the repo’s npm run lint / npm run lint:fix scripts. |
| package-lock.json | Updates the resolved dependency graph to ESLint v9 and related transitive packages. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| @@ -27,7 +27,7 @@ | |||
| "devDependencies": { | |||
| "@eslint/js": "^8.57.0", | |||
There was a problem hiding this comment.
ESLint was bumped to v9, but the flat config imports @eslint/js (see eslint.config.js), and @eslint/js in devDependencies is still ^8.57.0. This leaves the repo using the v8 recommended config with ESLint v9 and also results in duplicate @eslint/js majors in the lockfile. Update @eslint/js to ^9.0.0 (and regenerate package-lock) so the config version matches the ESLint major.
| "@eslint/js": "^8.57.0", | |
| "@eslint/js": "^9.0.0", |
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-FLATTED-15700433
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution