Skip to content

Conversation

Clemens-git76
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade stylelint from 15.1.0 to 16.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 28 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2024-03-26.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: stylelint
  • 16.3.1 - 2024-03-26
  • 16.3.0 - 2024-03-24
  • 16.2.1 - 2024-02-01
    • Fixed: report flags not reporting on subsequent runs when cache is used (#7483) (@ ybiquitous).
    • Fixed: custom-property-no-missing-var-function false positives for properties that can contain author-defined identifiers (#7478) (@ ybiquitous).
    • Fixed: selector-pseudo-class-no-unknown false positives for :seeking, the media loading state and sound state pseudo-classes (#7490) (@ Mouvedia).
    • Fixed: selector-max-specificity false positives with ignoreSelectors option for of <selector> syntax (#7475) (@ ybiquitous).
    • Fixed: function-calc-no-unspaced-operator performance (#7505) (@ ybiquitous).
    • Fixed: validateOptions to report when secondary option object is an empty object or null (#7476) (@ ybiquitous).
    • Fixed: report() error message responsibility for a missing node or line number (#7474) (@ ybiquitous).
  • 16.2.0 - 2024-01-19
    • Added: media-query-no-invalid specific problem messages (#7462) (@ romainmenke).
    • Added: checkContextFunctionalPseudoClasses: [] to selector-max-id (#7380) (@ brigitamaria).
    • Fixed: declaration-property-value-no-unknown false negatives for @ starting-style (#7461) (@ fpetrakov).
    • Fixed: function-no-unknown|value-keyword-case false positives for template literals with line breaks (#7443) (@ Sh031224).
    • Fixed: allowEmptyInput option ignored in configuration object regression (#7446) (@ ybiquitous).
    • Fixed: at-rule-no-unknown false positives for @ starting-style (#7438) (@ fpetrakov).
    • Fixed: ERR_UNSUPPORTED_ESM_URL_SCHEME for --custom-formatter on Windows (#7432) (@ JounQin).
    • Fixed: Error: Could not find <package> message clarity (#7456) (@ jeddy3).
    • Fixed: overrides.files negated pattern regression introduced in 15.0.0 (#7468) (@ ybiquitous).
  • 16.1.0 - 2023-12-25
    • Added: lightness-notation rule (#7366) (@ fpetrakov).
    • Added: ignore: ["keyframe-selectors"] to selector-disallowed-list (#7417) (@ mattxwang).
    • Fixed: selector-pseudo-class-no-unknown false positive for :popover-open (#7425) (@ mattxwang).
    • Fixed: declaration-property-value-no-unknown and other false positives for multiline SCSS interpolation. (#7406) (@ FloEdelmann).
    • Fixed: function-url-quotes false positives for SCSS variable and @ character (#7416) (@ mattxwang).
  • 16.0.2 - 2023-12-11
    • Fixed: ERR_UNSUPPORTED_ESM_URL_SCHEME error on Windows (#7383) (@ JounQin).
  • 16.0.1 - 2023-12-08
  • 16.0.0 - 2023-12-08
    Read more
  • 16.0.0-3 - 2023-11-27

    This is a pre-release version of 16.0.0. For details, see the following documents:

    You can try the pre-release version via:

    npm i stylelint@next
  • 16.0.0-2 - 2023-11-15

    This is a pre-release version of 16.0.0. For details, see the following documents:

    You can try the pre-release version via:

    npm i stylelint@next
  • 16.0.0-1 - 2023-11-14
  • 16.0.0-0 - 2023-11-10
  • 15.11.0 - 2023-10-17
  • 15.10.3 - 2023-08-18
  • 15.10.2 - 2023-07-19
  • 15.10.1 - 2023-07-06
  • 15.10.0 - 2023-07-04
  • 15.9.0 - 2023-06-23
  • 15.8.0 - 2023-06-17
  • 15.7.0 - 2023-06-05
  • 15.6.3 - 2023-06-03
  • 15.6.2 - 2023-05-16
  • 15.6.1 - 2023-05-02
  • 15.6.0 - 2023-04-23
  • 15.5.0 - 2023-04-16
  • 15.4.0 - 2023-04-01
  • 15.3.0 - 2023-03-16
  • 15.2.0 - 2023-02-19
  • 15.1.0 - 2023-02-11
from stylelint GitHub release notes
Commit messages
Package name: stylelint
  • 2d74e26 16.3.1
  • 9b2ca9c Try fixing `npm run version` on `npm run version`
  • d469bcd Prepare 16.3.1 (#7580)
  • b9ae2b2 Bump postcss-import from 16.0.1 to 16.1.0 (#7575)
  • 6bbc5f5 Bump np from 10.0.1 to 10.0.2 (#7574)
  • a422972 Bump the typescript group with 1 update (#7573)
  • f69c57b Fix `selector-max-id` end positions (#7571)
  • 412ae2b Fix import errors for configs and plugins omitting `/index.js` (#7578)
  • e01617e 16.3.0
  • 3158781 Fix `npm run release` (`np`) error (#7570)
  • 98798b0 Prepare 16.3.0 (#7531)
  • 729b0d6 Fix `selector-max-compound-selectors` document in website (#7569)
  • 1796f82 Fix `selector-max-type` end positions (#7518)
  • 46f5eaa Bump np from 10.0.0 to 10.0.1 (#7564)
  • ab2c4cc Bump rollup from 4.12.1 to 4.13.0 (#7561)
  • 91ab819 Bump the csstools-parser group with 3 updates (#7560)
  • dba9a6e Fix `report()` for `index`/`endIndex` zero values (#7565)
  • a02e4dd Add support for `*-deprecation` command-line flags of Node.js (#7550)
  • d758d63 Fix `selector-max-compound-selectors` with `ignoreSelectors` for class selectors (#7559)
  • 8a3f67e Fix `rule-selector-property-disallowed-list` false positives for nesting selectors (#7558)
  • 5078666 Add `ignoreSelectors: []` to `selector-max-compound-selectors` (#7544)
  • 1085e38 Bump np from 9.2.0 to 10.0.0 (#7554)
  • a211d8b Bump known-css-properties from 0.29.0 to 0.30.0 (#7555)
  • f2e7893 Bump husky from 9.0.10 to 9.0.11 (#7553)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants