Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

⬆️ Updates eslint-plugin-unicorn to v48 - autoclosed #877

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Jul 16, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
eslint-plugin-unicorn ^34.0.1 -> ^48.0.0 age adoption passing confidence

Release Notes

sindresorhus/eslint-plugin-unicorn (eslint-plugin-unicorn)

v48.0.0

Compare Source

Improvements
  • Deprecate no-unsafe-regex rule (#​2135) 7b473aa
  • prefer-top-level-await: Ignore promises inside Promise.{all,allSettled,any,race}() (#​2139) d3f6b60
  • no-process-exit: Ignore when using node:worker_threads module (#​2136) 2907805
  • prefer-array-some: Ignore filter calls with literal argument (#​2097) 7a32edb
  • prefer-modern-math-api: Check cases that Math.hypot() should be preferred (#​2080) 9bbc948
  • explicit-length-check: Ignore .length || number (#​1977) b9b8794
Fixes

v47.0.0

Compare Source

Breaking
New rules
Improvements
Fixes

v46.0.1

Compare Source

v46.0.0

Compare Source

Improvements
Fixes

v45.0.2

Compare Source

  • prefer-string-replace-all: Don't crash on invalid pattern (#​2011) 3bbe027
  • prevent-abbreviations: Skip fix for variables used in Vue template (#​2012) 8cd1ded

v45.0.1

Compare Source

v45.0.0

Compare Source

New rules
Improvements
  • prefer-at: Support private fields (#​1929) 60bb455
  • no-useless-undefined: Ignore Array#includes() and Set#has() (#​1951) 8dfd5a7
  • no-useless-spread: Check cloning inline arrays (#​1980) 5d90d73
  • prefer-top-level-await: Ignore expressions in class (#​1976) b90a3aa
  • prefer-string-replace-all: Improve RegExp to string fix (#​1971) b844dbc
  • prefer-string-replace-all: Check pattern even if it's already using .replaceAll (#​1981) e8c5156
  • prefer-string-replace-all: Report all String#replace() when the pattern has g flag (#​1965) 6316f05
  • prefer-string-replace-all: Ignore regex with pipe (#​1962) 76deaa3
  • prefer-regexp-test: Use suggestions if not sure regexp without g flag (#​1954) 505a203
  • no-array-for-each: Skip fix for some edge cases (#​1979) 48efc7a
  • prefer-add-event-listener: Only fix ExpressionStatement, check operator (#​1955) aca21f2
  • prevent-abbreviations: Improve fix for retVal (#​1953) 25cd810
Fixes

v44.0.2

Compare Source

  • no-array-method-this-argument: Ignore lodash.findLast and lodash.findLastIndex (#​1927) 86e8add

v44.0.1

Compare Source

v44.0.0

Compare Source

New rules
Improvements
Fixes
  • no-await-expression-member: Fix crash on TypeScript parser (#​1910) b002e75
  • prevent-abbreviations: Skip fix when variable is JSX component (#​1907) 9ed08ab
  • better-regexp: Don't fix if .source or .toString() is used (#​1903) 8ad592b

v43.0.2

Compare Source

  • prefer-spread: Ignore Array#join().concat() and (a + b).concat() (#​1859) ab71971

v43.0.1

Compare Source

  • Remove prefer-event-target from the recommended preset 4d2faac
    • EventTarget requires Node.js 16 and we target Node.js 14. We'll enable it again in a year when we can target Node.js 16.

v43.0.0

Compare Source

New rules
Breaking
  • Require Node.js 14
Improvements
Fixes

v42.0.0

Compare Source

The project has passed 100 lint rules 🎉

Thanks to everyone that has contributed so far.

And special thanks to our team member @​fisker for doing most of the work on this project. We could not have gotten this far without him.

New rules
Improvements
Fixes

v41.0.1

Compare Source

v41.0.0

Compare Source

New rules
Breaking
Fixes

v40.1.0

Compare Source

v40.0.0

Compare Source

New rules
Improvements
Fixes

v39.0.0

Compare Source

New rules
Improvements
Fixes
  • no-empty-file: Fix false positive with triple-slash directives (#​1605) 6354bb8
  • require-number-to-fixed-digits-argument: Ignore .toFixed from new expression (#​1601) 20d61e7
  • prefer-export-from: Fix bug on fixing export namespace as default (#​1583) b564ff1
  • Add missing additionalProperties to schema (#​1589) 579d05d

v38.0.1

Compare Source

v38.0.0

Compare Source

New rules
Improvements

v37.0.1

Compare Source

v37.0.0

Compare Source

New rules
Improvements

v36.0.0

Compare Source

New rules
Improvements
Fixes

v35.0.0

Compare Source

New rules
Breaking
  • explicit-length-check: Remove greater-than-or-equal option (#​1397) db1a2b5
    • It enabled a style that no one actually uses.
Improvements
Fixes

v34.0.1

Compare Source

v34.0.0

Compare Source

New rules
Improvements
Fixes
  • prefer-array-find and prefer-at: Fix crash on LHS zero index access (#​1373) da1f6d8
  • prefer-prototype-methods: Fix a missing condition on object literal check (#​1332) cec7f11

v33.0.1

Compare Source

  • prefer-prototype-methods: Ignore known object literal methods (#​1330) 639e7af

v33.0.0

Compare Source

New rules
Improvements

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Moscow, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@viezly
Copy link

viezly bot commented Jul 16, 2023

Pull request by bot. No need to analyze

@github-actions
Copy link

Thanks for the PR!

This section of the codebase is owner by https://github.com/AlexRogalskiy/ - if they write a comment saying "LGTM" then it will be merged.

@github-actions
Copy link

Thanks for opening an issue! Make sure you've followed CONTRIBUTING.md.

@github-actions
Copy link

Hello from PR Helper

Is your PR ready for review and processing? Mark the PR ready by including #pr-ready in a comment.

If you still have work to do, even after marking this ready. Put the PR on hold by including #pr-onhold in a comment.

@socket-security
Copy link

Updated and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
jest-puppeteer 4.4.0...5.0.4 eval +40/-8 7.33 MB tonybrix
ts-node 9.1.1...10.9.1 shell, environment +12/-2 68.5 MB cspotcode
typescript 4.1.5...4.9.5 None +0/-0 66.8 MB typescript-bot
eslint-config-prettier 6.15.0...8.8.0 None +25/-17 6.7 MB lydell
qawolf 1.2.0...2.6.1 None +21/-132 3.39 MB jperl
del-cli 3.0.0...4.0.1 None +31/-22 867 kB sindresorhus
husky 5.1.3...7.0.4 None +0/-0 6.06 kB typicode
ts-jest 26.5.1...27.1.5 environment +159/-127 87.2 MB kul
playwright-chromium 1.8.1...1.36.1 None +0/-1 16.4 kB aslushnikov
jest-circus 26.6.3...27.5.1 eval +95/-106 12.3 MB simenb
jest 26.6.3...27.5.1 None +156/-125 86.8 MB simenb
@vercel/node 1.9.0...1.15.4 network +3/-2 64.2 MB vercel-release-bot
jsdom 16.4.0...17.0.0 network +21/-15 5.19 MB domenic
@types/jest 26.0.20...27.5.2 eval +8/-8 356 kB types
coveralls 3.1.0...3.1.1 None +0/-0 33 kB nickmerwin
eslint-plugin-spellcheck 0.0.8...0.0.19 None +25/-17 9.1 MB aotaduy
eslint 7.20.0...7.32.0 None +24/-15 6.68 MB eslintbot
@semantic-release/release-notes-generator 9.0.1...9.0.3 None +58/-51 19.4 MB semantic-release-bot
typedoc 0.20.35...0.21.10 network, shell, environment +7/-5 77.9 MB gerrit0
eslint-plugin-import 2.22.1...2.27.5 None +74/-41 12 MB ljharb
@semantic-release/npm 7.0.10...7.1.3 None +58/-51 19.4 MB semantic-release-bot
eslint-plugin-unicorn 17.2.0...48.0.0 None +37/-23 8.32 MB sindresorhus
semantic-release 17.3.9...17.4.7 None +58/-51 19.4 MB semantic-release-bot
@semantic-release/github 7.2.0...7.2.3 None +58/-51 19.4 MB semantic-release-bot
eslint-plugin-prettier 3.3.1...3.4.1 filesystem +26/-17 6.78 MB bpscott
@typescript-eslint/parser 4.15.0...4.33.0 None +41/-30 75.7 MB jameshenry
@typescript-eslint/eslint-plugin 4.15.0...4.33.0 None +45/-33 78.9 MB jameshenry
eslint-plugin-jest 23.20.0...24.7.0 None +46/-21 79.2 MB simenb

🚮 Removed packages: eslint-plugin-github@4.1.1, lodash@4.17.20, playwright-core@1.8.1

@socket-security
Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue Package Version Note Source
Native code cpu-features 0.0.8
Install scripts ssh2 1.14.0
  • Install script: install
  • Source: node install.js

Next steps

What's wrong with native code?

Contains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs.

Ensure that native code bindings are expected. Consumers may consider pure JS and functionally similar alternatives to avoid the challenges and risks associated with native code bindings.

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore ssh2@1.14.0
  • @SocketSecurity ignore cpu-features@0.0.8

@renovate renovate bot changed the title ⬆️ Updates eslint-plugin-unicorn to v48 ⬆️ Updates eslint-plugin-unicorn to v48 - autoclosed Oct 30, 2023
@renovate renovate bot closed this Oct 30, 2023
@renovate renovate bot deleted the renovate/eslint-plugin-unicorn-48.x branch October 30, 2023 02:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants