Skip to content

chore(deps): update dependency eslint to ^6.8.0#14

Merged
renovate[bot] merged 1 commit intomasterfrom
renovate/eslint-monorepo
Apr 1, 2026
Merged

chore(deps): update dependency eslint to ^6.8.0#14
renovate[bot] merged 1 commit intomasterfrom
renovate/eslint-monorepo

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jul 29, 2024 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
eslint (source) ^6.1.0 → ^6.8.0 age confidence

Release Notes

eslint/eslint (eslint)

v6.8.0

Compare Source

v6.7.2

Compare Source

  • bc435a9 Fix: isSpaceBetweenTokens() recognizes spaces in JSXText (fixes #​12614) (#​12616) (Toru Nagashima)
  • 4928d51 Fix: don't ignore the entry directory (fixes #​12604) (#​12607) (Toru Nagashima)
  • b41677a Docs: Clarify suggestion's data in Working with Rules (refs #​12606) (#​12617) (Milos Djermanovic)
  • ea16de4 Fix: Support tagged template literal generics in no-unexpected-multiline (#​11698) (Brad Zacher)
  • fa6415d Sponsors: Sync README with website (ESLint Jenkins)
  • e1e158b Sponsors: Sync README with website (ESLint Jenkins)

v6.7.1

Compare Source

  • dd1e9f4 Fix: revert changes to key-spacing due to regression (#​12598) (Kai Cataldo)
  • c644b54 Docs: Update README team and sponsors (ESLint Jenkins)

v6.7.0

Compare Source

v6.6.0

Compare Source

v6.5.1

Compare Source

  • 0d3d7d9 Docs: fix typo in no-magic-numbers (#​12345) (Josiah Rooney)
  • 447ac87 Fix: no-useless-rename handles ExperimentalRestProperty (fixes #​12335) (#​12339) (Kai Cataldo)
  • b6ff73c Sponsors: Sync README with website (ESLint Jenkins)

v6.5.0

Compare Source

  • 73596cb Update: Add enforceForSwitchCase option to use-isnan (#​12106) (Milos Djermanovic)
  • d592a24 Fix: exclude \u000d so new line won't convert to text (fixes #​12027) (#​12031) (zamboney)
  • e85d27a Fix: no-regex-spaces false positives and invalid autofix (fixes #​12226) (#​12231) (Milos Djermanovic)
  • b349bf7 Fix: prefer-named-capture-group incorrect locations (fixes #​12233) (#​12247) (Milos Djermanovic)
  • 7dc1ea9 Fix: no-useless-return autofix removes comments (#​12292) (Milos Djermanovic)
  • 0e68677 Fix: no-extra-bind autofix removes comments (#​12293) (Milos Djermanovic)
  • 6ad7e86 Fix: no-extra-label autofix removes comments (#​12298) (Milos Djermanovic)
  • acec201 Fix: no-undef-init autofix removes comments (#​12299) (Milos Djermanovic)
  • d89390b Fix: use async reading of stdin in bin/eslint.js (fixes #​12212) (#​12230) (Barrie Treloar)
  • 334ca7c Update: no-useless-rename also reports default values (fixes #​12301) (#​12322) (Kai Cataldo)
  • 41bfe91 Update: Fix handling of chained new expressions in new-parens (#​12303) (Milos Djermanovic)
  • 160b7c4 Chore: add autofix npm script (#​12330) (Kai Cataldo)
  • 04b6adb Chore: enable eslint-plugin-jsdoc (refs #​11146) (#​12332) (Kai Cataldo)
  • 9b86167 Docs: Add new ES environments to Configuring ESLint (#​12289) (Milos Djermanovic)
  • c9aeab2 Docs: Add supported ECMAScript version to README (#​12290) (Milos Djermanovic)
  • 8316e7b Fix: no-useless-rename autofix removes comments (#​12300) (Milos Djermanovic)
  • 29c12f1 Chore: cache results in runtime-info (#​12320) (Kai Cataldo)
  • f5537b2 Fix: prefer-numeric-literals autofix removes comments (#​12313) (Milos Djermanovic)
  • 11ae6fc Update: Fix call, new and member expressions in no-extra-parens (#​12302) (Milos Djermanovic)
  • a7894eb New: add --env-info flag to CLI (#​12270) (Kai Cataldo)
  • 61392ff Sponsors: Sync README with website (ESLint Jenkins)
  • 2c6bf8e Docs: English fix (#​12306) (Daniel Nixon)
  • 6f11877 Sponsors: Sync README with website (ESLint Jenkins)
  • 2e202ca Docs: fix links in array-callback-return (#​12288) (Milos Djermanovic)
  • e39c631 Docs: add example for CLIEngine#executeOnText 3rd arg (#​12286) (Kai Cataldo)
  • d4f9a16 Update: add support for JSXFragments in indent rule (fixes #​12208) (#​12210) (Kai Cataldo)
  • c6af95f Sponsors: Sync README with website (ESLint Jenkins)
  • 8cadd52 Sponsors: Sync README with website (ESLint Jenkins)
  • f9fc695 Chore: enable default-param-last (#​12244) (薛定谔的猫)
  • 9984c3e Docs: Update README team and sponsors (ESLint Jenkins)

