Skip to content

Conversation

@ytterx
Copy link

@ytterx ytterx commented Jan 13, 2026

Updated eslint dependency to >9 as version 7 is EOL, see https://eslint.org/version-support/
This also fixes 3 vulnerabilities in dependencies of eslint that were defined in package-lock.json:

  • Regular Expression Denial of Service (ReDoS) in cross-spawn
  • js-yaml has prototype pollution in merge (<<)
  • brace-expansion Regular Expression Denial of Service vulnerability

These were detected by GitHub dependabot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant