[Snyk] Upgrade lint-staged from 10.0.9 to 15.2.11 #5

snyk-io · 2025-01-05T16:23:00Z

Snyk has created this PR to upgrade lint-staged from 10.0.9 to 15.2.11.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 110 versions ahead of your current version.
The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Prototype Pollution SNYK-JS-AJV-584908	57	No Known Exploit
Prototype Pollution SNYK-JS-INI-1048974	57	Proof of Concept
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	57	Proof of Concept
Remote Memory Exposure SNYK-JS-BL-608877	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GETFUNCNAME-5923417	57	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	57	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	57	No Known Exploit
Code Injection SNYK-JS-LODASH-1040724	57	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-450202	57	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	57	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	57	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-6139239	57	Proof of Concept
Information Exposure SNYK-JS-SIMPLEGET-2361683	57	Proof of Concept
Information Exposure SNYK-JS-SIMPLEGET-2361683	57	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536528	57	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	57	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	57	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	57	No Known Exploit
Prototype Pollution SNYK-JS-SETVALUE-1540541	57	Proof of Concept
Arbitrary File Write SNYK-JS-TAR-1579155	57	No Known Exploit
Prototype Pollution SNYK-JS-SETVALUE-450213	57	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	57	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	57	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	57	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:is-url:20180319	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-3035488	57	Proof of Concept
Prototype Pollution SNYK-JS-PATHVAL-596926	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	57	Proof of Concept
Information Exposure SNYK-JS-NODEFETCH-2342118	57	No Known Exploit
Prototype Pollution SNYK-JS-XML2JS-5414874	57	Proof of Concept
Validation Bypass SNYK-JS-KINDOF-537849	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:braces:20180219	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	57	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	57	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:github-url-to-object:20180226	57	Proof of Concept

Release notes

Package name: lint-staged

15.2.11 - 2024-12-10
Patch Changes
- #1484 bcfe309 Thanks @ wormsik! - Escape paths containing spaces when using the "shell" option.
- #1487 7dd8caa Thanks @ iiroj! - Do not treat submodule root paths as "staged files". This caused lint-staged to fail to a Git error when only updating the revision of a submodule.
15.2.10 - 2024-09-01
Patch Changes
- #1471 e3f283b Thanks @ iiroj! - Update minor dependencies, including micromatch@~4.0.8.
15.2.9 - 2024-08-13
Patch Changes
- #1463 b69ce2d Thanks @ iiroj! - Set the maximum number of event listeners to the number of tasks. This should silence the console warning MaxListenersExceededWarning: Possible EventEmitter memory leak detected.
15.2.8 - 2024-08-03
Patch Changes
- f0480f0 Thanks @ iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version switched the --show-toplevel flag with --show-cdup, because on Git installed via MSYS2 the former was returning absolute paths that do not work with Node.js child_process. The new flag returns a path relative to the working directory, avoiding the issue.
  
  The GitHub Actions workflow has been updated to install Git via MSYS2, to ensure better future compatibility; using the default Git binary in the GitHub Actions runner was working correctly even with MSYS2.
15.2.7 - 2024-06-12
Patch Changes
- #1440 a51be80 Thanks @ iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version drops the --path-format=absolute option to support earlier git versions since it's also the default behavior. If you are still having trouble, please try upgrading git to the latest version.
15.2.6 - 2024-06-11
Patch Changes
- #1433 119adb2 Thanks @ iiroj! - Use native "git rev-parse" commands to determine git repo root directory and the .git config directory, instead of using custom logic. This hopefully makes path resolution more robust on non-POSIX systems.
15.2.5 - 2024-05-25
Patch Changes
- #1424 31a1f95 Thanks @ iiroj! - Allow approximately equivalent versions of direct dependencies by using the "~" character in the version ranges. This means a more recent patch version of a dependency is allowed if available.
- #1423 91abea0 Thanks @ iiroj! - Improve error logging when failing to read or parse a configuration file
- #1424 ee43f15 Thanks @ iiroj! - Upgrade micromatch@4.0.7
15.2.4 - 2024-05-21
Patch Changes
- 4f4537a Thanks @ iiroj! - Fix release issue with previous version; update dependencies
15.2.2 - 2024-02-05
Patch Changes
- #1391 fdcdad4 Thanks @ iiroj! - Lint-staged no longer tries to load configuration from files that are not checked out. This might happen when using sparse-checkout.
15.2.1 - 2024-01-31
15.2.0 - 2023-12-03
15.1.0 - 2023-11-11
15.0.2 - 2023-10-19
15.0.1 - 2023-10-15
15.0.0 - 2023-10-14
14.0.1 - 2023-08-21
14.0.0 - 2023-08-13
13.3.0 - 2023-08-13
13.2.3 - 2023-06-28
13.2.2 - 2023-04-26
13.2.1 - 2023-04-07
13.2.0 - 2023-03-10
13.1.4 - 2023-03-06
13.1.3 - 2023-03-05
13.1.2 - 2023-02-13
13.1.1 - 2023-02-07
13.1.0 - 2022-12-04
13.0.4 - 2022-11-25
13.0.3 - 2022-06-24
13.0.2 - 2022-06-16
13.0.1 - 2022-06-08
13.0.0 - 2022-06-01
12.5.0 - 2022-05-31
12.4.3 - 2022-05-30
12.4.2 - 2022-05-24
12.4.1 - 2022-04-26
12.4.0 - 2022-04-20
12.3.8 - 2022-04-15
12.3.7 - 2022-03-17
12.3.6 - 2022-03-16
12.3.5 - 2022-03-05
12.3.4 - 2022-02-13
12.3.3 - 2022-02-01
12.3.2 - 2022-01-26
12.3.1 - 2022-01-23
12.3.0 - 2022-01-23
12.2.2 - 2022-01-20
12.2.1 - 2022-01-19
12.2.0 - 2022-01-18
12.1.7 - 2022-01-07
12.1.6 - 2022-01-07
12.1.5 - 2022-01-02
12.1.4 - 2021-12-24
12.1.3 - 2021-12-18
12.1.2 - 2021-11-22
12.1.1 - 2021-11-21
12.1.0 - 2021-11-21
12.0.3 - 2021-11-18
12.0.2 - 2021-11-14
12.0.1 - 2021-11-13
12.0.0 - 2021-11-13
11.3.0-beta.2 - 2021-10-30
11.3.0-beta.1 - 2021-10-04
11.2.6 - 2021-10-26
11.2.5 - 2021-10-26
11.2.4 - 2021-10-23
11.2.3 - 2021-10-10
11.2.2 - 2021-10-09
11.2.1 - 2021-10-09
11.2.0 - 2021-10-04
11.2.0-beta.1 - 2021-10-02
11.1.4 - 2021-10-02
11.1.3 - 2021-10-02
11.1.2 - 2021-08-06
11.1.1 - 2021-07-24
11.1.0 - 2021-07-22
11.0.1 - 2021-07-13
11.0.0 - 2021-05-07
10.5.4 - 2021-02-05
10.5.3 - 2020-12-04
10.5.2 - 2020-11-24
10.5.1 - 2020-10-31
10.5.0 - 2020-10-26
10.4.2 - 2020-10-17
10.4.1 - 2020-10-16
10.4.0 - 2020-09-16
10.3.0 - 2020-09-03
10.2.13 - 2020-08-25
10.2.12 - 2020-08-25
10.2.11 - 2020-06-17
10.2.10 - 2020-06-12
10.2.9 - 2020-06-04
10.2.8 - 2020-06-03
10.2.7 - 2020-05-29
10.2.6 - 2020-05-22
10.2.5 - 2020-05-22
10.2.4 - 2020-05-18
10.2.3 - 2020-05-18
10.2.2 - 2020-05-01
10.2.1 - 2020-04-30
10.2.0 - 2020-04-28
10.1.7 - 2020-04-21
10.1.6 - 2020-04-19
10.1.5 - 2020-04-18
10.1.4 - 2020-04-17
10.1.3 - 2020-04-09
10.1.2 - 2020-04-05
10.1.1 - 2020-03-31
10.1.0 - 2020-03-30
10.0.10 - 2020-03-29
10.0.9 - 2020-03-24

from lint-staged GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade lint-staged from 10.0.9 to 15.2.11. See this package in npm: lint-staged See this project in Snyk: https://app.snyk.io/org/hashim21223445/project/7881ebe4-921e-460c-9f4e-ea78f5ee4bee?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

semanticdiff-com · 2025-01-05T16:23:04Z

Review changes with

Changed Files

File	Status
package.json	0% smaller

snyk-io · 2025-01-05T16:23:16Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade lint-staged from 10.0.9 to 15.2.11 #5

[Snyk] Upgrade lint-staged from 10.0.9 to 15.2.11 #5

Uh oh!

snyk-io bot commented Jan 5, 2025

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Uh oh!

semanticdiff-com bot commented Jan 5, 2025 •

edited

Loading

Uh oh!

snyk-io bot commented Jan 5, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

[Snyk] Upgrade lint-staged from 10.0.9 to 15.2.11 #5

Are you sure you want to change the base?

[Snyk] Upgrade lint-staged from 10.0.9 to 15.2.11 #5

Uh oh!

Conversation

snyk-io bot commented Jan 5, 2025

Snyk has created this PR to upgrade lint-staged from 10.0.9 to 15.2.11.

Issues fixed by the recommended upgrade:

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Uh oh!

semanticdiff-com bot commented Jan 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

snyk-io bot commented Jan 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎉 Snyk checks have passed. No issues have been found so far.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

semanticdiff-com bot commented Jan 5, 2025 •

edited

Loading

snyk-io bot commented Jan 5, 2025 •

edited

Loading