Skip to content

Conversation

@Dargon789
Copy link
Owner

@Dargon789 Dargon789 commented Jun 13, 2025

snyk-top-banner

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 40 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: eslint
  • 9.27.0 - 2025-05-16

    Features

    • d71e37f feat: Allow flags to be set in ESLINT_FLAGS env variable (#19717) (Nicholas C. Zakas)
    • ba456e0 feat: Externalize MCP server (#19699) (Nicholas C. Zakas)
    • 07c1a7e feat: add allowRegexCharacters to no-useless-escape (#19705) (sethamus)
    • 7bc6c71 feat: add no-unassigned-vars rule (#19618) (Jacob Bandes-Storch)
    • ee40364 feat: convert no-array-constructor suggestions to autofixes (#19621) (sethamus)
    • 32957cd feat: support TS syntax in max-params (#19557) (Nitin Kumar)

    Bug Fixes

    • 5687ce7 fix: correct mismatched removed rules (#19734) (루밀LuMir)
    • dc5ed33 fix: correct types and tighten type definitions in SourceCode class (#19731) (루밀LuMir)
    • de1b5de fix: correct service property name in Linter.ESLintParseResult type (#19713) (Francesco Trotta)
    • 60c3e2c fix: sort keys in eslint-suppressions.json to avoid git churn (#19711) (Ron Waldon-Howe)
    • 9da90ca fix: add allowReserved to Linter.ParserOptions type (#19710) (Francesco Trotta)
    • fbb8be9 fix: add info to ESLint.DeprecatedRuleUse type (#19701) (Francesco Trotta)

    Documentation

    • 25de550 docs: Update description of frozen rules to mention TypeScript (#19736) (Nicholas C. Zakas)
    • bd5def6 docs: Clean up configuration files docs (#19735) (Nicholas C. Zakas)
    • 4d0c60d docs: Add Neovim to editor integrations (#19729) (Maria José Solano)
    • 71317eb docs: Update README (GitHub Actions Bot)
    • 4c289e6 docs: Update README (GitHub Actions Bot)
    • f0f0d46 docs: clarify that unused suppressions cause non-zero exit code (#19698) (Milos Djermanovic)
    • 8ed3273 docs: fix internal usages of ConfigData type (#19688) (Francesco Trotta)
    • eb316a8 docs: add fmt and check sections to Package.json Conventions (#19686) (루밀LuMir)
    • a3a2559 docs: fix wording in Combine Configs (#19685) (Milos Djermanovic)
    • c8d17e1 docs: Update README (GitHub Actions Bot)

    Chores

    • f8f1560 chore: upgrade @ eslint/js@9.27.0 (#19739) (Milos Djermanovic)
    • ecaef73 chore: package.json update for @ eslint/js release (Jenkins)
    • 596fdc6 chore: update dependency @ arethetypeswrong/cli to ^0.18.0 (#19732) (renovate[bot])
    • f791da0 chore: remove unbalanced curly brace from .editorconfig (#19730) (Maria José Solano)
    • e86edee refactor: Consolidate Config helpers (#19675) (Nicholas C. Zakas)
    • cf36352 chore: remove shared types (#19718) (Francesco Trotta)
    • f60f276 refactor: Easier RuleContext creation (#19709) (Nicholas C. Zakas)
    • 58a171e chore: update dependency @ eslint/plugin-kit to ^0.3.1 (#19712) (renovate[bot])
    • 3a075a2 chore: update dependency @ eslint/core to ^0.14.0 (#19715) (renovate[bot])
    • 44bac9d ci: run tests in Node.js 24 (#19702) (Francesco Trotta)
    • 35304dd chore: add missing funding field to packages (#19684) (루밀LuMir)
    • f305beb test: mock process.emitWarning to prevent output disruption (#19687) (Francesco Trotta)
  • 9.26.0 - 2025-05-02

    Features

    • e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670) (sethamus)
    • 0fa2b7a feat: add suggestions for eqeqeq rule (#19640) (Nitin Kumar)
    • dcbdcc9 feat: Add MCP server (#19592) (Nicholas C. Zakas)
    • 2dfd83e feat: add ignoreDirectives option in no-unused-expressions (#19645) (sethamus)

    Bug Fixes

    • 96e84de fix: check cache file existence before deletion (#19648) (sethamus)
    • d683aeb fix: don't crash on tests with circular references in RuleTester (#19664) (Milos Djermanovic)
    • 9736d5d fix: add namespace to Plugin.meta type (#19661) (Milos Djermanovic)
    • 17bae69 fix: update RuleTester.run() type (#19634) (Nitin Kumar)

    Documentation

    • dd98d63 docs: Update README (GitHub Actions Bot)
    • c25e858 docs: Update README (GitHub Actions Bot)
    • b2397e9 docs: Update README (GitHub Actions Bot)
    • addd0a6 docs: fix formatting of unordered lists in Markdown (#19660) (Milos Djermanovic)
    • a21b38d docs: Update README (GitHub Actions Bot)
    • c0721a7 docs: fix double space in command (#19657) (CamWass)

    Chores

    • 5b247c8 chore: upgrade to @ eslint/js@9.26.0 (#19681) (Francesco Trotta)
    • d6fa4ac chore: package.json update for @ eslint/js release (Jenkins)
    • 0958690 chore: disambiguate internal types LanguageOptions and Rule (#19669) (Francesco Trotta)
    • f1c858e chore: fix internal type references to Plugin and Rule (#19665) (Francesco Trotta)
    • 40dd299 refactor: One-shot ESQuery selector analysis (#19652) (Nicholas C. Zakas)
    • 1cfd702 chore: update dependency @ eslint/json to ^0.12.0 (#19656) (renovate[bot])
  • 9.25.1 - 2025-04-21

    Bug Fixes

    • cdc8e8c fix: revert directive detection in no-unused-expressions (#19639) (sethamus)

    Chores

    • 1f2b057 chore: upgrade @ eslint/js@9.25.1 (#19642) (Milos Djermanovic)
    • 771317f chore: package.json update for @ eslint/js release (Jenkins)
  • 9.25.0 - 2025-04-18

    Features

    • dcd95aa feat: support TypeScript syntax in no-empty-function rule (#19551) (sethamus)
    • 77d6d5b feat: support TS syntax in no-unused-expressions (#19564) (Sweta Tanwar)
    • 90228e5 feat: support JSRuleDefinition type (#19604) (루밀LuMir)
    • 59ba6b7 feat: add allowObjects option to no-restricted-properties (#19607) (sethamus)
    • db650a0 feat: support TypeScript syntax in no-invalid-this rule (#19532) (Tanuj Kanti)
    • 9535cff feat: support TS syntax in no-loop-func (#19559) (Nitin Kumar)

    Bug Fixes

    • 910bd13 fix: nodeTypeKey not being used in NodeEventGenerator (#19631) (StyleShit)

    Documentation

    • ca7a735 docs: update no-undef-init when not to use section (#19624) (Tanuj Kanti)
    • 1b870c9 docs: use eslint-config-xo in the getting started guide (#19629) (Nitin Kumar)
    • 5d4af16 docs: add types for multiple rule options (#19616) (Tanuj Kanti)
    • e8f8d57 docs: Update README (GitHub Actions Bot)
    • a40348f docs: no-use-before-define tweaks (#19622) (Kirk Waiblinger)
    • 0ba3ae3 docs: Update README (GitHub Actions Bot)
    • 865dbfe docs: ensure "learn more" deprecation links point to useful resource (#19590) (Kirk Waiblinger)
    • f80b746 docs: add known limitations for no-self-compare (#19612) (Nitin Kumar)
    • 865aed6 docs: Update README (GitHub Actions Bot)

    Chores

    • 88dc196 chore: upgrade @ eslint/js@9.25.0 (#19636) (Milos Djermanovic)
    • 345288d chore: package.json update for @ eslint/js release (Jenkins)
    • affe6be chore: upgrade trunk (#19628) (sethamus)
    • dd20cf2 test: fix no-loop-func test with duplicate variable reports (#19610) (Milos Djermanovic)
    • bd05397 chore: upgrade @ eslint/* dependencies (#19606) (Milos Djermanovic)
    • 22ea18b chore: replace invalid int type with number inside JSDocs. (#19597) (Arya Emami)
  • 9.24.0 - 2025-04-04

    Features

    • 556c25b feat: support loading TS config files using --experimental-strip-types (#19401) (Arya Emami)
    • 72650ac feat: support TS syntax in init-declarations (#19540) (Nitin Kumar)
    • 03fb0bc feat: normalize patterns to handle "./" prefix in files and ignores (#19568) (Pixel998)
    • 071dcd3 feat: support TS syntax in no-dupe-class-members (#19558) (Nitin Kumar)
    • cd72bcc feat: Introduce a way to suppress violations (#19159) (Iacovos Constantinou)
    • 2a81578 feat: support TS syntax in no-loss-of-precision (#19560) (Nitin Kumar)
    • 30ae4ed feat: add new options to class-methods-use-this (#19527) (sethamus)
    • b79ade6 feat: support TypeScript syntax in no-array-constructor (#19493) (Tanuj Kanti)

    Bug Fixes

    • b23d1c5 fix: deduplicate variable names in no-loop-func error messages (#19595) (Nitin Kumar)
    • fb8cdb8 fix: use any[] type for context.options (#19584) (Francesco Trotta)

    Documentation

    • f857820 docs: update documentation for --experimental-strip-types (#19594) (Nikolas Schröter)
    • 803e4af docs: simplify gitignore path handling in includeIgnoreFile section (#19596) (Thomas Broyer)
    • 6d979cc docs: Update README (GitHub Actions Bot)
    • 82177e4 docs: Update README (GitHub Actions Bot)
    • e849dc0 docs: replace existing var with const (#19578) (Sweta Tanwar)
    • 0c65c62 docs: don't pass filename when linting rule examples (#19571) (Milos Djermanovic)
    • 6be36c9 docs: Update custom-rules.md code example of fixer (#19555) (Yifan Pan)

    Build Related

    • 366e369 build: re-enable Prettier formatting for package.json files (#19569) (Francesco Trotta)

    Chores

    • ef67420 chore: upgrade @ eslint/js@9.24.0 (#19602) (Milos Djermanovic)
    • 4946847 chore: package.json update for @ eslint/js release (Jenkins)
    • a995acb chore: correct 'flter'/'filter' typo in package script (#19587) (Josh Goldberg ✨)
    • b9a5efa test: skip symlink test on Windows (#19503) (fisker Cheung)
    • 46eea6d chore: remove Rule & FormatterFunction from shared/types.js (#19556) (Nitin Kumar)
    • bdcc91d chore: modify .editorconfig to keep parity with prettier config (#19577) (Sweta Tanwar)
    • 7790d83 chore: fix some typos in comment (#19576) (todaymoon)
    • 76064a6 test: ignore package-lock.json for eslint-webpack-plugin (#19572) (Francesco Trotta)
  • 9.23.0 - 2025-03-21

    Features

    • 557a0d2 feat: support TypeScript syntax in no-useless-constructor (#19535) (Josh Goldberg ✨)
    • 8320241 feat: support TypeScript syntax in default-param-last (#19431) (Josh Goldberg ✨)
    • 833c4a3 feat: defineConfig() supports "flat/" config prefix (#19533) (Nicholas C. Zakas)
    • 4a0df16 feat: circular autofix/conflicting rules detection (#19514) (Milos Djermanovic)
    • be56a68 feat: support TypeScript syntax in class-methods-use-this (#19498) (Josh Goldberg ✨)

    Bug Fixes

    • 0e20aa7 fix: move deprecated RuleContext methods to subtype (#19531) (Francesco Trotta)
    • cc3bd00 fix: reporting variable used in catch block in no-useless-assignment (#19423) (Tanuj Kanti)
    • d46ff83 fix: no-dupe-keys false positive with proto setter (#19508) (Milos Djermanovic)
    • e732773 fix: navigation of search results on pressing Enter (#19502) (Tanuj Kanti)
    • f4e9c5f fix: allow RuleTester to test files inside node_modules/ (#19499) (fisker Cheung)

    Documentation

    • 5405939 docs: show red underlines in TypeScript examples in rules docs (#19547) (Milos Djermanovic)
    • 48b53d6 docs: replace var with const in examples (#19539) (Nitin Kumar)
    • c39d7db docs: Update README (GitHub Actions Bot)
    • a4f8760 docs: revert accidental changes (#19542) (Francesco Trotta)
    • 280128f docs: add copy button (#19512) (xbinaryx)
    • cd83eaa docs: replace var with const in examples (#19530) (Nitin Kumar)
    • 7ff0cde docs: Update README (GitHub Actions Bot)
    • 996cfb9 docs: migrate sass to module system (#19518) (xbinaryx)
    • 17cb958 docs: replace var with let and const in rule examples (#19515) (Tanuj Kanti)
    • 83e24f5 docs: Replace var with let or const (

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/ac0f230a-8fd5-4aab-9741-067f5b70c683?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel
Copy link

vercel bot commented Jun 13, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
hardhat-project-uz7z ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 13, 2025 4:11pm

@codesandbox
Copy link

codesandbox bot commented Jun 13, 2025

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

@sourcery-ai
Copy link

sourcery-ai bot commented Jun 13, 2025

Reviewer's Guide

This PR performs a single dependency bump, updating the ESLint version in the hardhat-network-helpers package from 8.x to the latest 9.27.0 release.

File-Level Changes

Change Details Files
Upgrade ESLint dependency to v9.27.0
  • Change the "eslint" version spec in package.json from "^8.44.0" to "^9.27.0"
packages/hardhat-network-helpers/package.json

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@socket-security
Copy link

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. It is recommended to resolve "Warn" alerts too. Learn more about Socket for GitHub.

Action Severity Alert (click for details)
Block Critical
crypto-js@3.3.0 has a Critical CVE.

CVE: GHSA-xwcq-pm8m-c4vf crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard (CRITICAL)

Affected versions: < 4.2.0

Patched version: 4.2.0

From: pnpm-lock.yamlnpm/crypto-js@3.3.0

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/crypto-js@3.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Block Critical
elliptic@6.5.4 has a Critical CVE.

CVE: GHSA-vjh7-7g9h-fjfh Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) (CRITICAL)

Affected versions: < 6.6.1

Patched version: 6.6.1

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/elliptic@6.5.4

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/elliptic@6.5.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
antlr4ts@0.5.0-alpha.4 has a License Policy Violation.

License: BSD-3-Clause-HP (package/LICENSE)

From: pnpm-lock.yamlnpm/hardhat-gas-reporter@1.0.10npm/antlr4ts@0.5.0-alpha.4

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/antlr4ts@0.5.0-alpha.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
axios@0.21.4 has a High CVE.

CVE: GHSA-jr5f-v2jv-69x6 axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL (HIGH)

Affected versions: >= 1.0.0 < 1.8.2; < 0.30.0

Patched version: 0.30.0

From: pnpm-lock.yamlnpm/axios@0.21.4

ℹ Read more on: This package | This alert | What is a CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/axios@0.21.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
axios@1.7.7 has a High CVE.

CVE: GHSA-jr5f-v2jv-69x6 axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL (HIGH)

Affected versions: >= 1.0.0 < 1.8.2; < 0.30.0

Patched version: 0.30.0

From: pnpm-lock.yamlnpm/@ledgerhq/hw-app-eth@6.42.5npm/axios@1.7.7

ℹ Read more on: This package | This alert | What is a CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/axios@1.7.7. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
bcrypt-pbkdf@1.0.2 has a License Policy Violation.

License: BSD-3-Clause-HP (package/LICENSE)

From: pnpm-lock.yamlnpm/bcrypt-pbkdf@1.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/bcrypt-pbkdf@1.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
caniuse-lite@1.0.30001703 has a License Policy Violation.

License: CC-BY-4.0 (npm metadata)

License: CC-BY-4.0 (package/LICENSE)

License: CC-BY-4.0 (package/package.json)

From: pnpm-lock.yamlnpm/caniuse-lite@1.0.30001703

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/caniuse-lite@1.0.30001703. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
chai-as-promised@7.1.2 has a License Policy Violation.

License: WTFPL (npm metadata)

License: WTFPL (package/LICENSE.txt)

License: WTFPL (package/package.json)

From: packages/hardhat-chai-matchers/package.jsonnpm/chai-as-promised@7.1.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/chai-as-promised@7.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
cids@0.7.5 has a License Policy Violation.

License: OFL-1.1 (package/docs/assets/fonts/LICENSE.txt)

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/cids@0.7.5

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/cids@0.7.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
es5-ext@0.10.64 is Protestware or potentially unwanted behavior.

Note: The script attempts to run a local post-install script, which could potentially contain malicious code. The error handling suggests that it is designed to fail silently, which is a common tactic in malicious scripts.

From: pnpm-lock.yamlnpm/es5-ext@0.10.64

ℹ Read more on: This package | This alert | What is protestware?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Consider that consuming this package may come along with functionality unrelated to its primary purpose.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/es5-ext@0.10.64. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
es5-ext@0.10.64 is Protestware or potentially unwanted behavior.

Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale

From: pnpm-lock.yamlnpm/es5-ext@0.10.64

ℹ Read more on: This package | This alert | What is protestware?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Consider that consuming this package may come along with functionality unrelated to its primary purpose.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/es5-ext@0.10.64. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
eth-gas-reporter@0.2.27 has a License Policy Violation.

License: GPL-3.0-only (package/mock/contracts/EtherRouter/EtherRouter.sol)

License: GPL-3.0-only (package/mock/contracts/EtherRouter/Resolver.sol)

From: pnpm-lock.yamlnpm/hardhat-gas-reporter@1.0.10npm/eth-gas-reporter@0.2.27

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eth-gas-reporter@0.2.27. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
glob@7.2.0 has a License Policy Violation.

License: CC-BY-SA-4.0 (package/LICENSE)

From: pnpm-lock.yamlnpm/glob@7.2.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/glob@7.2.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
highlightjs-solidity@2.0.6 has a License Policy Violation.

License: WTFPL (package/LICENSE)

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/highlightjs-solidity@2.0.6

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/highlightjs-solidity@2.0.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@ensdomains/ens@0.4.5 is Deprecated.

Reason: Please use @ensdomains/ens-contracts

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@ensdomains/ens@0.4.5

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@ensdomains/ens@0.4.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@ensdomains/resolver@0.2.4 is Deprecated.

Reason: Please use @ensdomains/ens-contracts

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@ensdomains/resolver@0.2.4

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@ensdomains/resolver@0.2.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@nomiclabs/hardhat-solpp@2.0.1 is an Unpopular package.

Location: Package overview

From: package-lock.jsonnpm/@nomiclabs/hardhat-solpp@2.0.1

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@nomiclabs/hardhat-solpp@2.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/abi-utils@1.0.3 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/abi-utils@1.0.3

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/abi-utils@1.0.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/blockchain-utils@0.1.9 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/blockchain-utils@0.1.9

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/blockchain-utils@0.1.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/codec@0.17.3 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/codec@0.17.3

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/codec@0.17.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/compile-common@0.9.8 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/compile-common@0.9.8

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/compile-common@0.9.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/contract-schema@3.4.16 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/contract-schema@3.4.16

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/contract-schema@3.4.16. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/debug-utils@6.0.57 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/debug-utils@6.0.57

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/debug-utils@6.0.57. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/error@0.1.1 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/error@0.1.1

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/error@0.1.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
@truffle/error@0.2.2 is Deprecated.

Reason: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

From: pnpm-lock.yamlnpm/@nomiclabs/truffle-contract@4.5.10npm/@truffle/error@0.2.2

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@truffle/error@0.2.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

See 9 more rows in the dashboard

View full report

@github-actions
Copy link

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/eslint ^9.27.0 🟢 7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities🟢 100 existing vulnerabilities detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits

Scanned Files

  • packages/hardhat-network-helpers/package.json

@Dargon789 Dargon789 merged commit 45c3e18 into main Jun 14, 2025
17 of 27 checks passed
@Dargon789 Dargon789 deleted the snyk-upgrade-ff3dae60d0ff5beafa8c74192f969ea0 branch June 14, 2025 19:01
Dargon789 added a commit that referenced this pull request Jun 19, 2025
* Delete .changeset/bright-onions-switch.md

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update dependency-review.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update puppet-lint.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update .github/workflows/puppet-lint.yml

Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update puppet-lint.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update config.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update puppet-lint.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update pnpm-lock.yaml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* feat: upgrade eslint from 8.57.1 to 9.27.0

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/3027ecf9-6dcb-4a74-84ae-5ca403a87797?utm_source=github&utm_medium=referral&page=upgrade-pr

* feat: upgrade @types/node from 16.18.126 to 22.15.21

Snyk has created this PR to upgrade @types/node from 16.18.126 to 22.15.21.

See this package in npm:
@types/node

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/3027ecf9-6dcb-4a74-84ae-5ca403a87797?utm_source=github&utm_medium=referral&page=upgrade-pr

* feat: upgrade prettier from 2.4.1 to 3.5.3

Snyk has created this PR to upgrade prettier from 2.4.1 to 3.5.3.

See this package in npm:
prettier

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/b02177c9-ba8a-4805-84de-fee48dbb6a8e?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade prettier from 2.4.1 to 3.5.3

Snyk has created this PR to upgrade prettier from 2.4.1 to 3.5.3.

See this package in npm:
prettier

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/f10ad62c-38d9-4570-945c-64d14b140176?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* fix: upgrade typescript from 5.0.4 to 5.8.3

Snyk has created this PR to upgrade typescript from 5.0.4 to 5.8.3.

See this package in npm:
typescript

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/f10ad62c-38d9-4570-945c-64d14b140176?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade eslint from 8.57.1 to 9.27.0

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/cbb7e0cc-b034-482b-a5cc-73cc26277cee?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* feat: upgrade @typescript-eslint/parser from 5.61.0 to 8.32.1

Snyk has created this PR to upgrade @typescript-eslint/parser from 5.61.0 to 8.32.1.

See this package in npm:
@typescript-eslint/parser

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/493afec9-46ee-406c-b759-34d7a4fd4246?utm_source=github&utm_medium=referral&page=upgrade-pr

* fix: upgrade typescript from 5.0.4 to 5.8.3

Snyk has created this PR to upgrade typescript from 5.0.4 to 5.8.3.

See this package in npm:
typescript

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/493afec9-46ee-406c-b759-34d7a4fd4246?utm_source=github&utm_medium=referral&page=upgrade-pr

* feat: upgrade ethers from 5.8.0 to 6.14.1

Snyk has created this PR to upgrade ethers from 5.8.0 to 6.14.1.

See this package in npm:
ethers

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/493afec9-46ee-406c-b759-34d7a4fd4246?utm_source=github&utm_medium=referral&page=upgrade-pr

* feat: upgrade eslint from 8.57.1 to 9.27.0

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/493afec9-46ee-406c-b759-34d7a4fd4246?utm_source=github&utm_medium=referral&page=upgrade-pr

* Update add-label-to-new-issue.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* feat: upgrade rimraf from 3.0.2 to 6.0.1 (#643)

Snyk has created this PR to upgrade rimraf from 3.0.2 to 6.0.1.

See this package in npm:
rimraf

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/58c67ad3-ef01-4b53-a064-85256597d6ae?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade eslint from 8.57.1 to 9.27.0 (#642)

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/58c67ad3-ef01-4b53-a064-85256597d6ae?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* Create  Compile-with-typescript-v4.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Potential fix for code scanning alert no. 248: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update Compile-with-typescript-v4.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update package.json

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update Compile-with-typescript-v4.yml (#647)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update Compile-with-typescript-v4.yml (#658)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* feat: upgrade mocha from 10.8.2 to 11.5.0

Snyk has created this PR to upgrade mocha from 10.8.2 to 11.5.0.

See this package in npm:
mocha

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/b36b87e4-0dcc-47f9-8735-4e8a8b3882f7?utm_source=github&utm_medium=referral&page=upgrade-pr

* feat: upgrade mocha from 10.8.2 to 11.5.0 (#653)

Snyk has created this PR to upgrade mocha from 10.8.2 to 11.5.0.

See this package in npm:
mocha

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/8f73516b-9b7b-4d90-a805-5c8eebf8fe2e?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade @typescript-eslint/eslint-plugin from 5.61.0 to 8.32.1 (#639)

Snyk has created this PR to upgrade @typescript-eslint/eslint-plugin from 5.61.0 to 8.32.1.

See this package in npm:
@typescript-eslint/eslint-plugin

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/58c67ad3-ef01-4b53-a064-85256597d6ae?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade eslint-config-prettier from 8.3.0 to 10.1.5 (#638)

Snyk has created this PR to upgrade eslint-config-prettier from 8.3.0 to 10.1.5.

See this package in npm:
eslint-config-prettier

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/b3b86209-3175-4a86-9d16-9325977c613a?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade eslint-plugin-prettier from 3.4.0 to 5.4.0 (#637)

Snyk has created this PR to upgrade eslint-plugin-prettier from 3.4.0 to 5.4.0.

See this package in npm:
eslint-plugin-prettier

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/b3b86209-3175-4a86-9d16-9325977c613a?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade rimraf from 3.0.2 to 6.0.1 (#636)

Snyk has created this PR to upgrade rimraf from 3.0.2 to 6.0.1.

See this package in npm:
rimraf

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/b3b86209-3175-4a86-9d16-9325977c613a?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* fix: upgrade typescript from 5.0.4 to 5.8.3 (#634)

Snyk has created this PR to upgrade typescript from 5.0.4 to 5.8.3.

See this package in npm:
typescript

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/b3b86209-3175-4a86-9d16-9325977c613a?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade rimraf from 3.0.2 to 6.0.1 (#633)

Snyk has created this PR to upgrade rimraf from 3.0.2 to 6.0.1.

See this package in npm:
rimraf

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/9d331153-a53f-4ab9-b8d6-cf7af96dd110?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade eslint from 8.57.1 to 9.27.0 (#632)

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/9d331153-a53f-4ab9-b8d6-cf7af96dd110?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* fix: upgrade typescript from 5.0.4 to 5.8.3 (#630)

Snyk has created this PR to upgrade typescript from 5.0.4 to 5.8.3.

See this package in npm:
typescript

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/9d331153-a53f-4ab9-b8d6-cf7af96dd110?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade @typescript-eslint/eslint-plugin from 5.61.0 to 8.32.1 (#629)

Snyk has created this PR to upgrade @typescript-eslint/eslint-plugin from 5.61.0 to 8.32.1.

See this package in npm:
@typescript-eslint/eslint-plugin

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/9d331153-a53f-4ab9-b8d6-cf7af96dd110?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade rimraf from 3.0.2 to 6.0.1 (#628)

Snyk has created this PR to upgrade rimraf from 3.0.2 to 6.0.1.

See this package in npm:
rimraf

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/ac0f230a-8fd5-4aab-9741-067f5b70c683?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade eslint from 8.57.1 to 9.27.0 (#627)

Snyk has created this PR to upgrade eslint from 8.57.1 to 9.27.0.

See this package in npm:
eslint

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/ac0f230a-8fd5-4aab-9741-067f5b70c683?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* fix: upgrade typescript from 5.0.4 to 5.8.3 (#625)

Snyk has created this PR to upgrade typescript from 5.0.4 to 5.8.3.

See this package in npm:
typescript

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/ac0f230a-8fd5-4aab-9741-067f5b70c683?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade @typescript-eslint/eslint-plugin from 5.61.0 to 8.32.1 (#624)

Snyk has created this PR to upgrade @typescript-eslint/eslint-plugin from 5.61.0 to 8.32.1.

See this package in npm:
@typescript-eslint/eslint-plugin

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/ac0f230a-8fd5-4aab-9741-067f5b70c683?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* Update Compile-with-typescript-v4.yml (#661)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* feat: upgrade @types/node from 16.18.126 to 22.15.21 (#668)

Snyk has created this PR to upgrade @types/node from 16.18.126 to 22.15.21.

See this package in npm:
@types/node

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/d8b67e09-3b40-4806-96b4-f31119d86353?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade mocha from 10.8.2 to 11.5.0 (#678)

Snyk has created this PR to upgrade mocha from 10.8.2 to 11.5.0.

See this package in npm:
mocha

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/4f4e0939-464d-4396-922e-0341f9ec1a50?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade chai from 4.5.0 to 5.2.0 (#677)

Snyk has created this PR to upgrade chai from 4.5.0 to 5.2.0.

See this package in npm:
chai

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/4f4e0939-464d-4396-922e-0341f9ec1a50?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

* feat: upgrade @typescript-eslint/parser from 5.61.0 to 8.32.1 (#680)

Snyk has created this PR to upgrade @typescript-eslint/parser from 5.61.0 to 8.32.1.

See this package in npm:
@typescript-eslint/parser

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/4dd0af31-1323-4a04-9c4f-b3890bb7bf9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* feat: upgrade prettier from 2.4.1 to 3.5.3 (#683)

Snyk has created this PR to upgrade prettier from 2.4.1 to 3.5.3.

See this package in npm:
prettier

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/4dd0af31-1323-4a04-9c4f-b3890bb7bf9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* fix: upgrade typescript from 5.0.4 to 5.8.3 (#682)

Snyk has created this PR to upgrade typescript from 5.0.4 to 5.8.3.

See this package in npm:
typescript

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/4dd0af31-1323-4a04-9c4f-b3890bb7bf9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* Delete .github/workflows/Compile-with-typescript-v4.yml (#698)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* fix: upgrade @typescript-eslint/eslint-plugin from 8.32.0 to 8.32.1

Snyk has created this PR to upgrade @typescript-eslint/eslint-plugin from 8.32.0 to 8.32.1.

See this package in npm:
@typescript-eslint/eslint-plugin

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/68d22aa9-c18a-4285-89b7-fa91707b9937?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

* Potential fix for code scanning alert no. 226: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Potential fix for code scanning alert no. 214: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update package.json

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Create CNAME

* Update yarn.lock

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update .yarnrc.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update pnpm-workspace.yaml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update SECURITY.md

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update npm-publish-github-packages.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update hardhat-foundry-ci.yml

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update .gitignore

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update add-label-to-new-issue.yml (#710)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* feat: upgrade @typescript-eslint/parser from 5.61.0 to 8.33.0 (#709)

Snyk has created this PR to upgrade @typescript-eslint/parser from 5.61.0 to 8.33.0.

See this package in npm:
@typescript-eslint/parser

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2c0bb5c3-7507-432e-a6b5-2de9762d778b?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

* Revert "Update hardhat-foundry-ci.yml"

This reverts commit e1af7ba.

* Update test-recent-mainnet-block.yml (#711)

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

* Update devcontainer.json

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>

---------

Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 13, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants