Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the all-node-dependencies group across 1 directory with 24 updates

Open
Number: #73
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: April 28, 2025 at 03:05 AM UTC
(7 months ago)
Updated: May 19, 2025 at 02:25 AM UTC
(6 months ago)
Labels:
dependencies javascript
Description:

Bumps the all-node-dependencies group with 24 updates in the / directory:

Package From To
@eslint/eslintrc 3.2.0 3.3.1
@eslint/js 9.20.0 9.25.1
@grafana/data 11.5.1 11.6.1
@grafana/runtime 11.5.1 11.6.1
@grafana/ui 11.5.1 11.6.1
@rollup/plugin-node-resolve 16.0.0 16.0.1
@stylistic/eslint-plugin-ts 3.1.0 4.2.0
@swc/core 1.10.16 1.11.22
@swc/jest 0.2.37 0.2.38
@testing-library/react 16.2.0 16.3.0
@types/semver 7.5.8 7.7.0
@typescript-eslint/eslint-plugin 8.24.0 8.31.0
@typescript-eslint/parser 8.24.0 8.31.0
esbuild 0.25.0 0.25.3
eslint 9.20.1 9.25.1
eslint-config-prettier 10.0.1 10.1.2
eslint-plugin-jsdoc 50.6.3 50.6.11
eslint-plugin-react 7.37.4 7.37.5
eslint-plugin-react-hooks 5.1.0 5.2.0
react-router-dom 7.1.5 7.5.2
rollup 4.34.7 4.40.0
rollup-plugin-dts 6.1.1 6.2.1
rollup-plugin-esbuild 6.2.0 6.2.1
typescript 5.7.3 5.8.3

Updates @eslint/eslintrc from 3.2.0 to 3.3.1

Release notes

Sourced from @​eslint/eslintrc's releases.

v3.3.1

3.3.1 (2025-03-11)

Bug Fixes

v3.3.0

3.3.0 (2025-02-21)

Features

Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.1 (2025-03-11)

Bug Fixes

3.3.0 (2025-02-21)

Features

Commits

Updates @eslint/js from 9.20.0 to 9.25.1

Release notes

Sourced from @​eslint/js's releases.

v9.25.1

Bug Fixes

  • cdc8e8c fix: revert directive detection in no-unused-expressions (#19639) (sethamus)

Chores

  • 1f2b057 chore: upgrade @​eslint/js@​9.25.1 (#19642) (Milos Djermanovic)
  • 771317f chore: package.json update for @​eslint/js release (Jenkins)

v9.25.0

Features

  • dcd95aa feat: support TypeScript syntax in no-empty-function rule (#19551) (sethamus)
  • 77d6d5b feat: support TS syntax in no-unused-expressions (#19564) (Sweta Tanwar)
  • 90228e5 feat: support JSRuleDefinition type (#19604) (루밀LuMir)
  • 59ba6b7 feat: add allowObjects option to no-restricted-properties (#19607) (sethamus)
  • db650a0 feat: support TypeScript syntax in no-invalid-this rule (#19532) (Tanuj Kanti)
  • 9535cff feat: support TS syntax in no-loop-func (#19559) (Nitin Kumar)

Bug Fixes

  • 910bd13 fix: nodeTypeKey not being used in NodeEventGenerator (#19631) (StyleShit)

Documentation

  • ca7a735 docs: update no-undef-init when not to use section (#19624) (Tanuj Kanti)
  • 1b870c9 docs: use eslint-config-xo in the getting started guide (#19629) (Nitin Kumar)
  • 5d4af16 docs: add types for multiple rule options (#19616) (Tanuj Kanti)
  • e8f8d57 docs: Update README (GitHub Actions Bot)
  • a40348f docs: no-use-before-define tweaks (#19622) (Kirk Waiblinger)
  • 0ba3ae3 docs: Update README (GitHub Actions Bot)
  • 865dbfe docs: ensure "learn more" deprecation links point to useful resource (#19590) (Kirk Waiblinger)
  • f80b746 docs: add known limitations for no-self-compare (#19612) (Nitin Kumar)
  • 865aed6 docs: Update README (GitHub Actions Bot)

Chores

  • 88dc196 chore: upgrade @​eslint/js@​9.25.0 (#19636) (Milos Djermanovic)
  • 345288d chore: package.json update for @​eslint/js release (Jenkins)
  • affe6be chore: upgrade trunk (#19628) (sethamus)
  • dd20cf2 test: fix no-loop-func test with duplicate variable reports (#19610) (Milos Djermanovic)
  • bd05397 chore: upgrade @eslint/* dependencies (#19606) (Milos Djermanovic)
  • 22ea18b chore: replace invalid int type with number inside JSDocs. (#19597) (Arya Emami)

v9.24.0

Features

  • 556c25b feat: support loading TS config files using --experimental-strip-types (#19401) (Arya Emami)
  • 72650ac feat: support TS syntax in init-declarations (#19540) (Nitin Kumar)
  • 03fb0bc feat: normalize patterns to handle "./" prefix in files and ignores (#19568) (Pixel998)
  • 071dcd3 feat: support TS syntax in no-dupe-class-members (#19558) (Nitin Kumar)
  • cd72bcc feat: Introduce a way to suppress violations (#19159) (Iacovos Constantinou)
  • 2a81578 feat: support TS syntax in no-loss-of-precision (#19560) (Nitin Kumar)
  • 30ae4ed feat: add new options to class-methods-use-this (#19527) (sethamus)
  • b79ade6 feat: support TypeScript syntax in no-array-constructor (#19493) (Tanuj Kanti)

... (truncated)

Changelog

Sourced from @​eslint/js's changelog.

v9.25.1 - April 21, 2025

  • 1f2b057 chore: upgrade @​eslint/js@​9.25.1 (#19642) (Milos Djermanovic)
  • 771317f chore: package.json update for @​eslint/js release (Jenkins)
  • cdc8e8c fix: revert directive detection in no-unused-expressions (#19639) (sethamus)

v9.25.0 - April 18, 2025

  • 88dc196 chore: upgrade @​eslint/js@​9.25.0 (#19636) (Milos Djermanovic)
  • 345288d chore: package.json update for @​eslint/js release (Jenkins)
  • 910bd13 fix: nodeTypeKey not being used in NodeEventGenerator (#19631) (StyleShit)
  • ca7a735 docs: update no-undef-init when not to use section (#19624) (Tanuj Kanti)
  • affe6be chore: upgrade trunk (#19628) (sethamus)
  • 1b870c9 docs: use eslint-config-xo in the getting started guide (#19629) (Nitin Kumar)
  • 5d4af16 docs: add types for multiple rule options (#19616) (Tanuj Kanti)
  • e8f8d57 docs: Update README (GitHub Actions Bot)
  • a40348f docs: no-use-before-define tweaks (#19622) (Kirk Waiblinger)
  • 0ba3ae3 docs: Update README (GitHub Actions Bot)
  • 865dbfe docs: ensure "learn more" deprecation links point to useful resource (#19590) (Kirk Waiblinger)
  • dcd95aa feat: support TypeScript syntax in no-empty-function rule (#19551) (sethamus)
  • 77d6d5b feat: support TS syntax in no-unused-expressions (#19564) (Sweta Tanwar)
  • 90228e5 feat: support JSRuleDefinition type (#19604) (루밀LuMir)
  • f80b746 docs: add known limitations for no-self-compare (#19612) (Nitin Kumar)
  • 59ba6b7 feat: add allowObjects option to no-restricted-properties (#19607) (sethamus)
  • db650a0 feat: support TypeScript syntax in no-invalid-this rule (#19532) (Tanuj Kanti)
  • dd20cf2 test: fix no-loop-func test with duplicate variable reports (#19610) (Milos Djermanovic)
  • 9535cff feat: support TS syntax in no-loop-func (#19559) (Nitin Kumar)
  • bd05397 chore: upgrade @eslint/* dependencies (#19606) (Milos Djermanovic)
  • 22ea18b chore: replace invalid int type with number inside JSDocs. (#19597) (Arya Emami)
  • 865aed6 docs: Update README (GitHub Actions Bot)

v9.24.0 - April 4, 2025

  • ef67420 chore: upgrade @​eslint/js@​9.24.0 (#19602) (Milos Djermanovic)
  • 4946847 chore: package.json update for @​eslint/js release (Jenkins)
  • f857820 docs: update documentation for --experimental-strip-types (#19594) (Nikolas Schröter)
  • 803e4af docs: simplify gitignore path handling in includeIgnoreFile section (#19596) (Thomas Broyer)
  • 6d979cc docs: Update README (GitHub Actions Bot)
  • b23d1c5 fix: deduplicate variable names in no-loop-func error messages (#19595) (Nitin Kumar)
  • 556c25b feat: support loading TS config files using --experimental-strip-types (#19401) (Arya Emami)
  • 82177e4 docs: Update README (GitHub Actions Bot)
  • a995acb chore: correct 'flter'/'filter' typo in package script (#19587) (Josh Goldberg ✨)
  • 72650ac feat: support TS syntax in init-declarations (#19540) (Nitin Kumar)
  • 03fb0bc feat: normalize patterns to handle "./" prefix in files and ignores (#19568) (Pixel998)
  • b9a5efa test: skip symlink test on Windows (#19503) (fisker Cheung)
  • 46eea6d chore: remove Rule & FormatterFunction from shared/types.js (#19556) (Nitin Kumar)
  • fb8cdb8 fix: use any[] type for context.options (#19584) (Francesco Trotta)
  • 071dcd3 feat: support TS syntax in no-dupe-class-members (#19558) (Nitin Kumar)
  • e849dc0 docs: replace existing var with const (#19578) (Sweta Tanwar)
  • bdcc91d chore: modify .editorconfig to keep parity with prettier config (#19577) (Sweta Tanwar)

... (truncated)

Commits
  • 771317f chore: package.json update for @​eslint/js release
  • 345288d chore: package.json update for @​eslint/js release
  • 4946847 chore: package.json update for @​eslint/js release
  • 20591c4 chore: package.json update for @​eslint/js release
  • 129882d chore: formatted files with Prettier via trunk fmt (#19355)
  • a59d0c0 docs: Update docs for defineConfig (#19505)
  • 7a699a6 chore: remove formatting-related lint rules internally (#19473)
  • eed409a chore: package.json update for @​eslint/js release
  • 265e0cf chore: package.json update for @​eslint/js release
  • See full diff in compare view

Updates @grafana/data from 11.5.1 to 11.6.1

Release notes

Sourced from @​grafana/data's releases.

11.6.1

Download page What's new highlights

Features and enhancements

Bug fixes

11.6.0

Download page What's new highlights

Features and enhancements

... (truncated)

Changelog

Sourced from @​grafana/data's changelog.

11.6.1 (2025-04-23)

Features and enhancements

Bug fixes

11.5.4 (2025-04-23)

Features and enhancements

Bug fixes

... (truncated)

Commits
  • 760b917 [release-11.6.1] Prometheus: Add support for cloud partners Prometheus data s...
  • 714ee0e [release-11.6.1] GrafanaUI: Remove blurred background from overlay backdrops ...
  • cbcfe0b [release-11.6.1] Dashboards: Fix time range bug when use_browser_locale is en...
  • 78ca78f Release: 11.6.0 (#102837)
  • 08d88ba [release-11.6.0] Dashboards: Fix time range bug when use_browser_locale is en...
  • 9f280bd [release-11.6.0] Transformations: Fix field naming in Add field from calc (Bi...
  • 1444e9d Transformations: Improve groupBy field selection and aggregated field types (...
  • 5e21b9e Invite User: Add invite user button in top bar (#101809)
  • 14ebec5 Alerting: Allow selection of recording rule write target on per-rule basis. (...
  • 31e92ba Trace View: Add link from the Trace View to the Profiles Drilldown (#101422)
  • Additional commits viewable in compare view

Updates @grafana/runtime from 11.5.1 to 11.6.1

Release notes

Sourced from @​grafana/runtime's releases.

11.6.1

Download page What's new highlights

Features and enhancements

Bug fixes

11.6.0

Download page What's new highlights

Features and enhancements

... (truncated)

Changelog

Sourced from @​grafana/runtime's changelog.

11.6.1 (2025-04-23)

Features and enhancements

Bug fixes

11.5.4 (2025-04-23)

Features and enhancements

Bug fixes

... (truncated)

Commits
  • 78ca78f Release: 11.6.0 (#102837)
  • 4a713bd Plugin: expose nested folder component from core grafana (#97765)
  • cf95a42 ScopesContext: Move export from unstable to regular entrypoint (#101765)
  • 7acfdfa ScopesContext: Move runtime service to unstable (#101600)
  • 6d4a271 Frontend: Expose unstable entrypoints for data and runtime (#101547)
  • 859c12b Grafana UI: Expose unstable entrypoint (#97080)
  • ccc1477 PluginExtensions: Migrate edit profile page to use new plugin components API ...
  • eca045b Build: Reduce repetition in rollup configs (#93916)
  • c969a72 PluginExtensions: Fixed so we expose the proper types for usePluginComponents...
  • cb05ead chore: add react-loading-skeleton to @​grafana/runtime (#100941)
  • Additional commits viewable in compare view

Updates @grafana/ui from 11.5.1 to 11.6.1

Release notes

Sourced from @​grafana/ui's releases.

11.6.1

Download page What's new highlights

Features and enhancements

Package Dependencies
Package:
 react-router-dom
Ecosystem:
npm
Version Change:
7.1.5 → 7.5.2
Update Type:
Minor
Package:
eslint
Ecosystem:
npm
Version Change:
9.20.1 → 9.25.1
Update Type:
Minor
Package:
eslint-config-prettier
Ecosystem:
npm
Version Change:
10.0.1 → 10.1.2
Update Type:
Minor
Package:
eslint-plugin-react-hooks
Ecosystem:
npm
Version Change:
5.1.0 → 5.2.0
Update Type:
Minor
Package:
eslint-plugin-react
Ecosystem:
npm
Version Change:
7.37.4 → 7.37.5
Update Type:
Patch
Package:
typescript
Ecosystem:
npm
Version Change:
5.7.3 → 5.8.3
Update Type:
Minor
Package:
@typescript-eslint/parser
Ecosystem:
npm
Version Change:
8.24.0 → 8.31.0
Update Type:
Minor
Package:
esbuild
Ecosystem:
npm
Version Change:
0.25.0 → 0.25.3
Update Type:
Patch
Package:
@eslint/js
Ecosystem:
npm
Version Change:
9.20.0 → 9.25.1
Update Type:
Minor
Package:
rollup
Ecosystem:
npm
Version Change:
4.34.7 → 4.40.0
Update Type:
Minor
Package:
@swc/core
Ecosystem:
npm
Version Change:
1.10.16 → 1.11.22
Update Type:
Minor
Package:
@typescript-eslint/eslint-plugin
Ecosystem:
npm
Version Change:
8.24.0 → 8.31.0
Update Type:
Minor
Package:
eslint-plugin-jsdoc
Ecosystem:
npm
Version Change:
50.6.3 → 50.6.11
Update Type:
Patch
Package:
@testing-library/react
Ecosystem:
npm
Version Change:
16.2.0 → 16.3.0
Update Type:
Minor
Package:
@stylistic/eslint-plugin-ts
Ecosystem:
npm
Version Change:
3.1.0 → 4.2.0
Update Type:
Major
Package:
@rollup/plugin-node-resolve
Ecosystem:
npm
Version Change:
16.0.0 → 16.0.1
Update Type:
Patch
Package:
@swc/jest
Ecosystem:
npm
Version Change:
0.2.37 → 0.2.38
Update Type:
Patch
Package:
@eslint/eslintrc
Ecosystem:
npm
Version Change:
3.2.0 → 3.3.1
Update Type:
Minor
Package:
@types/semver
Ecosystem:
npm
Version Change:
7.5.8 → 7.7.0
Update Type:
Minor
Package:
@grafana/data
Ecosystem:
npm
Version Change:
11.5.1 → 11.6.1
Update Type:
Minor
Package:
@grafana/runtime
Ecosystem:
npm
Version Change:
11.5.1 → 11.6.1
Update Type:
Minor
Package:
@grafana/ui
Ecosystem:
npm
Version Change:
11.5.1 → 11.6.1
Update Type:
Minor
Package:
rollup-plugin-dts
Ecosystem:
npm
Version Change:
6.1.1 → 6.2.1
Update Type:
Minor
Package:
rollup-plugin-esbuild
Ecosystem:
npm
Version Change:
6.2.0 → 6.2.1
Update Type:
Patch
Security Advisories
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
GHSA-92cp-5422-2mw7 CVE-2025-29923 LOW
### Impact The issue only occurs when the `CLIENT SETINFO` command times out during connection establishment. The following circumstances can cause such a timeout: 1. The client is configured to ...
Grafana's datasource proxy API allows authorization checks to be bypassed
GHSA-9j65-rv5x-4vrf CVE-2025-3454 MODERATE
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauth...
jwt-go allows excessive memory allocation during header parsing
GHSA-mh63-6h87-95cp CVE-2025-30204 HIGH
### Summary Function [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) currently splits (via a call to [strings.Split](...
Grafana vulnerable to authenticated users bypassing dashboard, folder permissions
GHSA-3px7-c4j3-576r CVE-2025-3260 HIGH
A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions (v0alpha1, ...
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 1057768
UUID: 3023573249
Node ID: PR_kwDOIZBN9M6UGGaj
Host: GitHub
Repository: grafana/grafana-async-query-data-js