Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade stylelint from 8.4.0 to 10.0.0 #36

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

raywo
Copy link
Owner

@raywo raywo commented May 22, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
Yes Proof of Concept
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: stylelint The new version differs by 250 commits.
  • c789336 Prepare 10.0.0
  • 70c63e0 Update CHANGELOG.md
  • 9b76cec Fix autofix for single-line comments within maps in value-keyword-case (#4019)
  • 49fa75f Update CHANGELOG.md
  • 6308199 Update CHANGELOG.md
  • 4ca75e7 Throw error on non-existent files unless allow-empty-input is enabled (#3965)
  • 5811b65 chore(package): update prettier to version 1.17.0 (#4025)
  • 7c8d769 Replace Node.js legacy API for URL parsing. Fixes #3803 (#4024)
  • 77c70b5 Update dependencies (#4013)
  • a8f93d6 fix(package): update micromatch to version 4.0.0 (#4015)
  • bfbf462 Update CHANGELOG.md
  • 9efd6f4 Remove `styled` and `jsx` syntax options (#4009)
  • 6ab5e1f Update CHANGELOG.md
  • 2b73704 Add ignore: ["comments"] to block-no-empty (#4008)
  • b6f3057 Update CHANGELOG.md
  • 81f4139 Drop Node.js 6 support (#4006)
  • b4dc965 Fix documentation typos and mistakes (#3922)
  • d66354d Update CHANGELOG.md
  • 4ec7170 Fix false negatives for `isStandardSyntaxDeclaration` (#3933)
  • a174409 fix(package): update string-width to version 4.0.0 (#3991)
  • bdd3685 Update CHANGELOG.md
  • e92d5e0 Fix false positives for negative numbers in function-calc-no-invalid (#3921)
  • 59681a0 Update CHANGELOG.md
  • 35c3f5a Apply rule in the order defined in `lib/rules/index.js` (#3923)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants