turborepo
41b32f6f - fix: Upgrade eslint devDependency to fix stack overflow vulnerability (#11610)

Commit
28 days ago
fix: Upgrade eslint devDependency to fix stack overflow vulnerability (#11610) ## Summary Upgrades eslint devDependency in `eslint-plugin-turbo` from 8.57.0 to 9.26.0 to address CVE-2025-6294 (stack overflow with circular references). **Changes:** - Upgrade eslint from 8.57.0 to 9.26.0 (devDependency only) - Upgrade @types/estree from 1.0.5 to 1.0.8 (required by eslint 9) - Remove @types/eslint (eslint 9 has built-in TypeScript types) - Update RuleTester usage in tests: `parserOptions` → `languageOptions` (ESLint 9 API change) - Remove duplicate test cases detected by ESLint 9's stricter RuleTester - Update Linter.Config to Linter.LegacyConfig for eslintrc-style config **Testing:** - All 107 tests pass - Build succeeds - Type checking passes **Note:** This is a devDependency upgrade only. The peerDependency (`eslint: >6.6.0`) remains unchanged, so end users can continue using both ESLint 8.x and 9.x.
Author
Parents
Loading