v6.4.0

Compare Source

  • e915fff Docs: Improve examples and clarify default option (#​12067) (Yuping Zuo)
  • 540296f Update: enforceForClassMembers option to accessor-pairs (fixes #​12063) (#​12192) (Milos Djermanovic)
  • d3c2334 Update: flag nested block with declaration as error (#​12193) (David Waller)
  • b2498d2 Update: Fix handling of property names in no-self-assign (#​12105) (Milos Djermanovic)
  • 1ee61b0 Update: enforceForClassMembers computed-property-spacing (fixes #​12049) (#​12214) (Milos Djermanovic)
  • 520c922 Docs: Added naming convention details to plugin usage (#​12202) (Henrique Barcelos)
  • f826eab Fix: Allow line comment exception in object-curly-spacing (fixes #​11902) (#​12216) (Milos Djermanovic)
  • db2a29b Update: indentation of comment followed by semicolon (fixes #​12232) (#​12243) (Kai Cataldo)
  • ae17d1c Fix: no-sequences is reporting incorrect locations (#​12241) (Milos Djermanovic)
  • 365331a Fix: object-shorthand providing invalid fixes for typescript (#​12260) (Brad Zacher)
  • 1c921c6 New: add no-import-assign (fixes #​12237) (#​12252) (Toru Nagashima)
  • 3be04fd New: Add prefer-regex-literals rule (fixes #​12238) (#​12254) (Milos Djermanovic)
  • 37c0fde Update: Report global Atomics calls in no-obj-calls (fixes #​12234) (#​12258) (Milos Djermanovic)
  • 985c9e5 Fix: space-before-function-paren autofix removes comments (fixes #​12259) (#​12264) (Milos Djermanovic)
  • 01da7d0 Fix: eqeqeq rule reports incorrect locations (#​12265) (Milos Djermanovic)
  • 319e4d8 Docs: adding finally example (#​12256) (Jens Melgaard)
  • d52328f Docs: fix no-sequences with examples (#​12239) (Milos Djermanovic)
  • a41fdc0 Fix: Remove autofixer for no-unsafe-negation (#​12157) (Milos Djermanovic)
  • e38f5fd Update: fix no-octal-escape false negatives after \0 (#​12079) (Milos Djermanovic)
  • 9418fbe Sponsors: Sync README with website (ESLint Jenkins)
  • acc5ec5 Sponsors: Sync README with website (ESLint Jenkins)
  • 460c5ad Sponsors: Sync README with website (ESLint Jenkins)
  • 0313441 New: add rule default-param-last (fixes #​11361) (#​12188) (Chiawen Chen)
  • 7621f5d Update: add more specific linting messages to space-in-parens (#​11121) (Che Fisher)
  • 21eb904 Fix: basePath of OverrideTester (fixes #​12032) (#​12205) (Toru Nagashima)
  • 86e5e65 Sponsors: Sync README with website (ESLint Jenkins)
  • 2b1a13f Fix: no-extra-boolean-cast reports wrong negation node (fixes #​11324) (#​12197) (Milos Djermanovic)
  • ba8c2aa Sponsors: Sync README with website (ESLint Jenkins)
  • a0a9746 Docs: Fix link in no-irregular-whitespace.md (#​12196) (Timo Tijhof)
  • e10eeba Fix: quotes autofix produces syntax error with octal escape sequences (#​12118) (Milos Djermanovic)

v6.3.0

Compare Source

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Jul 29, 2024 •
edited
Loading

⚠️ No Changeset found

Latest commit: 133368b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@renovate renovate Bot force-pushed the renovate/eslint-monorepo branch from f406d43 to ba8481c Compare September 10, 2025 08:53
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Sep 10, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Sep 10, 2025 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedeslint@​6.1.0 ⏵ 6.8.091100100 +150100

View full report

@renovate renovate Bot force-pushed the renovate/eslint-monorepo branch 9 times, most recently from eec1953 to 434ecfe Compare March 31, 2026 20:37
@renovate renovate Bot force-pushed the renovate/eslint-monorepo branch from 434ecfe to 133368b Compare April 1, 2026 00:40
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 1, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Critical
Critical CVE: Handlebars.js has JavaScript Injection via AST Type Confusion

CVE: GHSA-2w6w-674q-4c4q Handlebars.js has JavaScript Injection via AST Type Confusion (CRITICAL)

Affected versions: >= 4.0.0 < 4.7.9

Patched version: 4.7.9

From: ? → npm/jest@24.8.0 → npm/handlebars@4.1.2

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/handlebars@4.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: Prototype Pollution in npm handlebars

CVE: GHSA-w457-6q6x-cgp9 Prototype Pollution in handlebars (CRITICAL)

Affected versions: >= 4.0.0 < 4.3.0; < 3.0.8

Patched version: 4.3.0

From: ? → npm/jest@24.8.0 → npm/handlebars@4.1.2

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/handlebars@4.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: Prototype Pollution in npm handlebars

CVE: GHSA-765h-qjxv-5f44 Prototype Pollution in handlebars (CRITICAL)

Affected versions: < 4.7.7

Patched version: 4.7.7

From: ? → npm/jest@24.8.0 → npm/handlebars@4.1.2

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/handlebars@4.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: Remote code execution in npm handlebars when compiling templates

CVE: GHSA-f2jv-r9rf-7988 Remote code execution in handlebars when compiling templates (CRITICAL)

Affected versions: < 4.7.7

Patched version: 4.7.7

From: ? → npm/jest@24.8.0 → npm/handlebars@4.1.2

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/handlebars@4.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: npm json-schema is vulnerable to Prototype Pollution

CVE: GHSA-896r-f27r-55mw json-schema is vulnerable to Prototype Pollution (CRITICAL)

Affected versions: < 0.4.0

Patched version: 0.4.0

From: ? → npm/json-schema@0.2.3

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/json-schema@0.2.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate Bot merged commit 1dd0263 into master Apr 1, 2026
6 checks passed
@renovate renovate Bot deleted the renovate/eslint-monorepo branch April 1, 2026 05:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants