Skip to content

[Snyk] Fix for 1 vulnerabilities - #31

Open
factory-service-snyk wants to merge 1 commit into
mainfrom
snyk-fix-0ed0d7a2d6458eb1bc5572f2295d37db
Open

factory-service-snyk wants to merge 1 commit into
mainfrom
snyk-fix-0ed0d7a2d6458eb1bc5572f2295d37db

Conversation

@factory-service-snyk

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
⚠️ Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Uncontrolled Recursion
SNYK-JS-BRACEEXPANSION-20244952
  710  

Breaking Change Risk

Merge Risk: High

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Recursion

@factory-service-snyk

Copy link
Copy Markdown
Author

Merge Risk: High

This upgrade includes a major two-version jump for ESLint from v8 to v10, which introduces significant and mandatory breaking changes. The Jest upgrade is minor and considered low risk.

eslint@8.57.1 → eslint@10.0.0 (HIGH RISK)

This upgrade crosses two major versions (v9 and v10) and requires immediate developer action to migrate. The legacy configuration system (.eslintrc.js) is no longer supported.

Key Breaking Changes:

  • Mandatory Configuration Migration: Support for .eslintrc.* configuration files has been completely removed in v10. [1, 3, 8] You must migrate to the new eslint.config.js (flat config) format. ESLint provides a migration tool to assist with this process. [4]
  • Node.js Version Requirement: ESLint v9 requires Node.js >=18.18.0, and v10 requires Node.js >=20.19.0. [1, 4, 8] Support for versions 19, 21, and 23 has also been dropped. [1]
  • Rule and Formatter Removals: The require-jsdoc and valid-jsdoc rules were removed in v9. [4] Several core formatters (like checkstyle, compact, junit) were also removed. [7]
  • Updated eslint:recommended: The recommended ruleset has been updated in both v9 and v10, which may result in new linting errors after the upgrade. [1, 4]

Recommendation:
Do not merge this upgrade without first migrating your ESLint configuration to the new flat config format and ensuring your environment meets the new Node.js version requirements. Use the official migration guides and codemods to facilitate the transition.

jest@30.2.0 → jest@30.5.0 (LOW RISK)

This is a minor version upgrade. The changelogs for this range show new features, bug fixes, and dependency updates without any documented breaking changes. [13, 15]

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants