Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SNYK Inflight vulnerability: Update flat-cache #17872

Closed
1 task done
rreeves8 opened this issue Dec 18, 2023 · 8 comments
Closed
1 task done

SNYK Inflight vulnerability: Update flat-cache #17872

rreeves8 opened this issue Dec 18, 2023 · 8 comments
Assignees
Labels
core Relates to ESLint's core APIs and features enhancement This change enhances an existing feature of ESLint

Comments

@rreeves8
Copy link

rreeves8 commented Dec 18, 2023

SNYK Inflight vulnerability

8.56.0

What problem do you want to solve?

Snyk inflight vulnerability causing issues with ESLint for repos using code scanners.

Package file-entry-cache received update #jaredwray/flat-cache#83 which updated rimraf to not use inflight anymore.
Screenshot 2023-12-18 at 2 49 41 PM

ESlint needs to update file-entry-cache to version 8 to then resolve remix.run issue #remix-run/remix#8271

What do you think is the correct solution?

Update flat-cache from 6.0.1 to version 8

Participation

  • I am willing to submit a pull request for this change.
@rreeves8 rreeves8 added core Relates to ESLint's core APIs and features enhancement This change enhances an existing feature of ESLint labels Dec 18, 2023
@rreeves8 rreeves8 changed the title Change Request: (fill in) SNYK Inflight vulnerability: Update flat-cache Dec 18, 2023
@rreeves8
Copy link
Author

I'd create a PR for this but I don't have permission?

@aladdin-add
Copy link
Member

there is a PR: #17892, but the license checking is failing somehow.

@nzakas
Copy link
Member

nzakas commented Dec 22, 2023

Yes, there is a license issue with the new package that needs to be investigated before we can update.

Copy link

Oops! It looks like we lost track of this issue. What do we want to do here? This issue will auto-close in 7 days without an update.

@github-actions github-actions bot added the Stale label Jan 21, 2024
@aladdin-add aladdin-add self-assigned this Jan 22, 2024
@aladdin-add aladdin-add removed the Stale label Jan 22, 2024
@nzakas
Copy link
Member

nzakas commented Jan 22, 2024

We are still waiting for the license to be approved by OSI and Open JS.

@nzakas
Copy link
Member

nzakas commented Jan 29, 2024

The license has been approved. I've updated #17903.

@aladdin-add
Copy link
Member

fixed by #17903.

@ginna-baker
Copy link

Could we get a patch release on v8.57 that includes this? Our project isn't ready to move to v9 yet. I'm willing to help.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
core Relates to ESLint's core APIs and features enhancement This change enhances an existing feature of ESLint
Projects
Archived in project
Development

No branches or pull requests

4 participants