Skip to content

Conversation

@mend-for-github-com
Copy link

This PR contains the following updates:

Package Type Update Change
eslint-plugin-import dependencies minor 2.27.5 -> 2.28.0

By merging this PR, the issue #58 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
Medium Medium 5.3 CVE-2022-25883
Low Low 3.1 CVE-2025-5889

Release Notes

import-js/eslint-plugin-import (eslint-plugin-import)

v2.28.0

Compare Source

Fixed
  • [no-duplicates]: remove duplicate identifiers in duplicate imports ([#​2577], thanks [@​joe-matsec])
  • [consistent-type-specifier-style]: fix accidental removal of comma in certain cases ([#​2754], thanks [@​bradzacher])
  • [Perf] ExportMap: Improve ExportMap.for performance on larger codebases ([#​2756], thanks [@​leipert])
  • [no-extraneous-dependencies]/TypeScript: do not error when importing inline type from dev dependencies ([#​2735], thanks [@​andyogo])
  • [newline-after-import]/TypeScript: do not error when re-exporting a namespaced import ([#​2832], thanks [@​laurens-dg])
  • [order]: partial fix for [#​2687] (thanks [@​ljharb])
  • [no-duplicates]: Detect across type and regular imports ([#​2835], thanks [@​benkrejci])
  • [extensions]: handle . and .. properly ([#​2778], thanks [@​benasher44])
  • [no-unused-modules]: improve schema (thanks [@​ljharb])
  • [no-unused-modules]: report error on binding instead of parent export ([#​2842], thanks [@​Chamion])
Changed
  • [Docs] [no-duplicates]: fix example schema ([#​2684], thanks [@​simmo])
  • [Docs] [group-exports]: fix syntax highlighting ([#​2699], thanks [@​devinrhode2])
  • [Docs] [extensions]: reference node ESM behavior ([#​2748], thanks [@​xM8WVqaG])
  • [Refactor] [exports-last]: use array.prototype.findlastindex (thanks [@​ljharb])
  • [Refactor] [no-anonymous-default-export]: use object.fromentries (thanks [@​ljharb])
  • [Refactor] [no-unused-modules]: use array.prototype.flatmap (thanks [@​ljharb])

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 4, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-eslint-plugin-import-2.x-lockfile branch 2 times, most recently from 6916a9d to 4b22aed Compare October 1, 2025 08:18
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-eslint-plugin-import-2.x-lockfile branch from 4b22aed to 39dabd5 Compare October 21, 2025 07:21
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-eslint-plugin-import-2.x-lockfile branch from 39dabd5 to 520dae0 Compare December 15, 2025 06:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant