Skip to content

[Snyk] Upgrade eslint-plugin-import from 2.27.5 to 2.32.0 #1702

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade eslint-plugin-import from 2.27.5 to 2.32.0 #1702

wants to merge 1 commit into from

Conversation

Dargon789
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade eslint-plugin-import from 2.27.5 to 2.32.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 7 versions ahead of your current version.

  • The recommended version was released 3 months ago.

Release notes
Package name: eslint-plugin-import from eslint-plugin-import GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade eslint-plugin-import from 2.27.5 to 2.32.0
a48b79a 
Snyk has created this PR to upgrade eslint-plugin-import from 2.27.5 to 2.32.0.

See this package in npm:
eslint-plugin-import

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/2c91b4d5-8055-4239-a4a4-26da9ab76b7c?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel Vercel
Copy link

vercel bot commented Sep 9, 2025

Deployment failed with the following error:

Resource is limited - try again in 4 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/dargon789s-projects?upgradeToPro=build-rate-limit

@codesandbox CodeSandbox
Copy link

codesandbox bot commented Sep 9, 2025

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

gemini-code-assist[bot]
gemini-code-assist bot reviewed Sep 9, 2025
View reviewed changes
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary of Changes

Hello @Dargon789, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request automates the upgrade of the eslint-plugin-import dependency to its latest stable version. This update ensures the project benefits from the newest linting rules, bug fixes, and performance enhancements, contributing to a more robust and maintainable codebase.

Highlights

  • Dependency Upgrade: Upgraded the eslint-plugin-import dependency from version 2.27.5 to 2.32.0.
  • New Features and Enhancements: Introduces a new enforce-node-protocol-usage rule, adds TypeScript types, and enhances existing rules like extensions and order with new options for improved import management and sorting.
  • ESLint v9 and Flat Config Support: Includes support for ESLint v9 and the new Flat Config format, improving compatibility with modern ESLint setups.
  • Bug Fixes and Performance Improvements: Addresses several bug fixes across various rules (e.g., no-unused-modules, no-named-as-default, export) and includes performance optimizations for rules like no-cycle.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in issue comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

@github-actions GitHub Actions
Copy link

github-actions bot commented Sep 9, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/eslint-plugin-import 2.32.0 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 6Found 19/30 approved changesets -- score normalized to 6
Maintained🟢 106 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • packages/hardhat-truffle5/package.json

gemini-code-assist[bot]
gemini-code-assist bot reviewed Sep 10, 2025
View reviewed changes
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request upgrades eslint-plugin-import for the hardhat-truffle5 package. While this is a beneficial update, I've identified an inconsistency. The same dependency exists in the hardhat-web3 package but is not being updated, which could lead to issues. My review comment provides details on this and recommends updating the dependency across all relevant packages in the monorepo for consistency.

packages/hardhat-truffle5/package.json
"eslint": "^9.28.0",
"eslint-config-prettier": "8.3.0",
"eslint-plugin-import": "2.27.5",
"eslint-plugin-import": "2.32.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

While updating this dependency is a good step, I've noticed that another package in this monorepo, hardhat-web3, also depends on eslint-plugin-import but is not being updated in this PR (it remains on version 2.27.5 in packages/hardhat-web3/package.json). To maintain consistency and avoid potential issues arising from different versions of the same dependency within the project, it would be best to update it in all packages simultaneously.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments

Reviewers whose approvals may not affect merge requirements

At least 5 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

status:ready

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Dargon789 @snyk-bot