Conversation
…-build/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-15274295
|
This upgrade includes major versions for both eslint@7.32.0 → eslint@10.0.0Risk: HIGH This upgrade spans three major versions (v8, v9, and v10) and introduces substantial breaking changes. The most critical change is the complete removal of the traditional Key Breaking Changes:
Recommendation: This is a significant migration. It is highly recommended to follow the official ESLint migration guides for v8, v9, and v10 to update your configuration and rules. babel-loader@8.3.0 → babel-loader@10.0.0Risk: MEDIUM This upgrade also crosses major versions (v9 and v10). Key Breaking Changes:
Recommendation: Verify that your Node.js and webpack versions meet the new requirements. If you are using webpack 4, you will need to upgrade your webpack version as part of this change.
|
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
packages/internal-lib-build/package.jsonpackages/internal-lib-build/package-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-AJV-15274295
Breaking Change Risk
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)