Skip to content

Updating eslint dependency to > v9 to make npm audit happy#97

Open
ytterx wants to merge 1 commit intoilammy:masterfrom
ytterx:master
Open

Updating eslint dependency to > v9 to make npm audit happy#97
ytterx wants to merge 1 commit intoilammy:masterfrom
ytterx:master

Conversation

@ytterx
Copy link
Copy Markdown

@ytterx ytterx commented Jan 13, 2026

Updated eslint dependency to >9 as version 7 is EOL, see https://eslint.org/version-support/
This also fixes 3 vulnerabilities in dependencies of eslint that were defined in package-lock.json:

  • Regular Expression Denial of Service (ReDoS) in cross-spawn
  • js-yaml has prototype pollution in merge (<<)
  • brace-expansion Regular Expression Denial of Service vulnerability

These were detected by GitHub dependabot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant